Social Engineering

Don't be a victim of Social Engineering!

What is Social Engineering?

Social Engineering is a method used to steal personal or secure information by tricking or convincing you into revealing it.  This information is then leveraged to access bank accounts, personal records, etc.  Things such as online IDs and passwords, your mother's maiden name, your social security number, previous addresses, where you have your mortgage, how much is the payment, who you work for and how you get your paycheck, what your first dog's name was, where you were born, etc. 

When they call and say they are from your bank. If they really are from your bank, they DON'T need this information.

All these pieces of information can be leveraged to get more information such as passwords from other sources, such as your bank, or to access your accounts through the internet.

Social engineering is usually successful because you want to trust people and provide as much help as possible when you're being asked questions.  Then when it happens, you don't even realize you were robbed of personal information.

Historically, social engineering was used to cause problems or obtain notoriety by the hacker, but today it's typically to access financial systems to steal your money.

There are several common tricks to access information, such as

  • Dumpster Diving – Looking through your trash
  • Social Engineering – phone, texts, emails, mailers
  • Deception – Trying to convince you that they need information
  • Shoulder Surfing – Looking over your shoulder to see what they are typing.
  • Social Networks – Facebook and Twitter

 Key Points to Remember

  • Don't give out personal information, such as best friends name, your first dog, the color of your first car, your first job, where you were born, or where you live to strangers or to people who say they are contacting you from a known company. 
  • NEVER share your user name or password, Social Security Number or Account numbers with anyone.
  • Our Bank will NEVER call for your user name or password.
  • Report spam/fraud to ibankMB@tompkinsfinancial.com  
  • Be alert to anyone that might be trying to watch or listen to the information you’re communicating, if related to personal data or financial topics