Security & Fraud Center
GreenState will never ask for your secure access code.

Please do not share your codes with anyone.

Stay aware to avoid fraud

Know how to spot red flags

Take precautions on your digital devices

Rely on our built-in security technology

Contact us about anything suspicious 

Report fraud on your credit or debit card

Call anytime at (800) 397-3790. You can also follow our card dispute guidance.

Fraud Prevention Best Practices
  • Use strong, unique passwords for your accounts. A password manager can help you choose and remember passwords.
  • Turn on two-factor authentication when possible, especially for accounts used to verify your identity or reset access to other accounts (email and phone accounts). 
  • Be wary of sharing sensitive information in phone calls or text messages. GreenState employees will never ask for your username, password, card details, or account numbers. GreenState employees will never call to ask for a Secure Access Code (the code sent to your device to confirm new logins).
  • Opt in to eStatements in Digital Banking to reduce the opportunity for criminals to gain access to your personal information. It's easy to do and also saves you money. 
  • You can easily share your travel plans with GreenState via Card Controls in Digital Banking so your card transactions process smoothly. 
  • Set up transaction and activity alerts for your cards and accounts in Digital Banking. If you receive alerts for transactions you don't recognize, contact GreenState to report the activity.
  • Do not follow/click on links sent via text messages. If you need to access your GreenState account, log in at GreenState.org or via our Mobile App
  • Certain text messages from GreenState may include plain text URLs like "visit greenstate.org/loans/benefits-services/make-a-payment to make your payment". Some text platforms may automatically display this as a link. Any URL provided in this manner is intended to be typed into an internet browser and will only ever include the single domain "greenstate.org".
GreenState Digital Banking Account Security

GreenState Digital Banking will automatically notify you when new or potentially suspicious activity is seen on your account. You'll receive an alert anytime these instances occur: 

  • When you access your account from a new, unregistered device or browser and anytime a new device or browser is successfully registered for your account
  • When your login ID, password, or Secure Access Delivery information changes
  • When any of your other security alert preferences change

If you receive any security alerts for Digital Banking activity that you did not perform, please call (800) 397-3790 or chat with us online as soon as possible to report the activity as suspicious and unauthorized.

Scam Alerts

There's no shortage of scams and schemes criminals use to defraud people around the region and across the country. These areas of concern are not specific to GreenState, but rather general efforts by scammers we have been alerted to by members.

In addition to the following list, the FTC also provides a helpful guide on how to spot spam text messages.

GreenState Credit Union can help you minimize your risk

Our team wants to ensure you, your information, and your financial accounts are protected. Technology makes it easy to manage your accounts, but it also presents opportunities for criminals to defraud people and steal their identities. You can access valuable security information through the links below.

Blocking Numbers

Advice about call blocking and call labeling from the Federal Trade Commission.

Report a Crime

The Internet Crime Complaint Center is the central hub for reporting cyber-enabled crime.

IdentityTheft.gov

The federal government’s one-stop resource for identity theft victims

This recent scam tactic combines spoofed text messages with live phone calls to trick consumers into loading credit/debit card details directly to a fraudster’s mobile device.

The attack begins with the fraudster sending a text message that closely resembles a legitimate verification alert. The text message is soon followed by a live phone call, where the fraudster falsely claims the consumer’s card has been added to an unauthorized iPhone. They explain that to deactivate the device, a verification code must be sent to the cardholder. This triggers a real verification code, which the unassuming cardholder then shares, allowing the fraudster to provision the card to their own device.

The fraudster further manipulates the cardholder by instructing them to respond “N” to subsequent alerts, framing them as “fake” messages. This interferes with legitimate fraud controls and can inadvertently approve suspicious activity.

Red flags:

  • The message originates from a full phone number (e.g., 1-888-888-8888) rather than a five-digit short code.
  • The text message wording differs from standard messaging, including:
    • Asking the cardholder to confirm a transaction was made
    • Providing a callback number
    • Stating a representative will be in contact
    • Mentioning the deactivation of Apple Pay

Best practices:

  • Never share verification codes with anyone, including your financial institution. As a reminder, GreenState will never ask you to share an access code.
  • Be wary of urgency and requests to act quickly.
  • Be mindful that legitimate verification messages (including Apple Pay codes) will always come from a five-digit short code.
  • If you receive suspicious messages or calls, contact GreenState or your other financial institution directly using the number on the back of the physical card.

SIM Swapping – also known as SIM hijacking, is a type of identity theft that generally occurs when victims receive a call from someone impersonating their mobile carrier. During the interaction, the bad actor collects several pieces of personal information, including the PIN needed to access their mobile carrier’s account. Once these details are obtained, the bad actor contacts your mobile carrier, impersonating you, to request a SIM card replacement or transfer to a new device they control. When the swap occurs, scammers can intercept calls and texts, including two-factor authentication codes used to access your accounts on your phone.

Red flags:

  • Sudden loss of cell service
  • Cannot send/receive texts or calls
  • Locked out of your accounts despite entering correct credentials 

Best way to protect yourself:

  • Add a PIN or password to your mobile account and do not share with anyone
  • Utilize SIM Protection with mobile carrier

If you are uncertain about who’s contacting you, the best way to protect your accounts and information is to hang up and contact your mobile carrier immediately. If you feel you have fallen victim to this type of scam, please contact us.

Pig Butchering Scams occur when scammers build trust and a relationship with their victims over weeks or months. Scammers may initiate contact in different ways including "wrong number" text messages or phone calls, emails, or messages on social media platforms. These scammers may pose as a potential friend, business partner, or romantic interest. The scammers ultimate goal is to convince you to invest in legitimate-looking cryptocurrency platforms. These types of platforms are fake and controlled by the scammers who can manipulate the screen to make it appear as if the investments are legitimate and growing. Once the victim has "invested" as much money as the scammer believes they're good for, the scammer steals all of the money. 

The term stems from the scammers fattening up their victims and convincing them to invest more and more as their earnings appear to double, but this is never the case.

If an online friend begins discussing investments and crypto-related conversations, this is often a scam. If they mention "quick returns" or promise your investments will double, or they recommend a specific app or platform for investing, this is a scam. If they aren't a certified crypto broker, please stay wary.

If you feel you have fallen victim to this type of scam, please contact your local law enforcement officials and report the scam to the FTC.

We've received reports that some members are getting email messages asking them to click a link to approve or deny a pending transaction. These are scams and were not sent by GreenState.

If you are uncertain about who's contacting you, the best way to protect your accounts and information is to get in touch with us through our site or by calling the phone number on the back of your debit or credit card.

Example fraud email messages

You should only use wire transfers to send money to individuals you trust. Financial institutions have seen an increase of wire transfer fraud in recent months. 

The best way to prevent wire transfer fraud is by knowing the red flags: 

  • Sender places a rush request
  • Only communicates via email
  • You don’t know the individual
  • An online dating partner requests funds
  • You receive a request to send funds saying your device is compromised

We have received reports of phone calls where scammers claim to work for GreenState and say they’re calling to help resolve fraudulent charges on a debit or credit card. The scammers then provide instructions for resolving the issue by sending funds out via Zelle®.

This is a scam. GreenState will never ask you to resolve any matter by sending funds via Zelle®.

Zelle® transfers are for sending money to friends, family, or individuals who you personally know.

If you’re unsure about a phone call you received the best way to protect your accounts and information is to hang up and contact GreenState online or by calling the phone number on the back of your debit or credit card.

You should use Zelle® to send money only to people you trust, such as friends or family members. Payments cannot be canceled once sent, if the recipient is already enrolled in Zelle®. Money moves directly into the enrolled recipient’s bank account within minutes.

Beware of payment scams. Offers that sound too good to be true probably are. As an example, if a stranger is selling you concert tickets at a steep discount and insisting that you pay with Zelle®, it may be a scam. There is no purchase protection when using Zelle®.

We've received reports that some members are getting email messages asking them to click a link to verify their account or to verify a "recent request." These are scams and were not sent by GreenState.

If you are uncertain about who's contacting you, the best way to protect your accounts and information is get in touch with us online or by calling the phone number on the back of your debit or credit card.

Example fraud email.

Example fraud message.

We have received reports of phone calls to our members coming from an individual claiming to work for GreenState who says they’re calling about foreclosing on a mortgage and to please return their call.

If you’re unsure about a phone call you received the best way to protect your accounts and information is to hang up and contact GreenState online or by calling the phone number on the back of your debit or credit card.

We've received reports that some members are getting text messages asking them to click a link to access their account. This is a scam and was not sent by GreenState.

If you are uncertain about who's contacting you, the best way to protect your accounts and information is get in touch with GreenState online or by calling the phone number on the back of your debit or credit card.

First example of fraud text messages         First example of fraud text messages          First example of fraud text messages


We have received reports of phone calls to our members coming from “GreenState CU” with the caller stating there were pending charges and fraud was suspected. The caller then asks for a few of the numbers of your credit card to “verify your identity.” Never give out your personal information like member numbers and credit card numbers to any caller.

In the event of potentially fraudulent charges, GreenState may reach out to confirm charges, but we will never ask you for your card, account, or personal information. If you do receive a suspicious call or text, please contact us immediately.

If you receive a message from someone on social media encouraging you to send funds for an investment purchase, be aware that this is a common scam tactic. Members have also reported receiving messages from people who appear to be family members or friends. Always keep in mind that someone's social media profile might have been hacked and check with that person through another means of communication if something seems suspicious. 

Frequently Asked Questions

Fraud Prevention

If you clicked on a link from a suspicious email or text message, there is a possibility malware or harmful bugs were installed on your device(s). It is recommended that you logout of online banking, turn off the device, and visit your service provider to have it swept and cleaned.

GreenState will NEVER ask you for your SAC or any other sensitive account information such as password and username. It is recommended that you call our MAC line (319-339-1000) right away and explain the situation or visit your nearest branch.

Please confirm with any joint owners if they were attempting to login around that time. This includes any account that you are joint on. (Son, daughter, spouse, etc.)

Third party companies often utilize a system application to connect your accounts to another financial institution company. Common applications include (not limited to) Venmo, Turbo Tax, and other financial institutions. These system applications ‘test’ your account once a month around the same date to ensure the connection is still opened, allowing future transfers to be quick and seamless. This activity can generate a login alert based on your system alert settings.

If you are still unsure why you received the notification or alert, it is recommended that you call our MAC line (319-339-1000) right away and explain the situation or visit your nearest branch.

You should never allow an unknown party access to any of your devices. Norton, Microsoft, and other trustworthy companies will never request to remote into your device or have you log into your online banking. Shut your device off immediately. It is recommended that you call our MAC line (319-339-1000) right away and explain the situation or visit your nearest branch.

Zelle

Yes. Zelle® uses tokens that assist in sending and receiving funds from person to person. Members can register with either their phone number or email. Once you initiate an outgoing transfer, an authorization text or email will be sent to you for you to confirm or deny.

*Please ensure you know the recipient as once the funds are sent, they are immediately withdrawn from your account. GreenState will NEVER ask you to share your authorization codes. If you feel that you are a victim of a Zelle® scam, please contact us at 319-339-1000, or visit your nearest branch.