SMiShing, it is here

Our Oklahoma bankers have known for some time that "SMiShing" (SMS, or text, phishing) has been on the radar for cyber criminals. Northwest Oklahoma was hit with a wave of these texts attempting to get card information from unsuspecting customers. This is an effective method of communication since the common perception is texts are from someone we know, making them a credible partner.

In reality, criminals can spam these out in large numbers, hoping to hit some who are customers of the bank they are mimicking. It appears at least hundreds of Oklahomans received one of the two following texts:

15177631659: COMMUNITY STATE BANK ALERT: Your CARD has been DEACTIVATED. Please contact us at 405-788-0032.

12012899924 ; COMMUNITY STATE BANK ALERT YOUR CARD HAS BEEN DEACTIVATED. Please call 405 788 0032.

The texts appear to have all been sent to Pioneer Telephone mobile customers. It is clear Pioneer and Community State Bank, in Hennessey, have not been breached in any way. The fraudsters have simply chosen a bank name and area and are sending to mobile phones in that area. The 517 number above is a Michigan mobile number and has, according to WILX News 10, been used to send similar messages using a credit union name in that area since April 13.

The call-back number in Oklahoma is a Shawnee number and it initially answered with the name of the bank but now just defaults to a mailbox. Pioneer has been exceptionally helpful in determining exactly what has been happening and we have also contacted the Oklahoma Secret Service to obtain its assistance.

If you have customers who have received the text, you just need to verify they have not called the number and given account information. We will keep you notified as any progress is made on the law enforcement front. In the meantime, just be watchful for similar instances in your area, as it is clear they are moving around the country and will likely target other areas of Oklahoma.

We will get some media attention out on this also, so please let the OBA's Elaine Dodd know if you need someone to talk to your local press to get the message out there. Thanks for what you all do to protect your customers. We continue to be impressed with our Oklahoma banks, as your security rocks!

For more information, contact Elaine Dodd (Elaine@oba.com), OBA VP/Fraud Division, 405-424-5252