USAA “Account Verification” Phishing Scam

Outline:
Email purporting to be from financial services group USAA claims that your banking security validation has expired and, therefore, you must click a button to sign on and validate your account ownership.



Analysis:
The email is not from USAA. It is a phishing scam that attempts to trick you into supplying your personal and financial data to cybercriminals.

If you click on the “Validate” button,  you will be taken to a fraudulent website that asks you to log on to your USAA account. Next, you will be taken to a fake form that asks you to provide your USAA credit card number, pin, security code, and a large amount of other personally identifying information. The criminals can collect all of this information and use it to commit credit card fraud and identity theft.

USAA has published information about such scam attempts on its website.

Scams like this one are very common.




Example:
USAA "Account Verification" Phishing Scam



Last updated: March 3, 2017
First published: March 3, 2017
By Brett M. Christensen
About Hoax-Slayer

References
USAA “Incoming Payment Transfer” Phishing Scam Email
USAA – How do I identify and avoid scams?
Phishing Scams – Anti-Phishing Information