View original document

The full text on this page is automatically extracted from the file linked above and may contain errors and inconsistencies.

Federal Reserve Bank of Dallas
2200 N. PEARL ST.
DALLAS, TX 75201-2272

October 29, 2004

Notice 04-75
TO: The Chief Executive Officer of each
financial institution and others concerned
in the Eleventh Federal Reserve District
SUBJECT
FFIEC Brochure with Information on Internet “Phishing”
DETAILS
The federal banking, thrift, and credit union regulatory agencies have published an
informational brochure to assist consumers in identifying and preventing a new type of Internet
fraud known as “phishing.” Phishing involves the fraudulent acquisition and use of an
individual’s personal or financial information.
The brochure explains the basics of “phishing,” the steps consumers can take to
protect themselves, and the actions that consumers can take if they become a victim of identity
theft. The brochure, Internet Pirates Are Trying to Steal Your Information, is available in a
downloadable form at www.occ.gov/consumer/phishing.htm.
ATTACHMENT
A copy of the Board’s SR letter dated October 19, 2004, is attached.
MORE INFORMATION
For more information, please contact Diane van Gelder, (214) 922-6282, Banking
Supervision Department. Paper copies of this notice or previous Federal Reserve Bank notices
can be printed from our web site at www.dallasfed.org/banking/notices/index.html.

For additional copies, bankers and others are encouraged to use one of the following toll-free numbers in contacting the Federal
Reserve Bank of Dallas: Dallas Office (800) 333-4460; El Paso Branch Intrastate (800) 592-1631, Interstate (800) 351-1012;
Houston Branch Intrastate (800) 392-4162, Interstate (800) 221-0363; San Antonio Branch Intrastate (800) 292-5810.

BOARD OF GOVERNORS
OF THE
FEDERAL RESERVE SYSTEM
WASHINGTON, D. C. 20551
DIVISION OF BANKING
SUPERVISION AND REGULATION

SR 04 - 14 / CA 04- 7
October 19, 2004
TO THE OFFICER IN CHARGE OF SUPERVISION AT EACH FEDERAL RESERVE BANK
AND TO EACH DOMESTIC AND FOREIGN BANKING ORGANIZATION
SUPERVISED BY THE FEDERAL RESERVE
SUBJECT: FFIEC Brochure with Information on Internet "Phishing"
The federal banking, thrift, and credit union regulatory agencies have
published an informational brochure to assist consumers in identifying and preventing
a new type of Internet fraud known as "phishing."
Phishing involves the fraudulent acquisition and use of an individual's
personal or financial information. In a common type of phishing scam, individuals
receive e-mail messages that appear to have been initiated by their financial
institution. These messages may look authentic and often include the institution's logo
and marketing slogans. The e-mail messages usually describe a situation that
requires immediate attention and state that the accounts will be terminated unless the
recipients verify their account information immediately by clicking on a provided web
link.
The web link then takes the e-mail recipients to a screen that asks for
personal or financial information including account numbers, Social Security numbers,
passwords, place of birth, or other information used to identify the consumers. Those
perpetrating the fraud then use this information to access consumers' accounts or
assume the consumers' identities.
The brochure explains the basics of "phishing," the steps consumers
can take to protect themselves, and the actions that consumers can take if they become
a victim of identity theft. The brochure, Internet Pirates Are Trying to Steal Your
Information , is available in a downloadable form through the Federal Reserve Board's
Web site at http://www.federalreserve.gov/consumers.htm.
The brochure also advises consumers:
Never click on the link provided in an e-mail if
there is reason to believe it is fraudulent. The link
may contain a virus.
Do not be intimidated by e-mails that warn of dire
consequences for not following their instructions.

If there is a question about whether the e-mail is
legitimate, go to the company's site by typing in a
site address that you know to be legitimate.
If you fall victim to a phishing scam, act
immediately to protect yourself by alerting your
financial institution, placing fraud alerts on your
credit files, and monitoring your account
statements closely.
Report suspicious e-mails or calls from
third parties to the Federal Trade Commission
either through the Internet at
www.consumer.gov/idtheft, or by calling
1-877-IDTHEFT.
Reserve Banks are asked to distribute this guidance to banking
organizations supervised by the Federal Reserve. If you have any questions regarding
this letter, please contact Suzanne Killian, Manager, Oversight Section, Division of
Consumer and Community Affairs, (202) 452-2090, Adrienne Haden, Manager,
Operational and Information Technology Risk, Division of Banking Supervision and
Regulation, (202) 452-2058, or Donna Parker, Supervisory Financial Analyst, Division
of Banking Supervision and Regulation, (202) 452-2614.
Richard Spillenkothen
Director
Division of Banking
Supervision and Regulation

Sandra Braunstein
Director
Division of Consumer and
Community Affairs