Stay Alert: Fraudsters Are Targeting Credit Union Members
Some Hughes members have reported receiving phone calls and text messages from individuals pretending to be Hughes employees. These fraudsters may spoof our phone numbers to appear legitimate.
We want to remind all members that Hughes will never ask for your full card number, PIN, one-time passcode (OTP), or online banking credentials. If something feels off, hang up and contact us directly.
What is a Credit Union Impersonation or Spoofing Scam?
Spoofing refers to the act of individuals pretending to be from our credit union by falsifying the information displayed on your caller ID. This allows them to make it appear as though they are calling from a legitimate number. These fraud attempts often involve phone calls (vishing), text messages (smishing), or emails (phishing). The purpose of spoofing is to mislead individuals, often for malicious reasons such as fraud or identity theft.
Once they gain your trust, their goal is to:
- Steal your debit card information
- Bypass security and access your accounts
- Convince you to send money or make fake payments
If you receive any unexpected message or phone call, contact us directly.
How to Protect Yourself from Spoofing Scams
Your best defense against spoofing and fraud is awareness. Here are a few steps you can take to keep your account and personal information safe:
- Never share sensitive information. Hughes will never ask for details like your full card number, PIN, one-time passcode (OTP), or online banking credentials.
- Do not trust caller ID alone. Fraudsters can spoof our phone numbers to make it look like a Hughes representative is calling. If something does not feel right, hang up and contact us directly.
- Watch for urgent or unexpected messages. Scammers often create a sense of urgency to pressure you into acting quickly.
- Use strong passwords and two-factor authentication when available. This adds an extra layer of protection to your online banking account.
- Monitor your accounts regularly. Look for unfamiliar transactions and report any suspicious activity right away.
Frequently Asked Questions
How do I report fraud on my account?
What do I do if I experience identity theft?
If you suspect you have been a victim of identity theft, visit
IdentityTheft.gov to report and start on a recovery plan.
Checking PLUS account holders have access to their very own licensed attorney to assist in filing police reports, contacting financial institutions, creditors, credit bureaus and even utility companies on their behalf.
How do I report a cyber crime?
About This Badge
This credit union is a proud member of the National Credit Union Information Sharing Analysis Organization (NCU-ISAO)—a nonprofit, member-driven network focused on strengthening cybersecurity and fraud protection across the credit union industry. For more information, visit NCU-ISAO.
Your Safety Matters:
Hughes Federal Credit Union will never call to ask you for the following information: Account Number, Social Security Number, Date of Birth, Online Banking username and password, your debit or credit card number or PIN.
Members Should be Advised to:
- Avoid clicking on unsolicited links, even if they appear legitimate.
- Be cautious when apps request extensive permissions, especially after installation.
- Enable multi-factor authentication to add a layer of protection.
- Only download financial apps from official sources such as the Apple App Store or Google Play.
- Report any suspicious activity to their financial institution immediately.
Report Scams
If you think that you may have fallen victim to one of these scams, please contact us.
Contact Us
Helpful Resources
Click here to learn more about Fraud Protection.
Read the FTC's tips on Avoiding and Reporting Scams.
Watch our recorded webinar about Identity Theft & Fraud and learn about ways to prevent thieves from accessing your data.
