Fraud Alert Center


Be alert to the latest scams.

Mail Theft Resulting in Check Fraud & Identity Theft: There has been a national surge in check and identity theft stemming from mail theft as crooks capitalize on the opportunity to intercept holiday greeting cards stuffed with cash, checks and gift cards, as well as everyday bill remittances to your credit card company or utility provider.

Any check sent in the mail is at risk as the number of incidents reported and associated fraud losses continue to climb in all parts of the country. And the risk to the individual exceeds the obvious loss of funds. Since many bill payments are often accompanied by remittance slips containing other private personal and financial information such as account numbers and Social Security numbers, a single envelope could supply a criminal with all they need to commit identity theft as well.

Spot it:

There may be no way of spotting this type of fraud until it's too late since thieves are simply intercepting and redirecting the funds. From the account holder's perspective, payments post to their accounts as expected, so often, the first indication something went wrong is when they receive word from the biller that the payment was never received. Otherwise, when the intended recipient does not expect the delivery - as with checks or gift cards mailed in birthday or holiday cards - there may never be any indication. 

Avoid it:

The only sure-fire way to eliminate your risk is to avoid mailing checks altogether and adopt a few mail-theft-resistant habits:
  • Enroll in electronic statements. Opting for paperless billing and statements reduces the amount of sensitive financial information that sits unsecured in your mailbox. 
  • Make electronic payments at the biller’s website or use the Bill Pay feature of your online banking service. Most bill payments are sent electronically. In cases when mailing a check is necessary – the payee is not able to accept electronic payments, for example – Bill Pay is still a more secure option because, unlike the checks in your checkbook, bank-issued checks do not include your signature. Fraudsters look for checks with signatures because they can be copied or forged.
  • Send holiday cheer using Zelle® (personal accounts only) instead of mailing checks, cash or gift cards. Use the Notes section to add personalized holiday greetings. Remember, you should always know the person to whom you are sending money, no matter the method.
  • Business owners, ask us about ACH Origination for business deposits and payments via electronic transfer. Contact us at 888.671.0400 for more information.
Pairing these best practices with vigilance is your best protection. Report any suspicious contact or activity by calling us at 888.671.0400.
 
Please remember Capital City Bank will never text, call or e-mail and require you to provide your full 16-digit card number, PIN or CVV (security code), or your online banking password. This information is never needed for any reason - not to verify your identify nor to service your account or debit card.
 
If you have received a request like this or any other that concerns you, please contact us right away at the number on the back of your debit card.
 

Read more about other common scams.

 

These scams are committed by fraudsters claiming to be contacting you from your financial institution and often utilize convincing spoofing techniques to help secure your trust.

Spot it:

These scams work because, not only do they use advanced spoofing capabilities to give the appearance of trustworthiness by imitateing familiar phone numbers and e-mail messaging. They also prey on consequences we all fear, such as having our hard-earned money stolen or debit cards shut off.

Your Capital City Bankers want to help ensure you know how to tell the difference if one day you pick up the phone and hear, “This is Capital City Bank calling.” 

Are they:

  • Asking for information only you should have? Neither Capital City Bank, nor any financial institution, needs you to share your debit card number, debit card PIN, debit card CVV, online banking user name or password — not to authenticate you and not to assist with servicing your account or debit card. We won't ask. Not ever.
  • Pressuring you? Fraudsters threaten; your bankers reassure. Scammers create urgency and exploit fear, trust or an emotional need to help someone by claiming immediate action is necessary to avoid consequences. Your banker will never pressure you into a financial decision. Fraudsters, on the other hand, don’t want to give you time to think it through.
  • Stalling or drawing out the call? Fraudsters have to overcome a number of security protocols intended to protect your account against unauthorized access, so they want to keep you on the phone providing information. As your bankers, we know you’ve got life to get back to, so our goal is not to take any more of your time than necessary.
  • Giving unusual instructions like download an app, share Secure Access Codes that are always meant only for you, or participate in a screen share so they can show you activity in your account?
  • Directing you to wire funds, purchase gift cards, mail cash, or scan a QR code to deposit cash into a Bitcoin ATM to rectify an error on your account, pay a fine or avoid serious consequences?

Avoid it:

If receiving a request like this, the safest response is no response. Tell the fraudsters you’re wise to their game by giving them the dial tone. Hang up and call us right away at the number on the back of your debit card.

Learn more about steps you can take, including temporarily freezing your card online, on our website at ccbg.com/topics/fraud-and-security.





































These scams look to take advantage of the trust you have in your financial institution and the measures they put in place to protect you.

Spot it:

Phishing attempts designed to appear like fraud alerts intended to protect you will try to obtain your card number and other sensitive information to “reactivate” a frozen or locked card. They create urgency by playing on our fear of being stranded without a working debit card.

Avoid it:

Scammers are well scripted, organized and convincing, but even the most sophisticated schemes give themselves away if you know what to look for.

Are they:

  • Asking for information only you should have? Neither Capital City Bank, nor any financial institution, needs you to share your debit card number, debit card PIN, debit card CVV, online banking user name or password — not to authenticate you and not to assist with servicing your account or debit card. We won't ask. Not ever.
  • Pressuring you? Fraudsters threaten; your bankers reassure. Scammers create urgency and exploit fear, trust or an emotional need to help someone by claiming immediate action is necessary to avoid consequences. Your banker will never pressure you into a financial decision. Fraudsters, on the other hand, don’t want to give you time to think it through.
  • Stalling or drawing out the call? Fraudsters have to overcome a number of security protocols intended to protect your account against unauthorized access, so they want to keep you on the phone providing information. As your bankers, we know you’ve got life to get back to, so our goal is not to take any more of your time than necessary.
  • Giving unusual instructions like download an app, share Secure Access Codes that are always meant only for you, or participate in a screen share so they can show you activity in your account?
  • Directing you to wire funds, purchase gift cards, mail cash, or scan a QR code to deposit cash into a Bitcoin ATM to rectify an error on your account, pay a fine or avoid serious consequences?
It's also important to keep in mind, scammers have technology now to spoof the name and phone number of any business, so even if the call or text appears to come from Capital City Bank (shows Capital City Bank and/or our phone number in the message or caller id/sender information), the best course of action is to hang up without providing any information and call us at the number on the back of their debit card.

If you have received a request like this or any other that concerns you, please contact us right away at the number on the back of your debit card.



































Scammers may ask you to click a link or download software to allow them to resolve an issue, provide "technical assistance" or better service. 

Even if a caller claims to be from a business you know, be suspicious and contact your banker immediately if they are requesting access to your device for technical assistance. 

Spot it:

These scams usually begin with a call, text or e-mail claiming a problem with your account or debit card to get your attention. They either provide a phone number to call or ask you for a response that will trigger someone to call you (e.g. a text message asking you to confirm a recent purchase. When you reply that you did not make the purchase, they call.) At some point during the call, they say they need access to your device to resolve the issue, and they send a link to click to allow them in. The link may appear to launch some action on your device but this is all part of the deception. Their goal is obtaining your online banking credentials so they can access to your account and steal funds.

Avoid it:

Scammers are well scripted, organized and convincing, but even the most sophisticated schemes give themselves away if you know what to look for.

There are certain things a legitimate business will never do, no matter the circumstances. Do not trust anyone who is:

  • Asking for information only you should have. Neither Capital City Bank, nor any financial institution, needs you to share your debit card number, debit card PIN, debit card CVV, online banking user name or password — not to authenticate you and not to assist with servicing your account or debit card. We won't ask. Not ever.
  • Pressuring you. Fraudsters threaten; your bankers reassure. Scammers create urgency and exploit fear, trust or an emotional need to help someone by claiming immediate action is necessary to avoid consequences. Your banker will never pressure you into a financial decision. Fraudsters, on the other hand, don’t want to give you time to think it through.
  • Stalling or drawing out the call. Fraudsters have to overcome a number of security protocols intended to protect your account against unauthorized access, so they want to keep you on the phone providing information. As your bankers, we know you’ve got life to get back to, so our goal is not to take any more of your time than necessary.
  • Giving unusual instructions like download an app, share Secure Access Codes that are always meant only for you, or participate in a screen share so they can show you activity in your account.
  • Directing you to wire funds, purchase gift cards, mail cash, or scan a QR code to deposit cash into a Bitcoin ATM to rectify an error on your account, pay a fine or avoid serious consequences.

A caution about caller id, links and unverified contact information:

Scammers have spoofing technology that allows them to make any call or text message appear to come from any number, so even if the caller id or sender information looks familiar, do not click links appearing e-mail or text messages, or call phone numbers provided in unexpected calls, texts or e-mails. 

The best course of action is to call us at the number on the back of your debit card or published on our official website. In the event the outreach was legitimate, you can be confident you'll receive the help you need when contacting us that way. 

View our Business Impersonation tab for details about one common type of support app/takeover scam.




































Be alert to scams after the storm.

While our communities focus on recovering from the storm, scammers may be taking aim at those looking to rebuild - and those looking to help. 


CHARITABLE GIVING SCAMS

Looking to capitalize on the generosity of those desiring to help those most affected, scammers may solicit donations, sometimes for a charity that does not exist, but sometimes, using the name of a known and reputable entity, like the American Red Cross, with which they claim to be affiliated. Scammers may approach you by phone, text, mail, e-mail or even going door to door.

Avoid it:

  • If you want to give, the best rule of thumb is to do so through an established, reputable and recognizable organization. If you are approached by someone claiming to be collecting on behalf of a charity you recognize, ask for proof that they are an employee or volunteer.
  • If you are getting pressure to give immediately, you are likely dealing with a scammer - a legitimate charity will welcome your contribution at the time you choose to give.
  • The FTC recommends searching for the charity's name plus "complaints" or "scams."
  • Be wary if you received a thank you for a previous donation you don't remember making that asks for additional support.

 

CONSTRUCTION & REPAIR SCAMS

In the wake of a disaster like a hurricane, fraudsters flock to damaged communities offering contractor, construction or repair services and claim to need an up-front fee to purchase supplies. Once they've received the fee, they disappear without completing the work.

Spot it:

Be on the lookout for red flags that include:

  • unsolicited approach
  • claims to be an out-of-state contractor
  • cannot produce references
  • lacks the usual indicators of a professional business (e.g. uniform shirt, business card, vehicle signage)
Avoid it:
In addition to being wary of an individual or entity that raises any of the red flags above:
  • Before making any payments, verify licenses at www.myfloridalicense.com.
  • Photograph the individual's driver's license or work vehicle, if it has identifying information.
  • Ensure you have a clearly written contract - may be as short as one or two-paragraphs, but clearly states that any deposit will be used to purchase supplies, the work will be completed in a defined amount of time, etc.
  • Avoid paying deposits in cash. Use a credit card, check or payment service like Zelle so you have a record of payment.
  • Don't make a final payment until all the work is completed to your satisfaction.

 

HOMEOWNERS INSURANCE SCAMS

Criminals posing as construction companies that partner with insurance companies may try to obtain policy numbers, coverage details or personal information. They may also attempt to persuade homeowners to sign an Assignment of Benefits (AOB) in exchange for immediate repairs. An AOB transfers rights of benefits to the named party and gives that entity the authority to file a claim, make repair decisions and collect insurance payments without the involvement of the homeowner. Given this authority, the scammer may claim funds above the actual cost of the work. 


OTHER SCAMS
  • Fake Fake Government Assistance - A fraudster pretends to be from a governmental agency and requests an advanced fee or personal information, which they will use to apply for legitimate government benefits to be sent to themselves or open credit card accounts.
    Avoid it: Officials with government disaster assistance agencies such as FEMA or the Small Business Administration (SBA) will never contact  you requesting personal or financial account information, and there is never a fee for the disaster assistance they provide. Ask to see identification and report anyone making this claim to StopFEMAFraud@fema.dhs.gov , 866-223-0814, or https://www.usa.gov/state-consumer/florida.
  • Housing - Involves a fake listing for a home or apartment rental, a landlord who claims to be overseas or otherwise unable to meet in person or communicate except for via e-mail, and requires you to wire money to "hold the unit" before a lease is signed or you have seen the property.
    Avoid it: Always ensure you see the property for rent before making any payments.
  • Job Scams - Preying on out-of-work people, scammers advertises jobs that sound too good to be true (e.g. work from home, mystery shopper, reshipping, "payment processor" who either open bank accounts or use their own to forward payments overseas).
    Avoid it: Do not respond to unsolicited offers of employment. Ensure a company is established and reputable. Never cash or deposit a check and use the proceeds to send money back to the originator or buy gift cards.

Compiled from information sourced from the International Association of Financial Crimes Investigation, Sarasota County Sherriff's Office Federal Trade Commission and USA Today. 



































Scams involving technical support and business impersonation are on the rise.

Even if a caller claims to be from a business you know, be suspicious and contact your banker immediately if they are requesting access to your device for technical assistance or asking you to enter your refund amount into a pop-up window on your screen. 

Spot it:

Impersonation fraud is a scheme where an imposter who identifies themselves as representing a familiar business - or even the government - and asks you to send money. One common claim is you have received too large a refund and must return the overpaid amount. Their goal is to trick you into sending money, giving them access to your bank accounts or even allowing them to use you as a money mule to move funds.

Avoid it:

Scammers are well scripted, organized and convincing, but even the most sophisticated schemes give themselves away if you know what to look for.

There are certain things a legitimate business will never do, no matter the circumstances. Do not trust anyone who is:

  • Asking for information only you should have. Neither Capital City Bank, nor any financial institution, needs you to share your debit card number, debit card PIN, debit card CVV, online banking user name or password — not to authenticate you and not to assist with servicing your account or debit card. We won't ask. Not ever.
  • Pressuring you. Fraudsters threaten; your bankers reassure. Scammers create urgency and exploit fear, trust or an emotional need to help someone by claiming immediate action is necessary to avoid consequences. Your banker will never pressure you into a financial decision. Fraudsters, on the other hand, don’t want to give you time to think it through.
  • Stalling or drawing out the call. Fraudsters have to overcome a number of security protocols intended to protect your account against unauthorized access, so they want to keep you on the phone providing information. As your bankers, we know you’ve got life to get back to, so our goal is not to take any more of your time than necessary.
  • Giving unusual instructions like download an app, share Secure Access Codes that are always meant only for you, or participate in a screen share so they can show you activity in your account.
  • Directing you to wire funds, purchase gift cards, mail cash, or scan a QR code to deposit cash into a Bitcoin ATM to rectify an error on your account, pay a fine or avoid serious consequences.

A caution about links and unverified contact information:
Remember scammers use links in e-mails and text messages to misdirect you to fraudulent sites where they can steal financial information and account credentials. Do not click links appearing e-mail or text messages, or call phone numbers provided in unexpected calls, texts or e-mails. Always go to a company’s website directly when looking for contact information, and do not trust contact information you find in web search results.

 

Explore the key components of the business impersonation scam below.

What you should know:
  • The most commonly impersonated businesses are Amazon followed by Apple, according to the Federal Trade Commission, but the caller could be using the name of any familiar business – even a government agency.
  • Contact can be attempted via phone, text or e-mail.
  • Contact is usually not initiated by you.
  • The name or number on your caller ID might look legitimate because advanced spoofing capability now used widely by scammers allows them to disguise actual caller information.

Scam-Savvy Tips:

  • Legitimate organizations won’t call, text or e-mail to ask for your personal information, including Social Security numbers and bank account details.
  • Stop unwanted calls and texts from reaching you by blocking them on your phone.
  • If you have reason to believe an e-mail or text from a company you do business with is real, it’s always best to verify the sender before clicking any links. But look up their contact information on their website and do not trust phone numbers provided in the message or on your caller ID. Today, these are easily spoofed by scammers.


The "hooks":
  • We owe you a refund.
  • You owe.
  • You’ve won and we need to get you your prize.
    Links to “claim a free prize” commonly lead to a page where you’re asked to provide payment information to cover shipping costs. The only “prize” you’ll receive is unauthorized activity on your card or account.
  • There’s a problem, e.g. an error on your account, a virus on your computer, you are in trouble with the government, there’s been an emergency.
    You can easily confirm suspicions by contacting the company or agency directly instead of following the instructions given on the call or e-mail. Remember to obtain contact information from a verified source, e.g. the company's website or the back of your debit or credit card. Do not trust contact information left in e-mails, voicemails or text messages.
Scam-Savvy Tips:
IF THEY'RE ASKING YOU TO... WHAT THEY'RE REALLY DOING IS...

Allow remote access to your computer by clicking a link or responding to a pop-up window.


 Using spoofed websites and other tactics such as keystroke loggers to steal debit or credit card information or account login credentials.

Send money back after receiving an overpaid refund.

 Having already gained access to your account, they have transferred your own money from another account or line of credit to trick you into believing the activity you are seeing is the fake refund.

Purchase gift cards and tell them the card numbers or send them a picture of the back of the card.

 Using the numbers to steal the funds you've loaded onto the gift card while telling you that sharing what they are calling “blocking codes” or “security codes” prevents anyone else from accessing the money on the card. 

What you should know: Urgency is a ploy used by scammers because they want you to act before you have time to think about whether their requests make sense.

Scam-Savvy Tip: Where a legitimate business will allow you time to make a decision, a scammer succeeds by using fear or threats to induce you to act immediately.