Received a Package You Didn’t Order? Brushing and QR Code Scams

Have you received a surprise package at your doorstep recently? Packages from an unknown sender, especially those including a QR code – are likely part of a dangerous new brushing scam. With new scam tactics evolving constantly, knowing what to look out for and how to respond is important. At First Financial, we’re here to help you recognize these schemes and protect your personal and financial information.

What is a Brushing Scam?

A brushing scam is when someone receives packages they didn’t order, often low-cost or counterfeit items like beauty products or small electronics, from a seller trying to boost their online reputation. The scammer uses the recipient’s personal information (often obtained through data leaks) to create fake customer reviews, falsely increasing the legitimacy of their product listings. While the merchandise may seem harmless, the real concern is that your personal information – name, address, or even online account details, have likely been compromised.

The New Twist: QR Code Scams in Packages

Scammers are now also including QR codes in these unexpected packages. The note may say the QR code will reveal who sent the gift, provide return instructions, or offer a bonus or prize. But in reality, scanning the code could redirect you to a phishing website designed to steal sensitive information like your login credentials or credit card number. Even worse, it may install malware on your device, giving hackers access to your data and apps.

How to Protect Yourself from QR Code and Package Scams

Don’t Scan Unfamiliar QR Codes: If you receive a package you didn’t order, avoid scanning any QR codes inside. These can be designed to mimic legitimate company branding and lead to fake websites that steal personal data.

Check Your Online Shopping Accounts: If the package came from a known platform like Amazon or eBay, login to your account and look for any unauthorized orders. If you see suspicious activity, change your password immediately and report the fraud to the platform.

Change Your Passwords: It’s a good idea to update your passwords on shopping accounts and your email if you received a suspicious package. Always use strong, unique passwords and consider enabling two-factor authentication for extra security.

Don’t Contact the “Sender”: Don’t attempt to reach out, even if a name, phone number, or website is included in the package. Scammers may use this opportunity to trick you into providing more personal details under the guise of resolving the issue.

Monitor Your Credit and Accounts: Visit AnnualCreditReport.com to review your credit report and look for any unfamiliar accounts or inquiries. Also, check your bank and credit card statements for unauthorized transactions.

Consider Freezing Your Credit or Adding a Fraud Alert: If you believe your personal information may be at risk, take additional steps like placing a fraud alert on your credit report or freezing your credit to prevent new accounts from being opened in your name.

Keep Devices Secure and Updated: Ensure your phone and computer software are continuously updated with the latest security patches. A secure device is your first line of defense against malware and phishing attempts.

Use Trusted QR Scanner Apps: If you must scan a QR code, use a QR code scanner app that shows you the destination URL before redirecting you. This provides a chance to spot suspicious links before it’s too late.

What to Do if You Think You’ve Been Scammed

If you received an unsolicited package, scanned a QR code, or noticed suspicious activity on your accounts:

  • Change your passwords immediately – Update and strengthen passwords for your financial and email accounts right away.
  • Contact your financial institution – Report the incident and monitor for any unauthorized transactions.
  • Monitor your credit – Visit AnnualCreditReport.com to review your credit report and closely check for suspicious inquiries or accounts.
  • File a report with the FTC at ReportFraud.ftc.gov and, if necessary, start a recovery plan at IdentityTheft.gov.

Stay Safe with First Financial

We’re dedicated to helping our members stay informed and protected from scams. If you ever suspect fraud or have concerns about any of your accounts, call us at 732.312.1500 or visit one of our local branches.

Home Sweet … Home Improvement Scam?

Deciding to take on a home improvement can be a big commitment, especially when you have to entrust a contractor with turning your dreams into reality. Unfortunately, scammers posing as trustworthy contractors are promising to do the work – and leaving your home and wallet to take the hit. Before you hire a home improvement contractor, consider these red flags that could indicate that a home improvement scam is happening to you.

What is a Home Improvement Scam?

A home improvement scam begins with receiving a flyer in the mail, viewing an advertisement on social media, or being met with an unsolicited knock on the door from a contractor. The so-called “contractor” will say they were working on another project in your neighborhood and had leftover supplies or were looking for new projects to take on because they would be working “in the area” for the foreseeable future. They are hoping that you have a home improvement need, or that you have been waiting to find a contractor that can meet your requirements. The contractor will somehow check off all the boxes – whether it’s completing the project in a short timeframe or within your budget. However, before you hire the contractor and even after the contractor begins your project – the red flags will start to come out. In the end, your home improvement project might cause additional damage to your home or financial situation, or not be completed at all.

Signs of a Home Improvement Scam

It might seem difficult to tell the difference between a trustworthy and not-so-trustworthy contractor. Below are some red flags that can signal you’ve been approached by a scammer.

  • Pressure to Make an Immediate Decision: A real contractor knows that undertaking a home improvement project isn’t a decision that can always be made immediately. Whether it’s consulting others that should be involved in the decision-making process, or confirming that the project is in your budget – there are countless reasons to “sleep on it.” Plus, getting the green light from your partner and your budget – will make you confident in your decision. A fraudster will persuade you into making an immediate decision so you don’t have time to pick apart the interaction or analyze any red flags.
  • Unrealistic Budget or Timeframe: There might be a reason that the contractors before this one could not complete your project to your specifications. Be cautious if you are approached by a contractor who says they can complete your project in half the time or for half the price that other contractors have given you.
  • Asking for Payment Upfront or Only Accepting Cash: This could signal that a contractor is not planning on completing the project, or that they are not planning on completing the project correctly. If a contractor asks you for payment upfront to “buy the materials,” be cautious.

Tips to Avoid Home Improvement Scams

Here are ways you can protect your home, and your wallet – from home improvement scams.

  • Ask for References: Scammers will be reluctant to hand over references, namely because they do not have good ones. Additionally, scammers won’t want to wait around for you to do your homework because they know they won’t get your business based on what you find. Reputable contractors will gladly hand over references so you can confidently make the decision in hiring them to complete your home improvement project. Their references will speak to the quality of work you can expect if you hired them to take on your project. If someone you know and trust recently completed a home improvement project, consider asking them for recommendations.
  • Get Multiple Estimates: Obtain written estimates detailing the work to be completed, the materials needed, and the anticipated price and completion date. If one estimate is substantially lower than all of the others, consider why this estimate is the odd one out. It might be tempting to go with the lowest estimate. However, this low estimate might end up costing you more in the long-run if the work is completed poorly, is completed using substandard materials, or isn’t completed at all.
  • Do Your Research: Check with organizations, like your local Home Builders Association, to see if any complaints were made against a contractor. You should also look up the business or contractor’s name with words like “scam,” “fraud,” or “complaint.” The Better Business Bureau also has a tool to find BBB Accredited businesses near you.
  • Know the Law: Ensure that the contractor you hire has the proper identification, licensing, and insurance needed to complete the project in your state. Additionally, if you are signing a contract to complete work – ensure that the contract includes all the specifics of completing the project.

First Financial knows that finding the right contractor is important. If you believe that you have fallen victim to a home improvement scam and your financial information has been compromised, don’t hesitate to visit a local branch or call us at 732.312.1500.

If you have found the right contractor and are looking for a way to finance your home improvement project, be sure to check out our Home Improvement Loan. We’ve got great rates, up to 10-year terms, and fixed monthly payments.* Apply online 24/7!

*Available on primary residence only. A First Financial membership is required to obtain a Home Improvement Loan and is open to anyone who lives, works, worships, volunteers, or attends school in Monmouth of Ocean Counties. See credit union for details. Rate will vary based off of applicant’s credit rating. Not all applicants who apply will be approved, subject to underwriting guidelines and credit approval. Lien position and appraisal valuation may affect the maximum loan amount. Not all applicants will qualify for maximum Loan to Value (LTV) ratio. It will be based off of creditworthiness, property type, occupancy, lien position, and loan amount. Rates will be affected by LTV or combined LTV if there is another lien on the property. Loan amounts over $7,500.00 will be required to give First Financial FCU a security interest in their property. Rates will vary based off of lien position and whether the loan is mortgage secured or unsecured. For mortgage secured Home Improvement loans First Financial FCU (FFFCU) will waive closing costs at inception of loan. If loan is terminated within the first 2 years of opening, closing cost waiver is revoked and are required to b

Protect Yourself from Mortgage Closing Scams and Wire Fraud

Closing on a new home is one of life’s most exciting milestones, but it also comes with financial risks — especially due to increasing mortgage closing scams and wire fraud. Scammers have been known to target homebuyers during the closing process, attempting to divert large sums of money into fraudulent accounts through phishing schemes. Falling victim to one of these scams can mean losing your down payment and closing costs, sometimes totaling hundreds of thousands of dollars.

At First Financial, we want to ensure our members are informed and prepared during primetime for buying a home – spring. Here’s what you need to know about mortgage closing scams and how to protect yourself from wire fraud.

How Mortgage Closing Scams Work

Fraudsters will often use sophisticated phishing tactics to deceive homebuyers into sending their closing funds to fake accounts. Here’s how they do it:

  • Email compromise: Scammers may hack into or spoof the email accounts of real estate agents, lenders, title companies, or attorneys. They will create similar email addresses, changing just a letter or number which often goes unnoticed. If successfully hacked, email conversations are monitored to identify upcoming closings.
  • Fake wire instructions: Once they’ve gathered enough details, the scammer will send an email impersonating a trusted party. These emails usually contain official-looking branding, logos, and signatures to appear legitimate.
  • Urgent request for a wire transfer: The fraudulent email will instruct the homebuyer to send funds to a different bank account, often citing last minute changes or updates.
  • Quick withdrawal of funds: Once the money is wired, the scammer will immediately withdraw or transfer the funds – making recovery extremely difficult, if not impossible.

These scams can be incredibly convincing, and even careful homebuyers can fall victim if they don’t take proper precautions.

Signs of Mortgage Closing Scams & Wire Fraud

  • Unexpected last minute changes to wire instructions – If you receive an email stating that your payment details have changed, be extremely cautious and call the title company or lender directly.
  • Emails with urgent or high-pressure language – Scammers typically try to create a sense of urgency, making you feel like you must act immediately.
  • Slightly altered email addresses – Fraudsters will create emails that look nearly identical to those of real estate professionals, often with minor spelling changes or different domains (e.g., @company.com vs. @company-mail.com). Always double check the email addresses you are responding to before sending money or financial information.
  • Requests for financial information via email – Legitimate real estate professionals, lenders, title agencies or attorneys will never ask for sensitive financial details through regular unsecure email.
  • Links or attachments from unknown sources – Clicking on malicious links can give scammers access to your email account and financial details.

How to Protect Yourself

  • Verify wire instructions in person or over the phone – Before wiring any funds, call your lender or title company using a trusted phone number — not one from an email. Confirm the payment details with someone you have spoken to over the course of the mortgage process.
  • Avoid emailing financial information – Email is not secure, and sensitive financial information should never be shared via email. If you need to send any documents, ask about secure portals or encrypted options.
  • Be wary of last minute changes – Scammers will often introduce urgent changes to wire transfer details right before closing. If you receive unexpected instructions, verify them with your lender or title company in person or via a known phone number.
  • Use multi-factor authentication – Enable multi-factor authentication (MFA) on your email and financial accounts. This adds an extra layer of security by requiring a second form of verification when logging in.
  • Monitor your transactions – Follow up immediately with your title company or lender after any transactions to confirm they were received. Any discrepancies should be reported immediately.
  • Establish a security code with your real estate team – Work with your real estate agent and title company to create a unique security phrase or code word to use when discussing financial transactions.

What to Do If You Become a Victim of Mortgage Wire Fraud

  • Contact your bank – Request a wire recall to try to recover the funds.
  • Report any fraud to the FBI – File a complaint with the FBI’s Internet Crime Complaint Center (IC3) at ic3.gov.
  • Notify your real estate agent, title company, and lender – They may be able to assist with stopping the transaction or preventing further fraud attempts.

Time is critical — the faster you act, the better your chances of recovering your money.

Protect Your Home Purchase with First Financial

We’re committed to helping our members navigate the homebuying process safely. Whether you’re applying for a mortgage, looking for home financing advice, or seeking fraud prevention tips – we’re here to help.

To learn about our mortgage services check out our Homebuyers Guide and website, call us at 732.312.1500, or visit a branch. Subscribe to our First Scoop Blog for more expert advice on protecting your finances!

Sneaky Six: IRS Scams Taxpayers Should Watch Out For

IRS scammers have been around for a long time and they’re sticking around because, unfortunately – people keep falling for their changing tactics. Knowing this, the Internal Revenue Service (IRS) annually publishes a list of tax scams coined the Dirty Dozen, in an effort to increase awareness. Here are some of the most common scams that taxpayers should watch out for year-round, but especially during tax time.

1. Someone Using Your Social Security Number to File Taxes

A scammer might attempt to beat you to the chase – that is, beat you to claiming your own tax refund. This tax scam occurs when a fraudster uses your social security number to file and claim a tax refund. Oftentimes, the first inkling that you’re a victim is if the IRS rejects your tax return once you file. There are various reasons your tax return can be rejected, but it’s a surefire sign of identity theft if the IRS has another tax return filed in your name or a record of income from an employer you don’t work for.

There are resources available to you if someone has stolen your identity and filed a tax return with the IRS. First, you should report the identity theft to IdentityTheft.gov. This government website will aid you in creating various documents, such as an IRS Identity Theft Affidavit and personal recovery plan. You should then submit your Identity Theft Affidavit to the IRS – which notifies them of your case to begin investigating it. Alternatively, you can obtain the Identity Theft Affidavit directly from the IRS and submit it by mail. Lastly, follow the steps in your personal recovery plan to help mitigate the fallout and limit the personal and monetary damages of identity theft.

2. Ghost Tax Preparers that Disappear with Your Cash

While many tax preparers act with professionalism and integrity, tax season gives rise to unscrupulous tax preparers called “ghost preparers” who misguide taxpayers in an effort to make a quick buck or disappear with their refunds. These preparers take advantage of tax credits or deductions the taxpayer doesn’t qualify for, or invent fake sources of income to entice them with fake large refunds. They falsify tax returns in an effort to maximize the amount of the refund because they often charge a “percentage fee” based on the amount of the return. The ghost preparer typically refuses to sign the return after it is prepared, allowing them to disappear with their payment and leave you to deal with the consequences of falsifying a tax return. It is best practice to avoid any tax preparer who charges a cash only fee, does not give you a receipt, or who charges a percentage of your refund as their preparer fee. In addition, one who tries to invent false income or get tax credits and deductions you aren’t qualified for, or who deposits your refund into their own account – will typically “ghost” you.

3. Email and Text Scams

Many scams impersonating legitimate organizations begin with unsolicited emails and text messages, and IRS scams are no exception. The IRS will never demand immediate payment of a tax bill and threaten consequences for not doing so via email or text message. Similarly, the IRS will never notify you of a large tax refund via email or text message. These emails and text messages may also prompt you to click links that would download malicious software on your device or steal your personal and financial information. In the event the IRS needs to contact you, communication is typically initiated through regular U.S. mail. There are exceptions to this, as well as other ways the IRS may contact you – which can be found on the IRS webpage how to know it’s the IRS.

4. Bad Social Media Advice

In an effort to increase views and generate income, some social media influencers have been known to share bad tax advice using clickbait – or content that is designed to attract attention and entice users to click. It is hard to ignore content with headlines such as “find out how this little-known tax deduction can increase your tax refund.” Additionally, some influencers will have you pay to subscribe to gain access their exclusive “tax advice” on various platforms, but they are essentially just taking your money and sending you on your merry way – with incorrect tax advice. If you interact with this content and follow their bad advice, not only will you file a fraudulent tax return – but you also encourage these influencers to continue producing misleading content.

5. Fake Tax Bill

If you receive an urgent request to pay a tax bill with gift cards, cryptocurrency, or any other unusual yet specific method of payment – it’s a fake tax bill scam. The IRS will never call to demand immediate payment or make threats if you cannot render payment. As mentioned previously, the IRS will only contact you via regular U.S. mail.

6. IRS Individual Online Account Help Scam

An individual online account through the IRS provides taxpayers with a portal to access their tax information, such as payment history and tax records. Scammers are now posing as third parties to assist with setting up these online accounts to steal taxpayers’ personal information, submit fraudulent tax returns, and take their tax refunds. The scammer may also sell the personal and financial information to other fraudsters who may file fake tax returns and steal refunds, open loans and credit accounts in the taxpayer’s name, and ultimately steal their identity.  The IRS has a guide to establishing an IRS online account and avoiding scams.

First Financial knows that tax season can be hard enough, and that’s without the worry of being scammed being added into the mix. If you have any questions or reason to suspect that your information has fallen into the hands of a scammer this tax season, don’t hesitate to contact us at 732.312.1500 or visit us at your local branch.

Protect Yourself From Check Fraud Scams

Despite the rise of digital banking, check fraud remains a prevalent financial scam. Scammers use sophisticated techniques to steal and manipulate checks, often leaving victims unaware until it’s too late. Understanding how check fraud works and how to recognize suspicious activity can help protect your finances.

What is Check Fraud?

Check fraud occurs when criminals manipulate, forge, or steal checks to illegally access funds.

Common Types of Check Fraud

  • Check Washing: Thieves steal legitimate checks — often from mailboxes, and modify key details, such as the recipient’s name or the payment amount, before cashing or selling them.
  • Check Kiting: Using multiple accounts to write and deposit bad checks, temporarily covering insufficient funds before withdrawing cash.
  • Forgery: Criminals create counterfeit checks or forge signatures to access funds fraudulently.
  • Fake Checks: Scammers trick victims into depositing fraudulent checks, often under the guise of prize winnings, job opportunities, or overpayment schemes. Once the check is cashed, the fraudster requests the money be sent back, leaving the victim responsible when the check bounces.

How to Recognize Check Fraud

Recognizing fraudulent checks early can help you avoid financial loss. Be on the lookout for these red flags:

  • Unexpected Checks: If you receive a check from an unknown source, verify its legitimacy before depositing it.
  • Spelling and Formatting Errors: Poor grammar, misspelled words, or inconsistent fonts can indicate a counterfeit check.
  • Unusual Check Amounts: If the check amount exceeds what was agreed upon, it may be a scam.
  • Discrepancies in Mailing Address: If the check was mailed from a different location than the issuing bank, proceed with caution.
  • Request for Money Transfers: Be wary if someone asks you to deposit a check and send a portion of the money back. This is a common scam tactic.
  • Lack of Security Features: Legitimate checks include watermarks and security threading. If these features appear altered or missing, the check may be fraudulent.

How to Prevent Check Fraud

While fraudsters are persistent, there are steps you can take to reduce your risk:

  • Use Secure Payment Methods: Opt for electronic payments, online bill pay, or peer-to-peer payment apps (Zelle, Venmo, etc.) instead of checks when possible.
  • Write Checks with a Fraud-Resistant Pen: Gel pens with permanent ink can make it harder for criminals to alter check details.
  • Check Your Mail Frequently: Avoid leaving checks in your mailbox where they can be stolen and deposit them directly inside a bank or electronically right away.
    • If you deposit electronically, keep the check in a secure place and shred it once it clears.
  • Enroll in Informed Delivery: The U.S. Postal Service offers a free service that notifies you of incoming mail, helping you detect missing mail sooner.
  • Monitor Your Bank Statements: Regularly check your accounts for unauthorized transactions and report suspicious activity immediately.
  • Verify the Issuing Bank: If you receive a check from an unfamiliar source, call the bank listed on the check using the contact information from their official website.

What to Do If You’re a Victim of Check Fraud

If you suspect check fraud, take immediate action to minimize financial loss:

  • Notify Your Bank: Report the fraudulent activity and request a hold on your account if necessary.
  • File a Police Report: Document the fraud with your local law enforcement agency.
  • Report to Federal Agencies: The FTC, U.S. Postal Inspection Service, and the FBI’s Internet Crime Complaint Center accept reports of financial scams.
  • Monitor Your Credit: Fraudsters who steal checks may also attempt identity theft. Consider using credit monitoring tools to detect future unauthorized activity.

Stay Protected with First Financial

Check fraud can happen to anyone, but awareness and preventative measures can keep your finances secure. By staying vigilant and following these best practices, you can reduce your risk of falling victim to check scams. If you suspect fraud or unusual transactions on any of your First Financial accounts, call us at 732.312.1500 or visit your local branch today.

Love is Blind: Online Dating Scams

Don’t get your heart broken in an online dating scam or by losing the funds in your bank account this Valentine’s Day. The idioms “love is blind” and “looking through rose-colored glasses” might sound cliché, but call attention to an important phenomenon – feelings of love can cause you to throw caution to the wind and overlook flaws in a romantic interest that you might typically not ignore. It’s harder to ignore red flags that are staring right at you, like when your romantic interest is sitting directly across from you. However, in an age where it’s increasingly common to meet your partner on any number of dating apps or websites, you might have to look for those red flags before the first date even happens. Repeatedly ignoring invitations to video chat or meet in person, or asking for money before you’ve done so, might seem like obvious red flags. Nonetheless, those rose-colored glasses can help you make an excuse for anything. Make sure you aren’t blinded by love and can determine if those “red flags” are actually a romance scam.

What is a Romance Scam?

A romance scam begins like many romantic pursuits ordinarily do in the twenty first century—you match with someone on a dating app or website, or you have a new connection waiting for you on social media. In almost all instances, they reach out to you first and express their interest in getting to know you. It’s not long before you find yourself texting them at all hours of the night or longing to hear their voice over the phone. That’s because, somehow, this person checks off every box on your list. You like a certain musician? They like that musician too. You’ve been dreaming of visiting a remote island? They are too. You start wondering where they have been all your life. Eventually, meeting them in person seems like a natural next step. Then, the excuses start to flow. They say they want to meet you, but “living on an off-shore oil rig” or “working at a military base” is getting in the way. They reassure you that they will meet you one day, but want to keep pursuing a romantic relationship online in the meantime. However, this person has no intention of building a relationship with you and is interested in one thing—your money. If they get it, they will likely disappear with your money and hopes of a relationship without a trace.

What are the Favorite Lies of Romance Scammers?

The lies a romance scammer will tell to get your money are endless. A lie might sound outrageous, but the romance scammer is a trained professional. They typically cultivate a relationship with you over weeks, months, or even years before they ask for any funds. The FTC compiled a list of romance scammers’ favorite lies to watch out for to protect your heart and money. Popular reasons to avoid meeting in real life or needing money can sound like this:

  • “I or someone close to me is sick, hurt, or in jail.”
  • “I’m in the military far away.”
  • “We’ve never met, but let’s talk about marriage.”
  • “I’m on an oil rig or ship.”
  • “I can’t afford to visit you or meet you without it.”

The FTC warns that many romance scammers might even flip it on you, offering to do you a favor. This might sound like an offer to teach you how to invest in cryptocurrency or to send you a valuable package. In both scenarios, the money you give to the romance scammer to “invest for you” or to “ship the valuable package” ends up right in their pockets.

What are Other Red Flags?

While lies are an important piece of the romance scam puzzle, the ways they would like to receive the funds complete it. If your love interest is requesting payment through uncommon methods, it is most likely a scam. The scammer will usually ask you to send cryptocurrency, gift card codes, or wire money. This is because these transactions are hard to track and do not have protections for buyers or senders in place. Another red flag is if your family and friends express concern over your new love interest. Your loved ones want nothing but the best for you, so it should sound the alarm if they express apprehension when you tell them about your online love interest and their request for funds.

How Can You Protect Yourself from Romance Scammers?

  • Never send money to your online love interest. Nobody legitimate will claim that sending cryptocurrency, gift card codes, or wiring money are the only ways you can help them. On the flip side, never trust someone who insists they can teach you how to invest or send you a valuable package to improve your financial situation. They are only looking to improve theirs.
  • Reverse image search pictures. Another cliché that applies to romance scams is, “If there’s a will, there’s a way.” Your online love interest should, at the very least – find a way to video chat if they can’t meet you in person. However, the reason they can’t video chat or meet in person is because romance scammers often use fake identities. You can reverse search profile pictures or other images they send you to see if the details they tell you about themselves are adding up.

Most importantly, the FTC encourages everyone to do their part. You can help stop romance scammers by reporting suspicious profiles or messages to the platform where you saw them. You can also report your experience directly to the FTC at reportfraud.ftc.gov. Lastly, pass information regarding romance scams along to a friend. You may not have fallen victim to a romance scam, but someone you know can.

First Financial wants to help protect your personal and financial information and your heart, during the season of love. If you have any concerns or have reason to suspect that your information has fallen into the hands of a scammer, don’t hesitate to contact us at 732.312.1500 or visit us at your local branch.