Introduction

The blog series What They're Up to has been, for years, our channel to bring you the latest in trends and cybercrime. Today we publish a security warning about an extremely specific situation: the impersonation of OAS FCU on social media to commit fraud.

It has been brought to our attention that someone had made an unauthorized copy or spoof of OAS FCU's Facebook page; This illegal page had a different name but displayed our logo, banner, and even copies of the posts we have made to our Facebook account.

How this scam works

From this page, scammers have defrauded non-members of OAS FCU by offering loans. They have done it with messages on Facebook, WhatsApp, and email. Note: WhatsApp is not one of OAS FCU's communication channels with our members.

Fake employee ID of one of the people committing the fraud.

All through this post you will find images with information that victims have reported to us about the scammers.

Following, you will find all the details of this fraud scheme that have been reported to us, to date:

• They offer a loan at an incredibly low rate and an amount that depends on what people can afford to pay each month.
• Once the victims apply for the loan, it is almost instantly approved for an amount higher than requested; disbursement is conditional, upon the delivery of an "insurance fee," which is what we believe to be the actual scam (since the loan does not get disbursed.)
• Payment of this insurance premium is by wire to an account in a Latin American country; in the two cases that we have seen, the account was in Colombia.
• Information that we know the scammers request from the victims: a selfie, a copy of their valid ID and proof of address –such as a utility bill-.
• The phone number used to communicate with the victim on WhatsApp is not registered to OAS FCU.
• If the victim does not remit the insurance amount, the "representative" starts calling repeatedly to urge them to pay.
• To date, all victims have come to realize that this was a scam; however, they have not done so before sending the false insurance payment.

Specific information

Because we want to make this fraud as visible as possible, we are sharing actual information that the fraudsters used in the scam:

• Name of the page used on Facebook: "prestamos microcreditos internacionales OAS FCU" (as it appears on this blog's header image)
• Names of the false representatives running the fraud: Valeria Ramírez and Juan Felipe Gomez.
• They claim to be speaking with victims from our main Washington DC office (and they know the address.)
• Phone number that they use to communicate on WhatsApp: 1-(913)- 325-2335.
• The wire transfer information they provide victims to pay the "insurance" is as follows

The fake WhatsApp profile they use on this scam.

Erminso Vargas Prada at

Bancolombia

Account 03124723110

Address: Carrera 54: #50-16

Medellín, Antioquía

Colombia

How to verify if you are really dealing with OAS FCU

From what we see, these criminals will spin all sorts of stories to obtain money from their victims. Sometimes they will sound quite convincing. Therefore, always remember what you can expect from OAS FCU:

• We do not call to offer loans.
• We do not contact members with offers on social media.
• We do not send unsolicited loan preapprovals
• When we speak with you on the phone? We will not ask you for online banking credentials, nor information that will identify you if we already have it on our systems –such as your SSN or date of birth; if anything, we would ask you to verify the last four digits of your social security number.
• We will never, ever ask you to give us the access or security code that you are about to receive by email or text message.

We only have ONE official page on each of the main social media. They are as follows:

Facebook: https://www.facebook.com/OASFCU

Instagram: https://www.instagram.com/oasfcu/

LinkedIn: https://www.linkedin.com/company/oasfcu/

The wire transfer information where the victims sent money.