NACHA – The Electronic Payments Association has received reports that individuals and/or companies have received a fraudulent email that has the appearance of having been sent from NACHA and signed by a non-existent NACHA employee. Specifically, this email claims to be from the “Electronic Payments Association” and appears to be coming from the email address "payments@nacha.org.”
Phishing is a scam typically carried out via unsolicited email and/or websites that pose as legitimate sites and lure unsuspecting victims to provide personal and financial information. Be aware that phishing emails frequently have attachments and/or links to Web pages that host malicious code and software. Do not open attachments or follow Web links in unsolicited emails from unknown parties or from parties with whom you do not normally communicate, or that appear to be known but are suspicious or otherwise unusual.
NACHA itself does not process nor touch the ACH transactions that flow to and from organizations and financial institutions. NACHA does not send communications to individuals or organizations about individual ACH transactions that they originate or receive.
If you are an Arvest customer and received an email like this, and you clicked on a link or attachment or entered confidential information, please contact us immediately at (877) 849-2274 so that we can protect your account.
If you are an Arvest customer and received an email like this, but you did not divulge confidential information, please notify us via email at reportfraud@arvest.com. If possible, please include the original email that you suspect is part of the phishing scam.
Phishing scams are still quite common, and come in a variety of forms. While most are similar to this one, others come in the form of customer service surveys, telephone calls or even cell phone text messages. Please be aware that while most Phishing scams direct you to fake web sites, others may ask you to call a phone number where an automated phone system prompts you to divulge confidential information.
While it can be difficult to identify spoofed email messages, web sites, and automated phone systems, it is not difficult to know if any of the above may be related to a fraudulent Phishing scam. The key is knowing that legitimate entities do not send unsolicited messages to consumers or businesses prompting them to divulge confidential information. If you receive such a message, no matter how genuine it may appear, assume it to be fraudulent and please notify the legitimate entity immediately.
For more about Phishing scams, identity theft and other helpful information, please visit our Consumer Protection resource center.