The EPPICard is a debit-like card issued by 15 state agencies and used for the distribution of child-support funds.
Under this latest phishing attack, card users receive emails or text messages claiming there are problems with their account and to follow the enclosed link to correct the problem, the FBI said in a news release.The link directs users to a fraudulent website where their account information and PIN could be compromised.
In addition, a second message asks users to take an online survey, the FBI said. The survey asks for the EPPICard account information, stating that a payment for taking the survey will be deposited into the account.
“This is yet another attempt by cybercriminals to take advantage of technology to gain access to your personal information," FBI Special Agent Richard Kolko said in the news release. "We are asking citizens to be alert and not to fall victim to these schemes. If you receive one of these messages, please report it to Internet Crime Complaint Center."
The EPPICard website (EPPICard.com) is aware of the phishing scam, Andrew Lochart of email security firm Proofpoint told SCMagazineUS.com on Monday. When visiting the site, a red alert box appears on the screen with a warning.
“If you don't get that message, you aren't on the real website,” Lochart said.
He added that this phishing scheme was first seen in late May. One of the things that make the EPPICard appealing is that, as long as a person has the PIN, anyone can use the card.
“This is a very targeted attack because it is easy money,” Lochart said.
If users have any questions about the legitimacy of an email, rather than clicking on the direct link, they should use a trusted bookmark or manually type in the site's URL into the address bar, he said.