Scammers are constantly finding new ways to target individuals and steal personal information. Learn how to recognize common scams, protect your accounts, and understand the steps Ellafi will never ask you to take. These resources can help you stay informed, confident, and one step ahead of fraud.
What is multi-factor authentication (MFA), and why is it important?
Multi-factor authentication (MFA) is an added layer of security that helps protect your accounts by requiring an additional verification step when signing in or completing certain transactions.
This may include a one-time verification code sent to your phone or email. The code helps confirm that you are the person attempting to access your account.
Your MFA code is private security information. Never share it with anyone, even if they claim to be from Ellafi.
Will Ellafi ever ask for my MFA verification code?
No. Ellafi will never ask you to provide your one-time verification (MFA) code by phone, text, email, or any other communication method.
Your verification code is for you only. Ellafi employees will never need this information to verify your identity, troubleshoot an issue, or protect your account.
If someone asks you for your MFA code while claiming to be from Ellafi, it is likely a scam. End the conversation and contact us directly.
What should I do if I receive an MFA code that I did not request?
If you receive a one-time verification code by text or email that you did not request:
- Do not share the code with anyone.
- Do not click any links or respond to messages asking for the code.
- Contact Ellafi immediately so we can help determine if someone is attempting to access your account.
An unexpected MFA code can be a sign that someone is trying to log in or reset your account information.
What information will Ellafi never ask me to provide?
To help protect your account, remember that Ellafi will never ask you for:
- Your Online Banking password
- Your debit or credit card PIN
- Your one-time verification (MFA) code
- Security codes sent by text or email
- Gift card numbers
- Cryptocurrency payments
- To transfer money to a "safe" or "secure" account
If someone requests this information while pretending to represent Ellafi, do not provide it.
How can I tell if a phone call, text message, or email is really from Ellafi?
Scammers can make calls, emails, and text messages look very convincing. They may use Ellafi’s name, logos, or information about your account to appear legitimate.
Before taking action:
- Stop and think before responding.
- Do not share personal information or security codes.
- Do not click unexpected links.
- Contact Ellafi directly using a trusted phone number or by visiting our website.
If you are unsure whether a message is legitimate, reach out to us. We are happy to help verify it.
What are common signs of a scam?
Scammers often try to create urgency, fear, or pressure so you act before thinking. Common warning signs include:
- Someone asking for your MFA code, password, or PIN
- A message claiming your account is locked or compromised
- Requests to move money to "protect" your funds
- Instructions to purchase gift cards or cryptocurrency
- Unexpected requests to send money
- Offers that seem too good to be true
- Pressure to act immediately
If something feels unusual, take a moment to verify before responding.
What are impersonation scams?
Impersonation scams happen when fraudsters pretend to be someone you trust, such as Ellafi, a government agency, a business, technical support, or even a family member.
They may claim there is suspicious activity on your account and ask you to "verify" information. Their goal is often to collect your login information, MFA code, or convince you to send money.
Remember: Ellafi will never ask for your MFA code, password, or PIN.
What are phishing and smishing scams?
Phishing scams are fraudulent emails designed to trick you into providing personal information or clicking harmful links.
Smishing is the same type of scam delivered through text messages.
These messages may claim:
- There is suspicious activity on your account
- Your account needs immediate verification
- A payment failed
- You have a package delivery issue
- You won a prize or special offer
Before clicking anything, verify the message independently. Do not use links or phone numbers provided in suspicious messages.
What are AI voice and deepfake scams?
Artificial intelligence has made it easier for scammers to create convincing voices, videos, and messages that appear real.
A scammer may use AI-generated technology to sound like a family member, a company representative, or someone you trust. They may create a sense of urgency and pressure you to send money or share personal information.
Protect yourself by:
- Taking time to verify unexpected requests
- Calling people back using a trusted phone number
- Never sharing passwords, PINs, or MFA codes
- Being cautious when someone pressures you to act immediately
Even if a voice or message seems real, always verify before taking action.
What are travel scams?
Travel scams often involve fake vacation rentals, fraudulent booking websites, or deals that seem too good to be true.
Scammers may collect payment for a reservation that does not exist or charge hidden fees after you provide payment information.
Protect yourself by:
- Researching travel companies before making payments
- Booking through reputable websites
- Reading reviews from trusted sources
- Being cautious of unusually low prices
What are gift card and cryptocurrency scams?
Gift cards and cryptocurrency are popular tools used by scammers because payments are often difficult to recover.
A scammer may tell you that purchasing gift cards, sending cryptocurrency, or transferring money is necessary to:
- Protect your account
- Pay a bill
- Resolve a security issue
- Avoid legal trouble
No legitimate financial institution, government agency, or business will ask you to protect your money by purchasing gift cards or cryptocurrency.
What should I do if I think I have fallen victim to a scam?
If you believe you shared information with a scammer or your account may be compromised:
- Contact Ellafi immediately.
- Change your Online Banking password.
- Monitor your accounts for unusual activity.
- Review recent transactions and report anything suspicious.
- Be cautious of additional calls or messages from someone claiming to help.
Acting quickly can help reduce potential damage.
How can I help protect myself from fraud?
A few simple habits can make a big difference:
- Use strong, unique passwords.
- Enable MFA whenever available.
- Never share verification codes.
- Keep your contact information updated.
- Review account activity regularly.
- Be cautious with unexpected calls, texts, and emails.
- Contact Ellafi if something doesn't seem right.
How will Ellafi contact me about fraud?
Ellafi may contact you regarding account activity or transactions, but we will never ask you to provide sensitive security information such as your password, PIN, or MFA verification code.
If you receive a suspicious communication claiming to be from Ellafi, do not respond. Contact us directly using a trusted phone number or through Online Banking.
Where can I report suspected fraud?
If you believe you have received a fraudulent message, experienced suspicious activity, or shared information with a scammer, contact Ellafi as soon as possible.
We are here to help protect your account and answer your questions.