Safeguarding your accounts from takeover fraud

Cybercrime doesn't sleep. It's important to stay vigilant and secure your online accounts, especially those with money, sensitive health information, and financial data. The more you know about potential threats, the better equipped you'll be to protect yourself.

What is account takeover fraud?

Account takeover fraud occurs when a cybercriminal gains unauthorized access to your online account. Once they're in, they can steal funds, change account details, and use your personal information for other fraudulent activities.

This type of fraud is particularly concerning for financial accounts, including health savings accounts (HSAs), flexible spending accounts (FSAs), and other benefit accounts that hold your money and sensitive health data.

Account takeover attacks are growing in frequency and sophistication. Fraudsters use a variety of techniques to gain access, and they often target multiple accounts belonging to the same individual.

How do account takeovers happen?

Cybercriminals use several methods to gain access to your accounts:

• Phishing: Fraudulent emails, texts, or calls that trick you into revealing login credentials or personal information.
• Credential stuffing: Using stolen username and password combinations from data breaches to try to access your accounts.
• Social engineering: Manipulating individuals into divulging confidential information through deception.
• Malware: Software designed to infiltrate your devices and capture sensitive information like passwords and account numbers.
• SIM swapping: Fraudsters convince your mobile carrier to transfer your phone number to their device, allowing them to intercept verification codes.

Understanding these methods is the first step toward protecting your accounts.

Ways to protect your account

There are several steps you can take to help safeguard your accounts:

• Enable multi-factor authentication (MFA): Add an extra layer of security by requiring a second form of verification when you log in.
• Use strong, unique passwords: Create passwords that are at least 12 characters long with a mix of uppercase and lowercase letters, numbers, and special characters.
• Don't reuse passwords: Use different passwords for each of your online accounts. Consider using a password manager to keep track of them.
• Monitor your accounts regularly: Check your account activity frequently for any unauthorized transactions or changes.
• Set up account alerts: Enable notifications for login attempts, transactions, and account changes.
• Keep your software updated: Ensure your operating system, browser, and apps are up to date with the latest security patches.
• Be cautious with emails and links:Don't click on suspicious links or download attachments from unknown senders.

If you believe your HealthEquity account has been compromised, contact Member Services immediately. You can reach us by logging into your account at / or https://hellofurther.com.

Stay informed and aware of potential cyberthreats

Staying educated about the latest cybersecurity threats is one of the best ways to protect yourself. Fraudsters are constantly evolving their tactics, so awareness is your strongest defense.

Remember that HealthEquity will never ask for your password via email, text, or phone. If you receive a suspicious communication claiming to be from HealthEquity, do not respond. Instead, contact us directly through official channels.

HealthEquity uses advanced security measures including encryption, fraud monitoring, and secure authentication to help protect your accounts. We are committed to safeguarding your financial and health information.

By taking these proactive steps, you can help prevent unauthorized access to your accounts and keep your personal and financial information safe.