SHAZAM Notice on Vishing Scam (3/25/09)

SHAZAM has been alerted to the resurgence of a "vishing" fraud attack we notified you about in November (reference code CCHONTHTE). The attack consists of an automated telephone call in which a prerecorded voice advises the cardholder that the call is on behalf of SHAZAM and that the cardholder must reactivate his or her card by entering information immediately. These calls are fraudulent and have not been authorized by SHAZAM.

This attack differs from traditional vishing attacks because there is no telephone number provided for the cardholder to call back and release the information. Because there is no call-back number given and the origination source of the fraudulent calls has been masked by the perpetrators, closing down the origination point of the attack is extremely difficult.

While SHAZAM has received a handful of calls from cardholders who have received these fraudulent telephone calls, your institution may be contacted as well if your cardholders begin to be targeted. Please educate your customers about the fraudulent nature of these telephone calls and inform them that no information should be released. If your cardholders have released information as a result of receiving one of these calls, take appropriate action by hot-carding their accounts.