Watch Out for Mobile Wallet Phishing Scams

Digital wallets like Apple Pay, Google Pay, and Samsung Pay have transformed the way we pay, offering convenience, speed, and contactless transactions. But as more Members embrace this technology, fraudsters are ramping up their efforts to exploit it.

A concerning trend has emerged: phishing scams and fraud campaigns now specifically target mobile wallet users. These scams are among the fastest-growing digital threats, using increasingly sophisticated tactics to steal personal and financial information.

How the Scam Works

Phishing scams often begin with a text message or email designed to look like it’s coming from a legitimate source—your credit union, a card provider, or even a government agency. These messages typically contain urgent warnings or threats, such as:

• “Your mobile wallet has been suspended.”
• “We’ve detected suspicious activity on your account.”
• “You owe a fine and must respond immediately to avoid legal action.”

The message will include a link to click or a number to call, encouraging you to act quickly without thinking.
From there, scammers try to trick you into:

• Entering your login credentials on a fake website
• Sharing your credit card or debit card number
• Providing your Social Security number or other sensitive details
• Giving access to your mobile device or digital wallet

Example of a Scam Text

Other Forms of Digital Wallet Fraud

Beyond phishing, digital wallet scams can take other forms:

Account Takeovers

Fraudsters use stolen credentials—often from data breaches or the dark web—to log into your mobile wallet and make unauthorized purchases.

Fake Wallet Apps

Scammers have created counterfeit apps that mimic legitimate ones. If you accidentally download one, it can steal your login info or financial data.

Third-Party Vulnerabilities

Connecting your digital wallet to less secure apps or services may expose your information if those systems are compromised.

Why These Scams Work

Scammers now use advanced tools to craft messages that closely resemble real alerts. They rely on social engineering—the art of manipulating emotions like fear, urgency, or trust—to get you to act.

These messages may include your name, the last four digits of your card, or a legitimate-looking website. Some even impersonate law enforcement or government officials to intimidate you into responding quickly.

How to Stay Safe

Scammers rely on urgency and fear to trick you into acting quickly without thinking. To protect yourself:

• Never click on links in unsolicited texts or emails—even if they appear to come from CSE or another trusted institution.
• Verify the source. Contact the purported sender directly using official contact information.
• Enable account alerts through CSE Online and CSE MOBiLE so you’re the first to know about legitimate activity.
• Use strong passwords and enable multi-factor authentication for your mobile wallet.
• Keep your mobile wallet app and operating system updated with the latest security features.
• Only download apps from official stores such as the Apple App Store, Google Play.
• Report suspicious messages immediately to CSE and the appropriate authorities.

What to Do If You Fall for a Scam

If you believe you have been scammed:

• Contact CSE immediately at 337.477.2000 so we can protect your account.
• Freeze or remove cards from your digital wallet.
• Report the fraud to the FTC and local law enforcement.
• Change your passwords and PINs—especially for any reused credentials.
• Monitor your credit report for any unusual activity.

We're Here to Help

CSE is committed to protecting our Members with the latest fraud monitoring tools and educational resources. If you ever suspect a scam or need help verifying a message, call us at 337.477.2000. You can also visit our Fraud Resources center to get equipped to combat fraud.

Your security is our priority—and awareness is your first line of defense.