Skip to main content

BIN There, Done That: Air Force FCU Topples An Attack

In late April 2021, transactions totaling close to six figures from the same retailer hit the credit union in nearly one fell swoop. Transaction data from Air Force FCU’s core provider indicated all the charges were card-not-present purchases, which tipped Miller off to the fraud.

The cooperative had to act quickly.

Because the retailer, which Miller declines to name, is a large, legitimate business, the credit union couldn’t simply cut off those transactions. However, during its due diligence, Air Force FCU learned the attack came from only one of the several networks through which it processes transactions, and it could shut off transactions from specific card networks.

“We made the decision to stop all transactions from that network for two days,” Miller says. “It stopped the fraud in its tracks and gave us enough time to figure out our next move.”

The credit union’s chief technology officer along with several risk employees began to thoroughly review Air Force FCU’s daily credit card transaction reports. A pattern soon emerged. Miller says her exceptions report often state “card destroyed,” “card lost,” “card stolen,” or “wrong pin.” Not this time.

“We saw was a huge pattern of ‘card not found,’” Miller says. “Plus, these were all from the same vendor and the impacted card numbers ran in a sequential order. It just wasn’t normal.”

The fraudsters, however, had accurate card information so transactions were going through, putting the credit union on the hook for losses. And the hackers were sophisticated, Miller says. They used different names, different dollar amounts, and even different addresses — not always in the United States.

“People were really buying stuff,” Miller says. “It was going as far away as Colombia.”

The Response

Air Force FCU implemented immediate changes to its card numbering logic — no longer would the same several digits appear for each card. By altering the pattern, the credit union hoped to make hacking more complicated. Additionally, the credit union reissued every card that was affected by the attack, but it did not reissue cards en masse.

“It’s a long process to reissue like that,” Miller says. “And it wasn’t going to stop the bleeding.”

The fact the dollar amounts tended to be small posed a challenge to identifying fraudulent charges. And because it was a well-known retailer, members weren’t always aware they were victims. Air Force FCU posted a message on its home banking platform asking members to review their statements carefully for suspicious activity. It did not name the retailer because the attack ultimately wasn’t the retailer’s fault. In fact, the retailer was helpful.

“When we contacted them, they were eager to help us stop the fraud,” Miller says.

Internally, three employees in the risk department started reviewing daily core and card processor reports looking for context clues for potential fraud. Of primary focus are those “card not found” transactions, especially sequential card numbers used in close succession.

“The crook spends his whole day looking for ways in. We’re going to be behind the curve in trying to catch up, but we’ll do everything we can.” Cathy Miller, SVP & Chief Risk Officer, Air Force FCU

Looking forward, Air Force FCU hopes its risk review process will curb future fraudulent activity and is evolving its cybersecurity efforts, which include a new information security committee. Miller knows the battle is far from over, but that doesn’t mean it’s not worth the fight.

“The crook spends his whole day looking for ways in,” Miller says. “We’re going to be behind the curve in trying to catch up, but we’ll do everything we can.”

 Callahan & Associates, Inc.

Comments

Popular posts from this blog

Digital Payments Lead the Way Globally: Key Insights from Worldpay Study

According to a recent Worldpay study, digital payments are rapidly becoming the preferred choice worldwide. The research highlights significant shifts in consumer behavior and payment preferences, driven by technological advancements and the growing acceptance of cashless transactions. Key findings from the study reveal that digital payments now account for a substantial portion of global transactions. Mobile wallets, contactless payments, and online banking are gaining traction, reflecting consumers' desire for convenience and speed. This trend is especially prominent in regions like Asia Pacific, where mobile payment adoption is leading the charge. The study also emphasizes the importance of security in fostering consumer trust in digital payments. As fraud concerns continue to rise, businesses must prioritize robust security measures to protect customer information and enhance the payment experience. Moreover, the transition to digital payments is not just about c...

NCOFCU - "Video Mini's" The Federal Reserve

The Federal Reserve, often referred to as the Fed, is the central banking system of the United States. Established in 1913 by the Federal Reserve Act, the Federal Reserve serves several crucial functions in the U.S. economy. Here are the main aspects of the Federal Reserve:  Visit NCOFCU's YouTube channel for more. "Video Mini's" The NCOFCU "Video Minis" are a series of concise 2-3 minute video presentations designed to deliver valuable insights and knowledge on key topics relevant to credit unions. Each video focuses on a specific subject, providing viewers with essential information in a brief and engaging format. These mini-presentations cover a range of subjects. Perfect for busy professionals seeking quick yet impactful content, the Video Minis make it easy to stay informed and enhance your credit union's operations and member services. Join us in exploring these informative and dynamic learning opportunities!

Fixed-Rate 30-Year Mortgage Decreases

MCLEAN, Va.--The 30-year fixed-rate mortgage averaged 6.65% this week, a slight decrease from last week's 6.6, Freddie mac reported. “The 30-year fixed-rate mortgage ticked down by two basis points this week,” said Sam Khater, Freddie Mac’s chief economist. “Recent mortgage rate stability continues to benefit potential buyers this spring, as reflected in the uptick in purchase applications.” Freddie Mac noted: The  30-year FRM  averaged 6.65% as of March 27, 2025, down from last week when it averaged 6.67%. A year ago at this time, the 30-year FRM averaged 6.79%. The  15-year FRM  averaged 5.89%, up from last week when it averaged 5.83%. A year ago at this time, the 15-year FRM averaged 6.11%.

The Role of the Board Chair

Tim Harrington, CPA   CEO, TEAM Resources The Role of the Board Chair Recently I had the chance to spend some time with a great group of board members . One of the things we talked about was the role of the board chair. I thought this well worth putting down on *paper* as it were. The role of the chairperson is multi-faceted, complex, and often changing within the context of the organization’s dynamic. Unfortunately, there’s no perfect set of “rules.” But there are some guidelines. Here are our “tips” on navigating the position successfully: Roles Facilitator  – The board chair must draw together the individual directors into a team, working together on behalf of the membership and the credit union. To do that, s/he must wrangle individual personalities, draw out conversation from some, and rein it in from others. Having a solid understanding of the personalities of each director … and the CEO helps the chair keep things on track, moving forward, and civil. ...

President Trump is leading the way toward reduced check usage by phasing out paper checks for government payments.

WASHINGTON—A new  executive order  from President Donald Trump bans paper checks as a form of payment for the federal government. The order was signed noting that Treasury checks are often reported stolen, and face other issues. The order also notes that payments made  to  the federal government are also modernizing. “Check fraud is a perennial concern for the banking industry, growing in recent years – reports doubled from 2021 to 2022. Target stores announced last year that they would stop accepting paper checks,” the Independent Community Bankers of America pointed out. “It's a great sign that the government is leading the way toward reduced check usage by phasing out paper checks for government payments,” said ICBA payments expert Scott Anchin, noting that consumers and financial institutions should maintain the ability to determine appropriate payment mechanisms for specific cases.  ABA President and CEO Rob Nichols said his organization welcomes President ...