Is this really Dupaco? How to tell if a call, text or email is legit

"I got a text from Dupaco. Is it real?"

"Did Dupaco really call me about fraud?"

"Why did I receive a postcard about my mortgage?"

"Is this email from Dupaco a scam?"

If you've asked yourself any of these questions, you're not alone.

Scammers have become increasingly skilled at making emails, texts, phone calls and even mailings look real. They often use real company names, familiar logos and convincing stories to create a sense of urgency.

The good news? You don't need to be a fraud expert to spot the warning signs. Here's what to know when someone claims to be Dupaco—and what to do before you respond.

First things first: Don't panic

Scammers want you to feel one thing above all else: Urgency.

They might claim:

• Your account has been compromised.
• Your debit or credit card has suspicious activity.
• Your online banking has been locked.
• Your mortgage requires immediate action.
• A payment is overdue.
• You need to verify personal information right away.

The message may arrive by:

• Phone call
• Text message
• Email
• Letter or postcard
• Social media message
• Website pop-up

While the details change, the goal is usually the same: Get you to act before you have time to think.

Scammers often rely on what's known as amygdala hijack, triggering fear, urgency or panic so you react emotionally instead of slowing down to verify the situation. 

Take a breath. Slow down. Verify first.

The fastest way to know if it's Dupaco

When something feels off:

Stop.

Don't click.

Don't reply.

Don't call the number in the message.

Instead, contact Dupaco using a phone number or website you know is legitimate.

Call: 800-373-7600

A quick phone call can save hours—or even months—of dealing with fraud later.

How Dupaco may contact you

Dupaco may communicate with members through:

• Phone calls
• Emails
• Text messages
• U.S. mail
• Secure messages within Shine Online or Mobile Banking

But no matter how we may contact you, there are certain things we'll never ask you to provide.

Ask yourself these questions first

Whether you're looking at an email, answering a phone call or reading a letter, these questions can help you quickly spot a potential scam.

|1| Are they creating urgency?

Scammers often pressure people to act immediately.

Common examples include:

• "Act now."
• "Response needed."
• "Your account will be closed."
• "Your access has been suspended."
• "Time-sensitive notice."

Legitimate organizations may communicate deadlines. Scammers use pressure to keep you from stopping to think.

|2| Are they asking you to take immediate action?

Be cautious if you're being directed to:

• Click a link
• Call an unfamiliar phone number
• Download a file
• Share personal information

Always navigate directly to Dupaco.com or call a trusted phone number yourself.

|3| Are they asking for information Dupaco shouldn't need?

This is one of the biggest red flags.

Dupaco will never ask for:

• ❌ Your Shine password
• ❌ Your debit card PIN
• ❌ Your full debit or credit card number
• ❌ Your two-step verification code
• ❌ Password reset codes sent to your phone or email
• ❌ Sensitive information we already have

As Jim Bemboom, assistant vice president, card services at Dupaco, puts it:

"Giving out your PIN is like giving someone cash. We will never ask for that."

If anyone claiming to be Dupaco asks for this information, stop the conversation and contact us directly.

You’re the only one who can change your PIN. If you’ve shared your number, you should immediately change it. Call Dupaco at 800-373-7600 for steps on how to do so.

Did Dupaco call me about fraud?

This is a common question we hear.

Unfortunately, scammers sometimes pretend they're calling to help you protect you from fraud.

Through a tactic called caller ID spoofing, fraudsters can make it appear as though they're calling from a legitimate phone number—even a Dupaco number.

They may claim:

• Your card has suspicious transactions.
• Your online banking has been compromised.
• They need to verify activity on your account.

Then they begin asking questions.

“They make it look like they’re verifying your recent card transactions because they logged into your account with your password," Bemboom said.

Remember: Dupaco will not ask for your PIN, online banking password or two-step verification code.

“Fraudsters will do their best to lull you into a sense of security to get you to let your guard down,” Bemboom said.

If you're unsure whether a fraud call is legitimate, hang up and call Dupaco directly at 800-373-7600.

Is this email or text legitimate?

Fraudulent emails and texts are often designed to look nearly identical to legitimate messages.

Before clicking any link:

• Check the sender's email address or phone number carefully.
• Hover over links (without clicking) to see where they lead.
• Look for unusual wording, poor grammar or generic greetings like "Dear Client" or "Dear Valued Customer."
• Go directly to Dupaco.com instead of using links in the message.

What about letters or postcards?

Some mailings can appear surprisingly convincing because they reference information related to your mortgage, property or other financial accounts.

In some cases, companies use publicly available information to send mass mailings. In others, scammers may try to create a sense of urgency to get you to respond.

Be cautious if a mailing:

• Uses urgent language
• Directs you to call an unfamiliar number
• Requests personal information
• Includes private information on a postcard
• Includes suspicious websites

If you're unsure whether a mailing is connected to your relationship with Dupaco, contact us directly before responding.

What if I clicked or shared information?

First: You're not the first person this has happened to, and you won't be the last.

Scammers are good at what they do. But acting quickly may help limit the damage.

Take these steps immediately:

• Contact Dupaco at 800-373-7600.
• Change affected passwords.
• Review recent account activity.
• Enable or verify two-factor authentication.
• Monitor your credit in Shine.
• Report unauthorized transactions.
• Run a malware or antivirus scan if you clicked suspicious links or downloaded attachments.

The sooner you act, the more options you may have to help protect your accounts.

5 habits to protect yourself year-round

Fraud trends change constantly, but these habits are always in style.

|1| Use strong, unique passwords

Avoid reusing passwords across multiple accounts. Learn how to create stronger passwords.

|2| Turn on multifactor authentication

This adds an extra layer of protection if a password is compromised.

|3| Set up account alerts

Transaction and login alerts can help you spot fraud quickly.

Check your eNotifier settings within Shine to make sure you're getting the alerts you want.

|4| Monitor your credit

Regularly reviewing your credit can help you identify potential identity theft sooner.

Dupaco members can access credit monitoring tools and alerts right within Shine.

|5| Pause before you act

A few seconds of verification can prevent a major headache later.

When something feels urgent, that's often the best time to slow down.

Still not sure whether it's really Dupaco?

That's exactly why we're here.

If someone claiming to be Dupaco contacts you—and something feels off—don't guess.

Call us directly at 800-373-7600 and we'll help you verify whether the communication is legitimate and walk you through next steps if it isn't.

Because protecting your money, your identity and your peace of mind isn't something you should have to figure out alone.