Unfair Deceptive Abusive
Hidden fees or refusing to release a lien on a paid-off loan is an example of what?
UNFAIR.
The regulatory framework commonly abbreviated as AML that works hand-in-hand with the Bank Secrecy Act.
What is anti-money laundering.
The specific form of spear phishing directed exclusively at high-level executives or credit union C-suite members.
Whaling
An unbadged visitor closely following an authorized staff member through a secure branch door without scanning their keycard.
Tailgating or piggybacking
The term for a robbery where perpetrators break into the credit union after hours to access the vault, avoiding staff contact entirely.
Burglary
Bait-and-switch tactics or false advertising is an example of what?
Deceptive.
The government bureau within the U.S. Department of the Treasury that receives and analyzes BSA filings.
FiCEN (Financial Crimes Enforcement Network)
A spear phishing attack carried out over SMS or text messaging rather than traditional email.
Smishing
The strict physical security rule requiring all sensitive member files and documents to be locked away when leaving a desk.
Clear desk policy
The single most important rule for all credit union employees during an active robbery.
Remain calm and cooperate fully
Exploiting consumer confusion about a complex financial product is an example of what?
ABUSIVE.
A Currency Transaction Report (CTR) must be filed when a member conducts aggregate cash transactions exceeding this dollar threshold in a single business day.
What is 10,000
Scammers often exploit this emotion by claiming an account will be "permanently closed within 1 hour" if action isn't taken immediately.
Sense of urgency / fear
When an unannounced vendor or repair technician arrives at a branch, staff must perform this check before granting entry to secure areas.
Identity & Work-Order Verification
To preserve evidence for law enforcement, staff must prevent anyone from touching counter surfaces, door handles, or this item left behind by the suspect.
Robbery Note
Unlike Deception, which relies on a "reasonable consumer" standard, Abusive practices often target members who fall under this status.
Vulnerable.
A credit union has this many calendar days to file a Suspicious Activity Report (SAR) after initial detection of a suspect.
30 days.
A spear phish claiming to come from internal IT that asks for your single-use code to "verify system maintenance" is attempting to bypass this security layer.
Multi Factor Authenticator
The social engineering strategy where an attacker offers a fake service, like "free tech support," in exchange for sensitive network credentials.
Security devices that deploy colored chemical staining and tear gas inside stolen cash bundles shortly after leaving the branch.
Dye Packs
Unfair, Deceptive, and Abusive acts are defined as?
Unlawful business standards that are prohibited by federal law and enforced to prevent financial injury and ensure transparency for consumers.
Under the Bank Secrecy Act, financial institutions must maintain a detailed log whenever a member purchases cashier's checks or money orders using cash within this specific dollar range.
$3,000 - $10,000
The internal tool or button integrated into the credit union's email client allowing staff to instantly report suspicious messages to Information Security.
According to security industry standards, this non-technical asset is considered both the most vulnerable target for social engineering and the credit union's strongest first line of defense.
Employees (or Human Element)
To prevent memory contamination, employees should complete this task independently before discussing the event with coworkers.
Robber / Suspect Identification Forms