How to Protect Your Tax Refund and Your Identity This Year

At First Financial Federal Credit Union, protecting our members’ financial well-being is a priority year-round. As tax season approaches, we want to help you recognize common scams, understand the warning signs, and take proactive steps to safeguard your refund and personal information.

Tax season is one of the busiest times for scammers. As millions of taxpayers prepare their returns, fraudsters ramp up tactics to steal personal information, hijack refunds, and trick unsuspecting filers.

In 2026, the threats are evolving — but so is your ability to protect yourself. Let’s break down the most common tax season scams and how you can stay safe.

Are Tax Scams Increasing in 2026?

Yes. Each year, the IRS and consumer protection agencies warn that tax scams — including refund fraud, phishing, and impersonation — tend to spike during tax season.

Scammers use a variety of methods to trick taxpayers, including phone calls, fake emails, and fraudulent tax filings.

Understanding how these scams work is key to protecting yourself and your refund.

IRS Impersonation Calls: Is the IRS Calling You?

One of the most common scams remains IRS impersonation calls — where someone pretends to be from the IRS and tries to scare you into paying or giving up personal information.

Important tips to know:

• The IRS will not call unexpectedly demanding immediate payment.
• The IRS will never require payment via gift cards, cryptocurrency, or wire transfers.

If you receive a suspicious call, hang up immediately. Learn how to spot these calls in our previous blog: Security Alert: Impersonating Phone Calls.

Fake IRS Texts and Emails — What to Look For

Scammers aren’t just calling — they’re also sending fake IRS emails and text messages designed to get you to click malicious links or share sensitive info.

These phishing scams often:

• Claim there’s a problem with your tax return
• Offer a larger refund if you “verify your details”
• Include attachments or links that install malware

💡 Tip: The IRS does not initiate contact by text or email to request personal information. If you’re unsure whether a message is real, treat it as suspect.

You can learn more about recognizing phishing scams in this helpful guide: How to Spot a Phishing Scam Before It’s Too Late.

Tax Refund Scams

Tax refund scams happen when criminals use stolen personal information to file fraudulent tax returns early in the season to claim your refund before you file.

Common warning signs of refund fraud:

• Your return is rejected because one has already been filed
• You receive an unexpected IRS notice
• You receive a refund you didn’t request

Filing early and using secure filing methods can help prevent this.

If you’re concerned about broader identity misuse beyond tax season, we covered prevention tips during 2026 Identity Theft Awareness Week that can help you stay protected year-round.

Fake Tax Preparers and Other Scams

Scammers may also pose as tax preparers — either in person or online. They may:

• Promise unusually large refunds
• Charge fees based on refund size
• Ask you to provide unprotected personal information

Only use reputable tax professionals, and always review your tax return before signing.

How to Protect Your Tax Refund in 2026

Here are key steps to safeguard your refund and personal information:

• File Early – Filing early reduces the chance that someone else will file a fake return using your identity.
• Use Secure Filing Methods – Ensure your tax preparer uses encrypted platforms and secure login protocols.
• Avoid Public Wi-Fi – Public networks are easy targets for hackers — don’t file your taxes on them.
• Strengthen Account Security – Enable multi-factor authentication on email, tax prep, and financial accounts.
• Shred Paper Documents – Protect yourself from physical identity theft by shredding old tax records.

What to Do If You Get a Tax Scam Call or Email

If you suspect you’ve encountered a tax scam:

• Stop all communication.
• Do not provide personal information.
• Report phishing or impersonation attempts at IRS.gov.
• If your First Financial accounts may be affected, contact us immediately so we can help review and secure your account.
• Monitor your credit and accounts for unusual activity.

Taking quick action can reduce the impact of fraud!

Stay Cyber-Aware This Tax Season

Tax season scams in 2026 may seem convincing — but knowing what to look for, how to recognize red flags, and where to find legitimate IRS communication can protect you and your refund.

At First Financial Federal Credit Union, we’re committed to helping our members stay financially confident and secure. If you ever notice suspicious activity on your account or receive a suspicious tax-related communication, contact us right away.

Explore our Financial Wellness Tools and Security Center on our website to learn more tips and tricks — and file safely this tax season.

Identity Theft Awareness Week runs January 26-30 and is hosted by the Federal Trade Commission (FTC). This week is dedicated to sharing resources, events and guidance to help consumers recognize identify theft, recover if it happens and stay alert to the latest scams.

Identity theft can happen when someone uses your personal information without your permission to commit fraud. It can happen to anyone, but a few simple habits can help you stay safe:

How to Help Prevent Identity Theft

1. Monitor your accounts regularly and check your statements often. If you spot a transaction you don’t recognize, report it right away.
2. Browse safely. Make sure websites start with “https://” and a lock icon to indicate a secure connection before entering any personal information.
3. Be cautious with emails and texts. Phishing messages often look legitimate and may impersonate trusted businesses. Avoid clicking unexpected links or attachments, and verify suspicious messages directly with the company.

As a reminder, First Financial will NEVER contact you unexpectedly by text, email, or phone to request personal information such as your online banking username, password, or MFA code. We also will NEVER representatives to your home to collect debit or credit cards.

When in doubt, contact First Financial directly at 410-321-6060 or send a Secure Message through Online or Mobile Banking.

If you or someone you know is a victim of Identity Theft, you can create a case with the Federal Trade Commission. Plus, visit their Identity Theft Awareness Week page for more information to help you stay safe.

Visit our Security Center for more security tips to help you protect yourself and your account from fraud.

When your phone buzzes or a new email pops up, it’s easy to tap without a second thought. But in today’s digital world, that quick reaction could cost you more than just time—it could cost your personal information, your money, and your peace of mind.

Phishing scams are getting smarter, and fraudsters are getting bolder. The good news? Staying alert is one of the easiest ways to keep you and your data safe.

What is Phishing — and Why Does It Work?

Phishing is a type of scam where criminals impersonate trusted organizations—like your credit union, a government agency, or a delivery service—to trick you into sharing personal information. These scams can appear through emails, text messages, phone calls, or even fake websites.

They work because they look real. Scammers use official-looking logos, urgent language, and familiar names to make you act fast—before you have time to think twice.

Common Signs of Phishing Scams

Whether it’s an email claiming “your account has been locked” or a text that says “click here to verify,” these red flags can help you recognize a scam before it’s too late:

• Urgent or threatening language: Messages that demand immediate action or claim your account will be closed.
• Unfamiliar sender address or number: Look closely—one extra letter or symbol can make a fake domain appear real.
• Suspicious links or attachments: Hover (don’t click!) your cursor over links to preview the URL. If it doesn’t match the company’s official site, don’t open it.
• Requests for personal or financial information: Legitimate financial institutions will never ask you to share passwords, PINs, or account details over email or text.
• Generic greetings: “Dear Customer” instead of using your actual name.
• Too-good-to-be-true offers: If it feels off, it probably is.

Phishing Examples You Might See in 2025

Scammers evolve with technology. Here are some of the most common phishing examples circulating this year:

• Fake bank alerts: Texts claiming your debit card is locked with a link to “verify” your account.
• Package delivery scams: Emails pretending to be from a delivery service, such as USPS or UPS, asking you to pay a small “delivery fee.”
• Subscription renewal fraud: Posing as Netflix, Apple, or Amazon saying your subscription has expired.
• AI voice scams: Fraudsters using cloned voices of loved ones or bank representatives to request money or credentials.

Staying alert to these new tactics is your best defense!

What to Do If You Think You’ve Been Targeted

If you suspect a phishing attempt—or if you’ve already clicked a suspicious link—don’t panic. Follow these steps:

1. Stop engaging immediately. Don’t reply, click again, or download anything.
2. Change your passwords. Update login information for any affected accounts.
3. Enable two-factor authentication. This will add an extra layer of protection.
4. Report it. Forward phishing emails to the Anti-Phishing Working Group at reportphishing@apwg.org or report texts to 7726 (SPAM).
5. Contact your financial institution. As a First Financial member, you can call us directly at (410) 321-6060 to verify any suspicious activity.

Protect Yourself With Ongoing Education

Fraud prevention isn’t a one-time effort—it’s an ongoing habit. Learning how to recognize scams before they happen gives you the confidence to bank and browse safely.

Your security matters to us. Visit our Security Center to learn how First Financial actively protects members and shares the latest fraud prevention updates.

You can also visit our Banzai Financial Wellness Center to explore free, interactive courses on online safety, identity theft protection, and smart digital habits.

Together, we can keep your accounts—and your information—secure!

Stay Vigilant, Stay Secure

First Financial will NEVER contact you unexpectedly by text, email, or phone to request information such as your online banking username, password, or Multi-Factor Authentication (MFA) code. We also won’t send representatives to your home to collect debit or credit cards.

Please note: If you call First Financial directly, we may ask for a one-time verification code to confirm your identity.

At First Financial, we’re committed to protecting your personal and financial security—so you can focus on what matters most.

Take Charge of Your Spending with Card Alerts and Controls!

You can now use your First Financial online and mobile banking to control where and how you spend – with the touch of a button. Set real-time alerts to help you stay in control of your card usage and finances. Personalized preferences let you track and limit spending by transaction type, merchant categories, online, in store, and ATMs.

Here are just a few ways you can stay in control of your card:

• Stay up to date with real-time alerts – Know immediately when transactions occur and personalize your alerts with options like SMS text, email, or push notifications.
• Set controls – Block transactions for select merchant categories, or transaction types like online or ATM.

To set up card alerts and controls, first make sure you’ve enabled SMS text messages by navigating to More > Settings > Contact. Next, navigate to ‘Accounts’ then ‘Manage my Cards’ followed by ‘Alerts and Controls’. From there you are on your way to managing where and how you spend!

Getting ready for a vacation? If you plan to use a popular vacation rental website or application (app), such as AirBnB, HomeAway, or VRBO to find your next getaway, beware. Cybercriminals are using these services to trick you and steal your money.

How Does It Work?

The scammers often post completely fake rental listings using images they find on the internet, or they steal pictures and property details from legitimate rental listings to create their own listing with the scammer’s contact information. When someone inquires about a fake listing, the scammer will request a security deposit or a portion of the full rental price as a down payment. Once the scammer has your money, they’ll cancel the reservation at the last minute, or you will arrive at your vacation home to find that the property is already booked, or that the property doesn’t even exist.

How Do I Know It’s a Scam?

Don’t let the scammers ruin your vacation. Remember the following tips when you’re booking your next vacation rental online:

• Book official. Only use reputable websites that offer protection against fraud and have a secure payment portal.
• Make sure that the property exists. Search for the property on Google Maps or another mapping service. If you know someone in the area that you will be visiting, ask them to check out the property for you. Scammers might use an address that does not exist, or use the address of a random company, vacant building, or parking lot.
• Research the rental listing. Search online for the property owner’s name and address, and look for images of the property, before you make a deposit. If you find multiple listings with different contact information, reconsider booking the property.
• Read the reviews. If a property has multiple negative reviews, or doesn’t have any reviews, consider a different property.
• Only make payments through the official website for the rental listing. Scammers often try to get you to pay with a check, get you to wire them money directly, or use services like MoneyGram or Western Union to make a payment.

Visit our Security Center for more tips on keeping your information safe.

There’s a new scam going around where fraudsters are trying to trick people into thinking they have unpaid tolls. The scammers impersonate E-ZPass, a well-known toll collection system, and may send fraudulent emails (phishing) or text messages (smishing) claiming you need to pay your invoice immediately to avoid excessive late fees.

Red Flags of the Scam

• Messages from unknown or suspicious emails or phone numbers demanding immediate payment
• Messages with grammatical or spelling errors
• Urgent language designed to create panic and a sense of urgency
• Links that don’t match the state’s official E-ZPass website (often containing extra characters or unfamiliar domains)

What to do if You Receive an E-ZPass Scam Message

• Never click on the links in the message
• Do not respond and delete the text or email.
• Do not share sensitive information, including credit card or banking details
• Check your official E-ZPass account by logging in directly to the official website

Visit Fraud Prevention for more tips on keeping your information and devices safe.

Please be aware of scammers impersonating First Financial representatives to commit fraud.

A call may come from a spoofed number, where the caller ID information appears to be a call or text coming from First Financial.

Examples of requests the fraudster may ask include (but are not limited to):

• Possible fraudulent activity or transactions on your account
• Attempts to add a card to a digital wallet
• Request online banking username and password
• Multi-factor authentication codes
• Card information or PIN number
• Impersonator collecting debit or credit cards under false First Financial identity

Please be aware that these phone calls are not from anyone at First Financial. First Financial will never contact you to request this information by phone, email or text. Always hang up and contact First Financial directly to confirm if the request and message are legitimate. We also won’t send representatives to your home to collect debit or credit cards.

Please note: If you call First Financial directly, we may ask for a one time verification code to confirm your identity.

How to avoid impersonator requests:

Scammers often pretend to be from an organization you know and trust. They use technology to change the phone number that appears on your caller ID so the name and number you see, may not be real.

They may also say you’re in trouble or owe money, and pressure you to act immediately. Here are some ways to help protect yourself against phone call scams:

• Remember, banks, service providers and government agencies will never ask for your PIN, CVV, one-time passcodes, online username and password over phone, email or text.
• Resist the pressure to act immediately. 
• Before you do anything else, stop and talk to someone you trust. Hang up and contact the organization directly. They can help you identify if the message is legitimate or possibly a scam.
• Never provide your cards to anyone coming to your home claiming to be First Financial.
• Enroll in card alerts & controls and account notifications to be immediately notified of any changes.

As always, if you have any concerns or believe you have received a suspicious message, please contact Member Services at 410-321-6060, or send us a secure message through Online Banking or Mobile App.

Visit Fraud Protection for more tips on keeping your information and devices safe.

Security Alert: It has been brought to our attention that some members may be receiving calls from a scammer attempting to compromise their card information.

We are seeing the scammer attempt to frighten members with a made-up story – such as illegal activity, fraud monitoring, or compromised Facebook or Amazon accounts – and ask the members to verify their information. 

Please be aware that these phone calls are not from anyone at First Financial. First Financial will never contact you to request this information by phone, email or text. Always hang up and contact First Financial directly at 410-321-6060 or toll-free at 800-903-3328 to confirm the legitimacy of the request.

How to Avoid Scam Calls:

Remember, scammers often pretend to be from an organization you know and trust. Scammers also attempt to create a sense of urgency and intimidation; pressuring you to act immediately.

Keep these tips in mind to help protect yourself against scammers:

• Resist the pressure to act immediately. Think about the request and verify with the organization directly this is a legitimate request.
• Never give out personal information such as account numbers, Social Security numbers, passwords or other identifying information in response to unexpected or suspicious calls. 
• Avoid answering calls from unknown numbers. 

As always, if you have any concerns or believe you have received a suspicious message, please contact Member Services at 410-321-6060 or toll-free 800-903-3328. You can also send us a secure message through Online Banking or Mobile App.

Visit our Security Center for more tips on keeping your information and devices safe.

Whether you are riding with Uber, Lyft, Via, or any of the other Transportation Network Companies (TNC), the most important first step you can take to ensure your ride is seamless and safe is to make sure you enter the right vehicle.

Before pick-up, every TNC provides the customer with valuable information to ensure they enter the correct vehicle. Information should include the vehicle make and model, the first name of the driver, a photo of the driver, and the vehicle license plate number. 

Ride Share Safety Tips: 

• When your driver arrives, politely ask him/her their name and check their answer against the name provided on the app. 
• Make sure the make and model of the car are accurate and ensure the license plate matches the information provided on the app. If any of the observed details do not match those on the app, do not enter the vehicle.
• Once inside the vehicle, your driver should never ask you to pay in cash. If the driver pressures you to provide cash, ask to exit the vehicle and call 911. If the driver refuses to allow you to exit the vehicle, call 911.
• Where you live is an important piece of information and you may not want to share this information with others. Instead of being dropped off directly in front of your apartment, house, or dorm, select a drop-off location adjacent to your residence.
• Most of the time after you exit the vehicle, your payment will be immediately processed. If you notice a cleaning fee charge ($100-$300) for no legitimate reason (you did not make a mess or vomit in the vehicle), immediately access the company website, select the trip in question, and select the help section. There you will find a link titled “Dispute Cleaning Fees.” Click this link and dispute the charge.
• You should also contact your credit card company and dispute the charge.
• If you find an unauthorized charge on your credit card statement, immediately report this information to your local law enforcement agency and your credit card company. 

For more helpful information and security tips, visit our Fraud Protection page.

Security Alert: It has been brought to our attention that some members may be receiving text messages from a sender acting as First Financial Federal Credit Union. The impersonator may ask about verifying credentials – such as online banking username and password, Multi-Factor Authentication codes, card information, or PIN. 

Please remember, First Financial will never ask for your personal or sensitive account information via email, text, or phone. 

Recognizing Spam Text Messages:

• Don’t fall for warnings saying, “Your phone is infected.”
• Don’t reply with “STOP” if you’re being spammed – contact your network instead.
• If you see a “business” phone number in a text, it’s no guarantee it’s real.
• Don’t fall for texts from a Wi-Fi network that ask for details.
• Never give out personal information or account information in response to a text.
• If you get a text message that you weren’t expecting and it asks you to give some personal information, don’t click on any links. 

As always, if you have any concerns or believe you have received a suspicious message, please get in touch with Member Services at 410-321-6060, or send us a secure message through Online Banking or Mobile App.

Visit Fraud Protection for more tips on keeping your information and devices safe.