Cybercriminals are sending phishing emails that appear to be transaction notifications from the Navy Federal Credit Union. The emails may come from an email address ending with “navyfederalcu.org“. Do not click on any links within these emails should you receive one. These are fake phishing emails designed to steal your bank account credentials. The navyfederalcu.org web domain is unverified according to https://sitelookup.mcafee.com/.

If you do bank with the Navy Federal Credit Union and are expecting an ACH deposit, go directly to the official website (https://www.navyfederal.org) to review the transaction. Never click on links within an email notification. The links could trigger downloading malicious code. ALWAYS log in using a verified website link that you have saved in your bookmarks, or log in from the bank’s mobile app.

Additionally, never call a phone number listed on a suspicious email notification.