{"id":213224,"date":"2023-09-29T13:13:32","date_gmt":"2023-09-29T13:13:32","guid":{"rendered":"https:\/\/malwaretips.com\/blogs\/?p=213224"},"modified":"2023-09-29T13:14:01","modified_gmt":"2023-09-29T13:14:01","slug":"usaa-payment-on-hold","status":"publish","type":"post","link":"https:\/\/malwaretips.com\/blogs\/usaa-payment-on-hold\/","title":{"rendered":"Uncovering the Deceptive USAA \u201cPayment On Hold\u201d Email Scam\u00a0"},"content":{"rendered":"<p>United Services Automobile Association (USAA) is a well-known financial services group that provides banking, investing, and insurance products to current and former members of the military and their families. Unfortunately, scammers often take advantage of USAA\u2019s trusted reputation by sending out fake emails that appear to come from the company. One common USAA phishing scam claims you have a payment on hold and must take action to receive it.<\/p><div id=\"mwtad1788822735\" class=\"gas_fallback-ad_309684--placement_360520\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3957935887\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p>This article will provide an in-depth look at how the \u201cUSAA Payment On Hold\u201d email scam works, how to spot red flags, what to do if you provided personal information, and steps to protect yourself going forward.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-213225\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2023\/09\/USAA-Payment-On-Hold.jpg\" alt=\"USAA Payment On Hold\" width=\"645\" height=\"485\" title=\"\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2023\/09\/USAA-Payment-On-Hold.jpg 645w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2023\/09\/USAA-Payment-On-Hold-300x226.jpg 300w\" sizes=\"(max-width: 645px) 100vw, 645px\" \/><\/p>\n\n\n<div id=\"mwtad2025983685\" class=\"gas_fallback-ad_309746-ad_309691-placement_360521\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"4456629336\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 class=\"wp-block-heading\">Overview of the Scam<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The \u201cUSAA Payment On Hold\u201d phishing email states that a payment, refund, or deposit to your USAA account has been suspended. Scammers claim you must verify your account information immediately or the funds will not be released.<\/p><div id=\"mwtad2758762009\" class=\"gas_fallback-ad_381396-ad_309691-placement_360566\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"1471373341\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">A fraudulent \u201cUSAA Online Banking\u201d logo and branding are used to make the message appear legitimate. The email includes a link to a fake website that mimics USAA\u2019s real login page.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you enter your username, password, and other sensitive details, scammers can steal your banking credentials. They use this info to take over your account, make unauthorized transactions, or steal your identity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This scam is quite deceptive since the emails come from addresses that look like real USAA accounts. Variations of \u201cservice@usaa.com\u201d and \u201csecure@usaa.com\u201d are commonly used. Always check the full email address, not just the display name, to spot red flags.<\/p><div id=\"mwtad402973199\" class=\"gas_fallback-ad_309686-ad_309691-placement_360569\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"6935453015\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n\n\n\n<div id=\"mwtad3174864582\" class=\"gas_fallback-ad_309747-ad_309691-placement_360587\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"9589536513\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 class=\"wp-block-heading\">How the USAA \u201cPayment on Hold\u201d Scam Works<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Here is an overview of how scammers carry out this phishing attack:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. You Receive an Email Claiming a Payment is On Hold<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The scam starts with an email landed in your inbox with an alarming subject line like:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u201cAction Required: Release of Payment from USAA\u201d<\/li>\n\n\n\n<li>\u201cYour Scheduled USAA Transfer is On Hold!\u201d<\/li>\n\n\n\n<li>\u201cUSAA: Payment Not Deposited Due to Invalid Information\u201d<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The message states that USAA tried to deposit funds into your account but could not verify your information. It claims you must confirm your personal details within 24-48 hours or the payment will be canceled.<\/p><div id=\"mwtad399878367\" class=\"gas_fallback-ad_381401-ad_309691-placement_360573\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"5315249587\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">A fake USAA logo and branding help make the email look legitimate. The message may include partial details like the last four digits of your account number to appear credible.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. The Email Provides a Fake USAA Login Link<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Within the email is a link prompting you to verify your account. The text of the link says something like \u201cusaa.com\/login\u201d, but when you hover over it, the actual fraudulent URL is revealed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sometimes real company names are hidden within long scam website addresses. For example, the link could direct to a domain like \u201cusaaverifyaccountDR3213.xyz\u201d.<\/p><div id=\"mwtad2018804581\" class=\"gas_fallback-ad_381404-ad_309691-placement_381406\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"8735619847\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">3. Entering Information Reveals Your USAA Login Credentials<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you click the provided link, it takes you to a website impersonating the real USAA login portal. Everything from the design to the web address may look authentic at first glance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Once you enter your username and password, the criminals capture your login credentials. They can now access your real USAA account and initiate fraudulent activity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In some cases, you may be prompted to provide additional sensitive information beyond your login details, such as:<\/p><div id=\"mwtad505342747\" class=\"gas_fallback-ad_360582-ad_309691-placement_360581\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"9971336976\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Full name<\/li>\n\n\n\n<li>Date of birth<\/li>\n\n\n\n<li>Social Security Number<\/li>\n\n\n\n<li>Credit card number<\/li>\n\n\n\n<li>Bank account number<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Providing any of this info gives scammers more tools to steal your identity and commit financial fraud.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Criminals Take Over Your Account<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">With your compromised USAA username and password, scammers can log in to your real account. From there, they may:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Transfer or withdraw funds<\/li>\n\n\n\n<li>Access private financial information<\/li>\n\n\n\n<li>Change account passwords and security details<\/li>\n\n\n\n<li>Open new credit cards or loans in your name<\/li>\n\n\n\n<li>Apply for services that require your SSN and DOB<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In addition to draining your accounts, they can damage your credit, rack up debt, and wreak havoc on your finances.<\/p><div id=\"mwtad2072798740\" class=\"gas_fallback-ad_360567-ad_309691-placement_360771\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"6224621518\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">This all happens quickly once your details are captured, which is why it\u2019s critical not to click on links or provide information to suspicious emails.<\/p>\n\n\n\n<div id=\"mwtad2762613968\" class=\"gas_fallback-ad_309748-ad_309691-placement_360588\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3906789406\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 class=\"wp-block-heading\">Spotting Red Flags in the USAA \u201cPayment On Hold\u201d Scam<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">While scammers go to great lengths to mimic legitimate USAA messages, there are key signs that reveal the \u201cPayment On Hold\u201d email is a scam:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Grammatical Errors and Strange Wording<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Scam emails often contain typos, grammar mistakes, and awkward phrasing not typical of a major financial institution. Any communication with odd language should raise a red flag.<\/p><div id=\"mwtad2145986361\" class=\"gas_fallback-ad_360571-ad_309691-placement_360772\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"5867729999\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Generic Greetings<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Legitimate businesses normally address you directly in emails by your full name. Scam messages use generic greetings like \u201c Dear USAA Member\u201d.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Suspicious Sender Address<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">As mentioned above, the \u201cfrom\u201d email address probably won\u2019t match a real USAA domain on close inspection. Look for misspellings or extra characters.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">False Urgency and Threats<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Scammers create a sense of urgency and pressure you to act immediately to release the \u201con hold\u201d funds. Real banks give you time to deal with account issues.<\/p><div id=\"mwtad1391523230\" class=\"gas_fallback-ad_360576-ad_309691-placement_360773\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"6594472392\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Requests for Sensitive Information<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">USAA would never ask for your full Social Security number, passwords, or other personal details over email. Only provide sensitive info through official USAA websites and phone numbers.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Poor Quality Logos and Design<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">While scammers copy real branding, logos may look blurry, low-resolution, or outdated on fake sites. Poor design quality is a giveaway.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The more red flags an email raises, the more likely it\u2019s a scam attempt rather than a legitimate message. When in doubt, directly contact USAA to verify the communication.<\/p><div id=\"mwtad4117162761\" class=\"gas_fallback-ad_360583-ad_309691-placement_360774\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"8849826992\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n\n\n\n<div id=\"mwtad1225554745\" class=\"gas_fallback-ad_318930-ad_309691-placement_360589\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3818335085\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 class=\"wp-block-heading\">What To Do If You Already Provided Information to the Scam Email<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you already input your USAA username, password, or other sensitive details through one of these scam links, take the following steps right away:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Log In to Your Real USAA Account<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">First, open a new browser window and manually go to usaa.com. Log in to your account with your existing credentials if still active.<\/p>\n\n\n\n<div id=\"mwtad1214087732\" class=\"gas_fallback-ad_360584-ad_309691-placement_360775\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3952847241\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><p class=\"wp-block-paragraph\">Review recent transactions and account changes for signs of unauthorized activity. Look for withdrawals, money transfers, new payees, updated account details, and more.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Change Your USAA Account Password<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Immediately change your password and security questions to lock the scammers out of your account. Create a new, complex password that\u2019s hard to crack.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Avoid reusing the same password on multiple sites. Update passwords anywhere else you used the same login.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Enable two-factor authentication for an added layer of security when logging in to your USAA account.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Contact USAA<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Notify USAA about the fraudulent email and potential account compromise. They can put additional protections in place and monitor for suspicious transactions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ask to place a freeze on your account to block any new activity without approval. Report any unauthorized charges or withdrawals you spot.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Check Accounts at Other Financial Institutions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you reuse the same password details across financial accounts, scammers may have access to those too.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Log in and change passwords for your bank accounts, credit cards, retirement accounts, and any other services that contain sensitive personal or financial information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Review recent transactions for those accounts as well to spot any fraudulent use. Contact institutions about any issues.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Monitor Your Credit Reports<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Request free copies of your credit reports from Equifax, Experian and TransUnion. Look for any accounts or activity you don\u2019t recognize.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Place fraud alerts and consider credit freezes to help protect your credit from identity theft.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Beware of Any Further Scam Attempts<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Once scammed, your details end up on \u201csucker lists\u201d that criminals buy and sell. Expect an uptick in phishing attempts from a wider variety of scammers. Be extra vigilant about links and providing personal info going forward.<\/p>\n\n\n\n<div id=\"mwtad1469049886\" class=\"gas_fallback-ad_381388-ad_309691-placement_381390\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3191649120\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 class=\"wp-block-heading\">Protecting Yourself from the USAA \u201cPayment on Hold\u201d Scam<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Here are some general tips to avoid falling victim to the \u201cUSAA Payment on Hold\u201d scam and other phishing attacks:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Never click links in unsolicited emails<\/strong> &#8211; Manually open a new browser and type usaa.com to log in. Avoid clicking the provided link.<\/li>\n\n\n\n<li><strong>Check the sender\u2019s email address<\/strong> &#8211; Even if the \u201cfrom name\u201d looks legitimate, verify the full email domain matches USAA.<\/li>\n\n\n\n<li><strong>Toggle email display<\/strong> &#8211; Switch your email to show the full email address instead of just the sender\u2019s name.<\/li>\n\n\n\n<li><strong>Review urgently worded emails carefully<\/strong> &#8211; Scams create false urgency. USAA gives you time to deal with account issues.<\/li>\n\n\n\n<li><strong>Look for poor grammar and spelling errors<\/strong> &#8211; USAA emails will be professional and error-free.<\/li>\n\n\n\n<li><strong>Hover over hyperlinks<\/strong> &#8211; Check that link URLs match real USAA domains before clicking. Don\u2019t rely on link text alone.<\/li>\n\n\n\n<li><strong>Never provide sensitive information over email<\/strong> &#8211; USAA only requests personal details through their website or over the phone.<\/li>\n\n\n\n<li><strong>Use strong unique passwords<\/strong> &#8211; Secure your accounts with different complex passwords for each site.<\/li>\n\n\n\n<li><strong>Set up two-factor authentication<\/strong> &#8211; Add an extra layer of protection like biometrics or a code sent to your phone when you log in.<\/li>\n\n\n\n<li><strong>Check your accounts regularly<\/strong> &#8211; Routinely review transactions and statements to ensure no unauthorized activity slips by.<\/li>\n\n\n\n<li><strong>Be wary of all unsolicited emails and texts<\/strong> requesting personal information or account access. USAA and other legitimate businesses generally don\u2019t contact you this way.<\/li>\n\n\n\n<li><strong>Use security software<\/strong> &#8211; Install antivirus software to detect and disable malware used in phishing attacks.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Staying vigilant against any suspicious money-related emails helps keep your accounts and identity secure. Report phishing attempts and account fraud as soon as possible to limit the damage.<\/p>\n\n\n\n<div id=\"mwtad2628843637\" class=\"gas_fallback-ad_381392-ad_309691-placement_381395\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"2944237110\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 class=\"wp-block-heading\">Frequently Asked Questions About the USAA \u201cPayment on Hold\u201d Scam<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">What is the \u201cUSAA Payment on Hold\u201d scam?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This is a phishing scam where victims receive an email claiming there is a payment on hold with USAA that requires account verification or it will be cancelled. The email contains a fake login link that steals USAA credentials when entered.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How do I identify this USAA scam email?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Watch for urgent wording about a payment on hold, a request to verify your account, poor grammar\/spelling, generic greetings, suspicious sender address, and low-quality logos.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What happens if I click the link in the email?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The link goes to a fake website impersonating the real USAA login portal. If you enter your username and password, scammers can access your account and steal your personal information.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What should I do if I already clicked the link and entered my info?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Immediately change your USAA password, contact USAA to secure the account, check other accounts for fraudulent activity, monitor your credit reports, and watch out for additional scam attempts.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How can I prevent falling for this scam?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Never click links in emails, manually login to USAA&#8217;s website, check sender addresses, avoid entering info on unverified sites, use strong unique passwords, enable two-factor authentication, and be wary of urgent requests for personal details.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Can I tell if it&#8217;s a scam by calling the number in the email?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">No, scammers often include fake USAA phone numbers that route to them impersonating real representatives. Find official contact info on usaa.com and call to verify the message is legitimate.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What should I do if I notice unauthorized activity in my USAA account?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Notify USAA immediately about any fraudulent transactions, account changes, or suspicious login activity. Ask them to secure your account and begin the fraud investigation process.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How can I recover money lost to this scam?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If reported quickly, USAA may cover unauthorized debit card charges or wire transfers. Review account agreements about fraud reimbursement policies. Monitor accounts frequently to limit losses.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Will USAA ever actually email me about payments on hold?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">USAA may send legitimate emails about account issues, but they would never include links to login sites. Verify messages by contacting USAA directly before clicking any links or providing sensitive information.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The \u201cUSAA Payment On Hold\u201d phishing scam is one of the more deceptive attempts aimed at stealing banking credentials and identities. Scammers send urgent-sounding emails under the USAA name claiming your account requires immediate verification.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Links within the email direct to convincing but fake login pages that capture your USAA username and password. With this info, criminals gain full access to your accounts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Watch for red flags like grammatical errors, urgent timelines, requests for sensitive data, and suspicious sender addresses. If you provided your details, move quickly to change passwords, contact USAA, monitor your credit, and be alert for further phishing attempts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Going forward, treat all money-related emails with caution, manually type in web addresses, use strong unique passwords, and enable two-factor authentication. Staying aware of the deceptive tactics used in scams like the \u201cUSAA Payment On Hold\u201d email helps keep your hard-earned money and identity secure.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>United Services Automobile Association (USAA) is a well-known financial services group that provides banking, investing, and insurance products to current and former members of the military and their families. Unfortunately, scammers often take advantage of &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"Uncovering the Deceptive USAA \u201cPayment On Hold\u201d Email Scam\u00a0\" class=\"read-more button\" href=\"https:\/\/malwaretips.com\/blogs\/usaa-payment-on-hold\/#more-213224\" aria-label=\"Read more about Uncovering the Deceptive USAA \u201cPayment On Hold\u201d Email Scam\u00a0\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":213225,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49],"tags":[],"class_list":["post-213224","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scam-reports","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/213224","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/comments?post=213224"}],"version-history":[{"count":0,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/213224\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media\/213225"}],"wp:attachment":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media?parent=213224"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/categories?post=213224"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/tags?post=213224"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}