By Voung H.
Voung oversees BSA/AML, fraud prevention, and sanctions compliance and is responsible for building data-driven controls and partners across the FIGFCU to safeguard the credit union, its Members, and stop emerging threats.
SUMMARY
- Mortgage postcard scams use real, publicly recorded loan details to look legitimate.
- They push you toward a phone number or QR code that connects to scammers, not your lender.
- Watch for urgent language, fake seals, and a lender name that’s unusual.
- Getting one may mean you recently closed on a mortgage and that some mortgage information became public record; it does not, by itself, mean your FIGFCU information was compromised.
- Do not use the phone number or QR code on the postcard; verify through your loan servicer using a trusted source or contact FIGFCU directly if you have a loan or account with us, then shred the postcard.
You just bought a house. Or refinanced. Or took out a home equity line. And a week later, a postcard shows up in your mailbox that looks official. It may even appear to reference your lender or loan servicer. It says something like “ACTION REQUIRED” or “Your loan servicing has changed.” It has your loan amount. Sometimes your closing date. It feels real, because it includes information that may be available from public records or other sources.
That’s not a coincidence. That’s the scam working exactly as designed.
What these cards actually are.
Mortgage postcard scams are a form of targeted mail fraud. Scammers may obtain publicly recorded mortgage data, including your loan amount, lender name, and closing date, which can become part of the public record after a mortgage transaction closes. They use that information to make a fake or misleading offer look legitimate, then push you to call a number or scan a QR code that connects you to them, not necessarily your actual lender or loan servicer.
The goal varies. Some solicitations may attempt to sell a warranty, insurance, or monitoring product that is not required by FIGFCU or your loan terms. Others may be phishing for your Social Security number, account numbers, online banking credentials, or a payment under the guise of a “loan review,” “verification,” or “rate lock fee.”
What they look like.
- Bold, urgent language: “TIME SENSITIVE,” “FINAL NOTICE,” “IMMEDIATE ACTION REQUIRED”
- Your real loan details, printed in a way that may suggest a connection to your lender or servicer
- Generic government-style seals or logos designed to look official—not necessarily tied to a real agency
- A phone number or QR code that’s the only way to “resolve” the notice
- No mention of your lender’s actual name, or a name that’s close but not quite right
Why you received one.
Simply put: you may have closed on a mortgage recently, and certain transaction details may have become part of the public record. Scammers—and some legitimate but aggressive marketers—may use county recorder data or other sources to send offers within days of closing. Getting one does not, by itself, mean you did anything wrong or that your FIGFCU information was hacked. It may mean your mortgage transaction is reflected in public records or other available data sources.
What to do if you get one.
- Don’t call the number on the postcard. If it mentions your loan, contact your loan servicer using a trusted source, such as the number on your mortgage statement, official servicer website, or other verified loan documents.
- Don’t scan the QR code. These often lead to spoofed websites built to capture your information.
- Check with us first. If you have a FIGFCU loan or account and you’re unsure whether something is legitimate, call us at 800.877.2345, message us through our digital banking platform, or stop by any branch. We’ll help you determine whether the communication is from FIGFCU.
- Shred it, don’t just toss it. It still has your real loan details printed on it.
- Report it to the Consumer Financial Protection Bureau, Federal Trade Commission, or appropriate law enforcement agency if you believe it was deceptive, predatory, or fraudulent.
Final thoughts.
At FIGFCU, we do not use postcards that ask you to call an unknown number, scan an unverified QR code, or provide sensitive personal information to confirm your loan. If we need to reach you about a FIGFCU loan or account, we will use established communication channels and will not ask you for your username, password, one-time security code, or other sensitive credentials. When something in your mailbox does not feel right, trust that instinct and contact us directly using verified FIGFCU contact information.
Remember: FIGFCU will never contact you first by phone, text, or email asking for personal information, usernames, passwords, full account numbers, or one-time security codes. If you receive a call, text, or email from someone claiming to be from the Credit Union and asking for this information, no matter how urgent or convincing it may be, stop communicating and call us directly at 800.877.2345.
If you receive an email stating that your username, password, phone number, email address, etc., has been changed and you did not initiate this change, please contact us immediately.
This article is provided for educational purposes only and is not intended as financial or legal advice. Members should contact the Credit Union for guidance regarding their individual situation. Federally insured by NCUA. Equal Housing Lender.
