Important Security Alert: Impersonation Scams

Individuals are contacting bank customers and impersonating SBSU employees in an attempt to gain access to personal banking information. Once obtained, this information is being used to set up accounts with MoonPay, a cryptocurrency platform, and make unauthorized transactions.

As a precaution and to protect your financial security, we have disabled all debit card transactions with MoonPay indefinitely. This means purchases or account connections involving MoonPay will be declined at this time.

Please remember:

• SBSU will never call, text, or email you to ask for your account password, full debit card number, or online banking login credentials.
• If you receive a suspicious call claiming to be from SBSU, hang up and call us directly using the number on the back of your debit card.
• Never share one-time passcodes or verification codes with anyone.

If you believe you may have provided information to a scammer or notice any unusual activity on your account, contact us immediately.

Fake Text Messages:

Have you received text messages like the following?

If you are receiving the above message please contact State Bank Immediately: Call (435) 865-2300 (Mon-Sat, 8 AM – 8 PM).

By calling State Bank of Southern Utah you can verify that your login information is safe. Do not respond to the above text.

This is a scam text sample.

What You Need to Know:

1. The above is a scam text sample.
2. State Bank Never Sends Links via Text Messages: Don’t click links or call phone numbers in text messages that claim to be from State Bank.
3. Scare Tactics Are Common: Fraudulent messages are designed to frighten you. The “transaction” they reference never actually happened.
4. Beware of Imposters: Scammers may call claiming to be from “SBSU Fraud” and try to convince you to click a link or share your login details.
5. Fake Websites Look Real: Links in phishing texts often lead to fake websites that mimic State Bank’s site to steal your login credentials.
6. Never Share Two-Factor Codes: State Bank will never ask for the two-factor authentication codes sent to your phone—not even over the phone.
7. Verify the Website Address: State Bank’s official website is www.sbsu.com. Be cautious—if even one character is off, it’s a scam.
8. Monitor Your Transactions: You can check real-time debit transactions in your account. To check credit card transactions, follow these steps:
• Log in to your account, scroll to your credit card, and click.
• At the top, click “Manage Card” to view real-time transactions via EzCardInfo.

If You Clicked the Link, Attempted to Login, and/or Revealed Your Codes:

1. Contact State Bank Immediately: Call (435) 865-2300 (Mon-Sat, 8 AM – 8 PM).
2. Log in to State Bank’s Official Website and Verify Your Info: Go to www.sbsu.com and log in to your account. After logging in, click the down arrow next to your name >> Profile >> Contact Information. Verify your phone number and address is correct.
3. Check and Secure Transfers: Review your Zelle and external transfers. Cancel or delete any you don’t recognize. Report suspicious transfers when you call us.
4. Change Your Username and Password: After logging in, click your name in the upper right >> Profile >> User ID. Choose a new User ID and Password (different from any used elsewhere). Click Update when finished.
5. Avoid Using Shared Credentials: Use a unique username and password for your State Bank account to prevent computer bots from accessing your information on other websites.