Don't Get Spoofed!
Before you do anything on your credit union’s website, ensure the URL (web address) is correct. Many scammers use URLs that deliberately look very similar to a real credit union, but link to a copycat website. Scammers hope to lure you into the “evil twin” website to trick you into giving them personal information such as your account number and password.
If you are using personal identifying information in your login ID, you are at a higher risk of identity theft because the scammer will be able to see the information you are typing.
If you have doubts that you’re on the right page you can retype the URL into your browser, conduct an internet search for your credit union’s name, and see if the same website is in the top listing. You can also read the website’s “About Us” section to look for a brief history of the credit union, address and information about its insurance coverage.
Reference: https://www.mycreditunion.gov/fraud/Pages/online-security.aspx