Puerto Rico FCU scam email: cancel withdrawal

Reported as phishing

This email was reported as phishing in October 2026. It claims to come from: Puerto Rico FCU. It was aimed at Puerto Rico and written in Spanish.

This email was reported as phishing. It uses the Puerto Rico FCU name and look, but it did not come from Puerto Rico FCU. If you have an account, Puerto Rico FCU is not asking you to act through this email.

This email uses the name of Puerto Rico Federal Credit Union and is written mostly in Spanish. It says the credit union received your request for an ACH withdrawal from your account, and tells you to log in and cancel it right away. A button reads "log in and cancel withdrawal". The text mixes Spanish and English, and the date and time in the subject line change from email to email.

Seeing a withdrawal you never made causes panic, and panic makes people click the fastest way to stop it. The best tell: it wants you to log in through the email button, and the link goes through a URL shortener with a long random name instead of the credit union's own site.

• Aimed at: Puerto Rico
• Month reported: October 2026
• Email language: Spanish

What the email looks like

Re-typed from the original with personal details removed. This is not the original email. This was a button in the original email. Here it is only a picture of the text and does nothing.

Subject line

• Iniciar sesión y cancelar retiro [date] [time]

Red flags

• Sender address is not on the credit union's domain
• Panic trigger: a withdrawal (ACH) you did not make
• Asks you to log in through the email button
• Link goes through a URL shortener with a long random name
• Date and time in the subject change to avoid filters
• Mix of Spanish and English

Links in the email (shown as plain text)

Links are defanged: "hxxp" and "[.]" stop them from working. Never retype them or copy them into your browser.

What to do

1. Do not click the "cancel withdrawal" button or any link in the email, and do not reply.
2. Do not open attachments. Never type a password, card number or code on a page you reached from this email.
3. If you are unsure, sign in to your credit union yourself by typing its address or using its official app, not through the email.
4. Call your credit union on the number printed on your card or statement to check any withdrawal.
5. Mark the email as phishing or spam in your mail app, then delete it.
6. If you already signed in through the email, change your password now and turn on two-step sign-in. Call your credit union if you shared card or account details.

How to report it

In your mail app, use "Report phishing" or "Report junk" so the app learns to block similar emails. You can also forward the email to the real company's abuse or security team, using an address from its official website. If you lost money, report it to your bank and to your local police.

More scam email examples

• German police: Fake summons - answer within 72 hours
• Spotify: Payment problem / update your payment details
• Your email provider: "Your email password will expire in 24 hours" - keep current password

These emails did not come from the companies or services they name. Brand names belong to their owners and are shown only to help you recognise the scam.