misuse of JCPenney name 

Customers have reported solicitations via all modes of communication, including mail, calls, emails, text messages or Web sites misusing our name:

A promise of a  jcp gift card (often $500) in exchange for completing an online survey. These offers are not from, nor are they endorsed by JCPenney. Our store receipts have an offer inviting customers to take a JCPenney survey. Our in-store receipts include instructions for accessing the survey by entering www.jcpsurvey.com or www.jcp.com/survey into your browser (URL address). If you use a search engine such as Google, Yahoo, etc., and search for jcp survey, you may be directed to a survey from another company using the JCPenney name. These sites are not affiliated with JCPenney.

Examples include:

• A promise of a $500 jcp gift card from a caller offering a 'voucher'.  In order to receive the voucher, the caller requires personal banking account information, so that a small charge for shipping and handling can be automatically withdrawn from the customers' checking account.
• A promise of a $500 jcp gift card for registering for a program (e.g. trial offer).  Customers are asked to provide their credit or debit account number in order to claim the gift card. 
• Recruitment for a variety of types of employment, including “secret shopper” or other career opportunities.
• False shipping notices or invoices for product that a customer did not order.
• Other solicitations using JCPenney’s name to gather personal information. 

These calls, emails, text messages, or Web sites communications are not from, nor are they endorsed or sponsored by JCPenney.  Our name is being used without our consent.  These solicitations are spam and Website spoofing, and target more than customers of jcp.

common fraud practices

Spam, also known as a bulk e-mail or junk email involves sending nearly identical messages to numerous recipients by e-mail. Spammers form web pages, news groups, chat rooms, e-mail chain letters and web browsers in order to harvest e-mail addresses for this purpose. These addresses are in turn sold to other spammers.

website and email phishing

Phishing scams are simply a method of creating fraudulent web sites and email that look similar, if not identical, to those of actual business or organization.  The design, look, and feel of the original site or electronic correspondence are copied from the original business or organization.

tips for customers

Though phishing attempts may come through email, text message, or phone calls, they are most often carried out through email.  The following tips will help you to identify whether correspondence you receive is valid or not.  If at all unsure or uncomfortable, simply do not respond to the email.

• jcp does not offer high-value shopping vouchers or gift cards in exchange for completing surveys or for signing up for free offers.  Communication of such offers should be suspect and not responded to.
• jcp does not ask for personal information over email.  Never give out personal information, especially drivers license numbers, social security numbers, or credit cards over email.
• Phishing emails will often contain misspellings and poor grammar.  These are clues that the email is not official.
•  It is possible to spoof the FROM address on an email to appear as though the email is coming from JCPenney, however, many phishing emails will show a FROM address that is obviously not JCPenney (Gmail, Yahoo, Hotmail, etc.).  Carefully examining the Reply To email address will give you a hint as to whether the email is fraudulent.
• Phishing emails that do not ask for a reply via email will often have a link to a web page.  These links give clues to the validity of the email.  Often the links are obscured.  What you see in the email is not necessarily the real link that you’ll be taken to if you click on it.

how to determine if a link is valid

Place your mouse cursor over the link without clicking on the link.  This should allow you to see the real link in a pop-up.  If this does not work, you may also right-click on the link and select an option to copy the link and then paste it into a document to see the real link.

Examine the real link and note the following indicators that the link is fraudulent:
 

general tips for customers

When we learn that another person or company is using our name without our consent, we try to stop it. However, it can take time, and it can be difficult to do.  Here are some tips:  

• If you visit a Web site, receive an email, text message, or call offering a high-value JCPenney shopping voucher or gift card in exchange for answering questions, signing up for free offers or anything else, please know that it is not JCPenney, and that it is not endorsed or sponsored by JCPenney. Be sure to look at who is sending the offer as well as read and listen to the offer carefully before responding.
• Some email messages explicitly state that the offer is not sponsored or endorsed by the company featured in the offer. This should help you understand that JCPenney is not involved in the offer.
• Be aware of Web sites, callers or emails asking for your credit or debit account number, banking account information, or other sensitive personal information. Keep this information secure and refuse to reveal it to anyone you do not know, especially if you suspect it is not from JCPenney.

If you question whether a call or email is legitimate, do not respond to it before first taking steps to confirm that it is legitimate.

what else should you do?

• Contact your local Better Business Bureau or Attorney General's Consumer Protection Division if you feel you suspect fraud.
• Visit the Federal Trade Commission's Web site at http://www.ftc.gov/ for additional information about protecting your personal information.
• Send us an email regarding suspicious calls and emails communications you received from someone claiming to be from JCPenney.

JCPenney has worked hard to become one of the most trusted retailers in America, and we understand how important the privacy and security of your personal information are to you. We have procedures intended to ensure that your personal information is handled in a safe, secure and responsible manner.