Security

Online Services Security Measures

We are strongly committed to protecting the security and confidentiality of your nonpublic personal information while you are using our Online Banking and other online services.  We use several techniques to help secure your online experience, including, but not limited to, the following:

• You can only access the Online Banking website with certain browsers that support a high security standard.  This standard requires the use of cryptographic protocols (such as TLS 1.2) to protect your information as it travels over the Internet.

• You must have a valid Online Banking User ID and password to log on.  Your User ID and password are things only you know and should not be shared with anyone.

• In certain circumstances ranked as “high risk” by our security software, you will have to retrieve a One-Time Security Code before being allowed to proceed.  A One-Time Security Code is generally required when a new/different computer is being used or when the network access path is new/different.  Retrieval of a One-Time Security Code will require access to a working contact number (phone/text) defined within your Online Banking profile.

• The Online Banking’s default configuration utilizes a “masking” feature so that only the last (4) digits of your account number(s) can be viewed from the standard interface screens.  You may also elect to use Online Banking’s “alias” feature, which allows you to rename an account within Online Banking, further limiting how an account number is displayed.

• Beyond the system/mandatory alerts that are enabled for all Online Banking users, you are encouraged to leverage Online Banking’s “alerts” feature, which can inform you of specific account activity or the attainment of a balance limit/threshold.  Such alerts could be used as possible warning indicators of recent unauthorized activity.

• If no action is taken for (20) minutes, you will be automatically logged off Online Banking.  This step is taken to lessen the likelihood of someone accessing your account(s) because you left your Online Banking session open after stepping away from your computer for a period.

• When using the optional SMS Text Banking channel, you are limited to information-only interactions, such as balance inquiries and recent transaction history inquiries.

• After (5) failed attempts to log in, an access “lock” is placed on your Online Banking and related online services access that can only be removed by contacting our support staff.

Tips for Avoiding Identity Theft

The primary goal of identity thieves is to uncover and abuse your nonpublic personal information.  Combined with other information like a bank or credit card account number, your stolen information can be used by identity thieves to open lines of credit, access your bank accounts, or even apply for official documents such as a driver’s license or passport.

If you are a victim of identity theft, you could spend months or years clearing your name and credit.  You could be rejected for loans, employment, or housing. You could even be arrested for crimes you didn't commit.

Here are some tips to help you avoid online identity theft:

• Don’t include personal information in unsecured email messages, text messages, chats, blogs, forums, or social media postings.  Once you send out this information, you are no longer in control of it.

• Limit all personal information about yourself on the Web.  The more you provide, the easier it is for a scammer to manipulate it for his/her own purpose.

• Don’t open files, download programs, or click on Internet links sent to you unless you are expecting them.  These items are commonly associated with “phishing” scams, malware distribution, and other fraudulent activities.

• Don’t respond to any unsolicited request for information or action on your part via telephone, email, text message, social media request, etc.

• Use one dedicated credit card for online purchases.  Monitor your statements for any suspicious activity.

• Regularly review bank statements and related correspondence for any suspicious activity.

• Consider maintaining multiple email accounts.  Use one for retail activities (like paying your utility bills), another for personal correspondence with select individuals like family, and another for everything else.

• Be sure your Internet browser is secure, and continually update it to the latest version.  Web browsers with strong encryption capabilities can scramble your personal information as it travels over the Internet.

• Avoid storing personal information on your computer indefinitely.  When possible, remove it from your computer.

• Before disposing of an old computer, make sure you have removed all the personal information previously stored on it.  Deleting files isn’t enough.  Use a utility program designed to overwrite, or “wipe,” your hard drive.  The best way to ensure that all sensitive information on your old hard drive stays safe is to physically destroy the drive itself.

• Use firewall, anti-virus and anti-spyware security software, and continually update them to the latest versions.

• Use strong passwords with a combination of upper- and lower-case letters, numbers, and symbols.  Don’t enable a login screen to save your password.  Don’t give your User ID and password to anyone you wouldn’t authorize to make transactions on your behalf.

• Always properly “log off” when you leave a secured site.

• Be on the lookout for “shoulder-surfers.”  Such individuals are often trying to steal your online access credentials.

• Avoid using public or “free” Wi-Fi providers, as there may be criminals or malware present that will try to steal your online access credentials, takeover your Internet device, or distribute more malware.

• Regularly check your credit score to make sure there hasn’t been any unusual banking or credit activity completed in your name.  The Fair Credit Reporting Act requires each of the major nationwide consumer reporting companies to provide you with a free copy of your credit report, at your request, once every 12 months.  To order your free credit reports, visit www.annualcreditreport.com.

• Stay abreast of all the current scams being reported to the FTC, by visiting:  https://www.consumer.ftc.gov/features/scam-alerts

Identity Theft Next Steps

You should do the following right away:

• Call the companies where you know fraud occurred.  Ask to speak with someone in the fraud department.  Explain that someone stole your identity.  Report any fraudulent charges or transactions.  Ask to have your accounts closed or frozen, so that no one can add new charges unless you agree.

• Change logins, passwords, and PINs for your affected accounts.

• Place a fraud alert on your credit reports by contacting any one of the three main credit bureaus (Equifax or 1-888-766-0008; Experian or 1-888-397-3742; TransUnion or 1-800-680-7289).

• Review your free credit reports (annualcreditreport.com or 1-877-322-8228) and account statements for suspicious activity.

• File a complaint with the Federal Trade Commission (IdentityTheft.gov or 1-877-438-4338).

You may also choose to:

• File a report with your local police or the police in the community where the identity theft took place.

• Consider requesting a “credit freeze” by engaging the three main credit bureaus.  A freeze can help curtail the opening of new fraudulent lines of credit.