Here’s How:
Never provide personal financial information, including your Social Security number, account numbers or passwords, over the phone or the Internet if you did not initiate the contact.
Never click on the link provided in an e-mail you believe is fraudulent. It may contain a virus that can contaminate your computer.
Do not be intimidated by an e-mail or caller who suggests dire consequences if you do not immediately provide or verify financial information.
If you believe the contact is legitimate, go to the company’s website by typing in the site address directly or using a page you have previously bookmarked, instead of a link provided in the e-mail.
If you fall victim to an attack, act immediately to protect yourself. Alert your financial institution. Place fraud alerts on your credit files. Monitor your credit files and account statements closely.
Report suspicious e-mails or calls to the Federal Trade Commission through the Internet at www.consumer.gov/idtheft, or by calling 1-877-IDTHEFT.
What to do if you fall victim:
- Contact your financial institution immediately and alert it to the situation.
- If you have disclosed sensitive information in a phishing attack, you should also contact one of the three major credit bureaus and discuss whether you need to place a fraud alert on your file, which will help prevent thieves from opening a new account in your name. Here is the contact information for each bureau’s fraud division:
| Equifax |
Experian |
TransUnion |
| 800-525-6285 |
888-397-3742 |
800-680-7289 |
| P.O. Box 740250 |
P.O. Box 1017 |
P.O. Box 6790 |
| Atlanta, GA 30374 |
Allen, TX 75013 |
Fullerton, CA 92634 |
Report all suspicious contacts to the Federal Trade Commission through the Internet at www.consumer.gov/idtheft, or by calling 1-877-IDTHEFT.
How to Fight Against Phising
"Phishing" (pronounced "fishing") is when criminals use e-mail to try to lure you to fake websites, where you're asked to disclose confidential financial and personal information, like passwords, credit card account numbers or Social Security Numbers.
The most common type of phish is an e-mail threatening some dire consequence if you do not immediately log in and take action.
You should never respond or reply to e-mail that:
- Requires you to enter personal information directly into the e-mail or submit that information some other way.
- Threatens to close or suspend your account if you do not take immediate action by providing personal information.
- Solicits your participation in a survey where you are asked to enter personal information.
- States that your account has been compromised or that there has been third-party activity on your account and requests you to enter or confirm your account information.
- States that there are unauthorized charges on your account and requests your account information.
- Asks you to enter your User ID, password or account numbers into an e-mail or non-secure webpage.
- Asks you to confirm, verify, or refresh your account, credit card, or billing information.
Security
The privacy of communications between you (your browser) and our
servers is ensured via encryption. Encryption scrambles
messages exchanged between your browser and our online banking
server.
How Encryption Works
- When visiting online banking's sign-on page, your browser
establishes a secure session with our server.
- The secure session is established using a protocol
called Secure Sockets Layer (SSL) Encryption. This
protocol requires the exchange of what are called public and private
keys.
- Keys are random numbers chosen for that session and are only known
between your browser and our server. Once keys are exchanged, your
browser will use the numbers to scramble (encrypt) the
messages sent between your browser and our server.
- Both sides require the keys because they need to descramble
(decrypt) messages received. The SSL protocol assures
privacy, but also ensures no other website can "impersonate" your
financial institution's website, nor alter information sent.
- To learn whether your browser is in secure mode,
look for the secured lock symbol at the bottom of your browser window.
Encryption LevelThe numbers used as encryption keys are similar
to combination locks. The strength of encryption is based on the number of
possible combinations a lock can have. The more possible combinations, the
less likely someone could guess the combination to decrypt the
message.
For your protection, our servers require the browser to
connect at 128-bit encryption (versus the less-secure 40-bit encryption).
Users will be unable to access online banking functions at lesser
encryption levels. This may require some end users to upgrade their
browser to the stronger encryption level.
To determine if your browser supports 128-bit encryption:
- Click "Help" in the toolbar of your Internet browser
- Click on "About [browser name]"
- A pop-up box or window will appear.
- For Internet Explorer: next to "Cipher strength" you should see
"128-bit"
- For Netscape: you should see "This version supports high-grade
(128-bit) security with RSA Public Key Cryptography"
If your browser does not support 128-bit encryption,
you must upgrade to continue to access the website's secure pages. Digital
Insight-supported browsers are listed on the DI
Client Site.
Other browsers that support 128-bit
encryption also may work. More information on some common browsers is
available via these links:
|