Internet Safety Tips:

Please ensure you have a firewall between you and the Internet. Microsoft Windows has had a firewall turned on by default since Windows XP SP 2, though having that version of Windows or later is no guarantee of its effectiveness. In addition, most home network equipment have basic firewall capabilities. There are various, free testing services on the Internet that can check your firewall for you without requiring you to install any software or make any other changes. As with everything on the Internet, be cautious if a site tries to install software on your computer or requests payment.

Please ensure your machine's operating system and applications are up-to-date with all security patches. "Pathes" are software updates that address known security vulnerabilities, which can be exploited by viruses and other malware, as well as rogue websites. For Microsoft Windows users, Automatic Updates may or may not address all of your installed software, such as Microsoft Office products, which can also present a risk when surfing the Internet. Apple Mac software can be updated through the "Software Update" utility. Other software, such as Adobe Reader, Adobe Flash, Apple iTunes, Sun Java, and more should be updated as well.

Please ensure that you have anti-virus software installed and running, as well as ensuring that it is being updated regularly. Anti-virus companies issue updates on an almost-daily basis and sometimes more frequently than that. Given the prevalence and sophistication of viruses and other malware, it is critical that your anit-virus software be kept up-to-date.

Please be cautious when clicking links in unsolicated e-mails as e-mails are easily forged and can point your computer to malicious websites. Best practices when opening e-mail include asking the following questions:

1. Did I expect this e-mail?

2. Is it from someone I know and trust?

3. Is the content reasonable and/or relevant?

4. Are there spelling mistakes or is there unusual grammar being used?

 

February 2012 - FBI Warns of New Banking Scam

Some crafty criminals are aiming to steal one of the most valuable pieces of your personal property: your banking information.

In a new warning, the Federal Bureau of Investigation warns account holders of a new spam email scheme that involves a type of malware called "Gameover." The scheme involves fake emails from the National Automated Clearing House Association, the Federal Reserve or the FDIC. These messages attempt to trick recipients into clicking on a link to resolve some type of issue with their accounts or a recent ACH transaction. Once you click on the link, Gameover takes over your computer, and thieves can steal usernames, passwords and your money.

The FBI also warns the thieves' hacking capabilities can navigate around common user authentication methods banks use to verify your identity, which is certainly a cause for concern. Those additional authentication steps -- often personal questions, birth dates or other pieces of private information -- are meant to provide some extra security padding.

While phishing scams are nothing new to the world of online banking, this type of warning serves as a reminder of just how susceptible account holders can be to malicious attacks. As more account holders begin to jump on the mobile banking bandwagon, it's important to remember that a smartphone essentially acts as another computer. While this additional connection to the Internet is convenient, it also serves as another outlet where your information can be compromised.

Here are a few crucial steps to take to avoid falling victim to this type of Internet crime.

• Keep your computer and mobile device updated with the newest versions of anti-virus software.
• If you have any doubts about an email sender's authenticity, do not click on any embedded links.
• Remember, banks never request any personal information via email.
• Be vigilant about checking your account balances. The sooner you notice and report any type of fraudulent activity, the more likely you'll be able to be reimbursed for any missing funds.

February 2012 - NACHA Email

Please be aware of fraudulent emails appearing to come from NACHA. These emails may state that an ACH file or entry has been rejected by the Electronic Payments Association and that the customer should click on the attachment to open the document which supposedly will tell them the nature of the reject.  DO NOT OPEN THE ATTACHMENT.

Please see the below from the NACHA website:

FRAUDULENT EMAILS…Be Aware That:

• NACHA does not process nor otherwise touch the ACH transactions that flow via the ACH Network nor between financial institutions and their customers.
• NACHA does not send communications of any type to persons or organizations about individual ACH transactions that they originate or receive. If you or your customer has received a communication of this nature that purports to come from NACHA, it is fraudulent.
• NACHA is the industry trade association that manages the development, administration, and governance of the ACH Network, the backbone for the electronic movement of money and data.
• The ACH Network serves as a safe, secure, reliable network for direct consumer, business, and government payments, and annually facilitates billions of payments such as Direct Deposit and Direct Payment .
• These incidents are occurring with greater frequency and increased sophistication. Perpetrators are conducting similar phishing attacks in which they are sending fraudulent emails that claim to be from the Federal Reserve Bank, IRS, other federal agencies, as well as commercial financial institutions, other payment organizations, technology companies, and businesses.

October 2011 - Scam Alert

The American Bankers Association has issued a new warning to highlight increases in phishing scams linked to consumer bank accounts.

According to the ABA, phishing schemes that aim to gather credit and debit details from consumers are on the rise. The crux of most scams: Misinforming consumers about closure of or trouble with their bank accounts, a lure to consumer replies from the socially engineered scam.

Last week's smishing attack, which targeted thousands of Wells Fargo customers by sending out a flood of phony text messages to mobile numbers in Oregon, is a prime example. The scam, feigning to come from Wells, attempted to get mobile recipients to respond with bank details related to their Wells accounts.

Earlier this month, Police in Pima County, Ariz., issued a similar warning about smishing, phishing attacks, targeting mobile users in the Tucson region.

Authorities say consumers were receiving phishy text message that asked accountholder to call specified numbers to resolve possible compromises of their bank accounts. The smishing attacks included the last four digits of the user's debit card, which made the text messages appear legitimate.

The ABA says these types of schemes are common. In some cases, consumers are even asked to text or e-mail card expiration dates and CV security codes.

"Those who respond to these inquiries run the potential risk of having their information used to fraudulently purchase goods and services, or to obtain credit," the ABA says.

"Phishing is fairly cyclical," says Doug Johnson, vice president of risk management policy for the ABA. "Based on a recent uptick in activity, we decided to remind customers how to protect themselves from phishing, which is something we do periodically."

Tips for Institutions and Consumers

The ABA suggests financial institutions share tips and remind consumers that socially engineered schemes rely on methods financial institution would never employ.

To avoid fraud, banks and credit unions should remind consumers to:

• Never give out personal or financial information in response to an unsolicited phone call, fax, e-mail or text.
• Contact the bank to confirm the legitimacy of any e-mail that asks for the submission of personal or banking account information.
• Check credit card and bank account statements regularly for unauthorized transactions, even small ones.
• Make sure websites are secure when submitting financial information online. Check for padlocks or key icons at the bottoms of Internet browsers. Most secure Web addresses also use "https."
• Report suspicious activity to the Internet Crime Complaint Center, a partnership between the Federal Bureau of Investigation and the National White Collar Crime Center.
• Contact your bank immediately if a phishy link may have been clicked or a suspicious communication responded to.
• For information about identity theft, visit the ABA's Consumer Connection.

September 2010 - Labor Day Warning

Please click here to view warning

June 2010 - Security Alert

We have learned that criminals have launched a major e-mail campaign to deploy the infamous ZeuS Trojan e-mail, which will send spam messages disguised as fraud alerts from the Internal Revenue Service (IRS), Twitter account hijack warnings, or salacious Youtube.com videos.

The fraudulent IRS e-mail uses the verbiage “Notice of Underreported Income” as the Subject Line and encourages the recipient to click a hyperlink to review their tax statement. All of the latest e-mails use a variety of URL shortening services.

To help protect against fraudulent activity, Choice Bank strongly recommends that you review Internet security procedures including, but not limited to:

• Ensure that up-to-date antivirus, antispam and antispyware programs are being used.
• Reminder, do not open attachments or download information from unexpected or spam e-mails.

June 2010 - Telephone Scam

Several clients and non-clients have reported receiving fraudulent calls that claim to be from Choice Bank. Such fraudulent calls may request confidential debit card or account information and claim such information is needed to confirm activation of the debit card or account.

Please note that Choice Bank will never contact clients or non-clients to request personal information in this manner. If you receive a call claiming to be from Choice Bank and asking for your personal information, such as listed above, do not reply or give out any of your personal information.

If you have received a call and have provided the requested information, please call the number on the back of your debit card to report the incident and have your card deactivated.

At www.choicebank.com you can find more ways to protect your identity and learn what Choice Bank does to protect your confidential information by reading our Privacy Statement.

Please note: The Oshkosh Northwestern recently reported that the Oshkosh Police Department is informing residents of a phone scam that may be related. The June 11, 2010 story can be found online at http://bit.ly/9FdqbO.

February 2010 - Your Internet Safety

The Bank is aware of various e-mail scams that purport to be from banks and may attempt to get you to install software, go to fake websites, or otherwise provide confidential information via other means to unauthorized parties.

Please note that e-mail is very easy to forge and there is nothing the Bank can do to prevent it from reaching you. Also, there is nothing your e-mail provider can do to prevent forged e-mail, and many other technologies such as anti-virus or anti-spam cannot detect or stop it.

When you receive an e-mail that appears to be sent from the Bank and it is requesting an action on your part, please call us to double check that the e-mail is not fake.

We will never ask you to:

• Install software provided by e-mail.
• Go to a website to enter your personal information, including account numbers, social security numbers, driver's license numbers, date of birth, etc.
• Call a non-local or 800 number to provide personal information as noted above.

As always, if you have any questions or concerns about the updates please feel free to contact Choice Bank directly at (920) 230-1300 or info@choicebank.com.

Back to Top