Conducting Transactions Online
Federal Financial Regulators are reporting that Internet threats have changed significantly over the past several years. Sophisticated hacking techniques and growing organized cyber-criminal groups are increasingly targeting financial institutions, compromising security controls, and engaging in online account takeovers and fraudulent electronic funds transfers.
In order to help ensure the security of your online transactions, we want you to know that:
- We will never email, call or otherwise ask you for your user name, password or other electronic banking credentials.
- You can help protect yourself by implementing alternative risk control processes like:
- Making sure you choose an adequate user name and password that, at a minimum, mixes in lower case letters, upper case letters and numbers.
- Periodically changing your password (at least every 90 days).
- Safeguarding your user name and password information.
- Making sure you have a firewall in place when conducting your banking transactions.
- Logging off your computer when you are done conducting business. (Do not just close the page or "X" out of the computer.)
- Regularly monitoring your account activity.
- Making sure you choose an adequate user name and password that, at a minimum, mixes in lower case letters, upper case letters and numbers.
In addition, we may require owners of commercial accounts to perform their own risk assessments and controls evaluations. For example:
- Make a list of the risks related to online transactions that your business faces including:
- Passwords being written down and left out in the open.
- The use of old or inadequate passwords.
- The possibility of internal fraud or theft.
- Delays in terminating the rights of former employees.
- The lack of dual control or other checks and balances over individual access to online transaction capabilities.
- Passwords being written down and left out in the open.
- An evaluation of controls your business uses may include:
- Using password protected software to house passwords.
- Conducting employee background checks.
- Initiating a policy and process to terminate access for former employees.
- Segregating duties among two or more people so no one person has too much access or control.
- Conducting internal or third party audits of controls.
- Using firewalls to protect from outside intrusion or hackers.
- Using password protected software to house passwords.

