Skip to main content

Security

Online Security Disclosure

Protect, Detect, and Respond: Staying Safe in Today’s Digital Banking Environment

Cybercrime continues to evolve, and fraudsters are using increasingly sophisticated tactics—including artificial intelligence (AI), voice cloning, phishing, smishing (text message scams), and account takeover attempts—to target consumers and businesses. Protecting your personal and financial information requires a combination of strong security habits, awareness, and quick action when something looks suspicious. Modern security best practices emphasize strong authentication, real-time account monitoring, and verification of all unexpected requests for sensitive information.

Protect Your Accounts and Devices

Treat your online banking credentials with the same care you would your cash, debit card, or checkbook.

To help protect yourself:

  • Enable Multi-Factor Authentication (MFA) wherever available.
  • Consider using passkeys or hardware security keys when supported, as they provide stronger protection than passwords alone.
  • Use strong, unique passwords for online banking and financial accounts.
  • Never reuse banking passwords on other websites.
  • Keep your computers, smartphones, tablets, and applications updated with the latest security patches.
  • Install and maintain reputable antivirus and anti-malware software.
  • Avoid conducting banking transactions while connected to public Wi-Fi networks. If necessary, use a trusted cellular connection or a secure VPN.
  • Enable account alerts to receive notifications of transactions, login attempts, and changes to your account. Real-time alerts can help you detect fraud quickly.

Partner With Your Bank

Your financial institution offers tools and services designed to protect your accounts from unauthorized activity. Business customers should speak with their banker about additional fraud-prevention services such as:

  • ACH and wire transfer controls
  • Dual approval or dual authorization requirements
  • Transaction limits
  • Out-of-band verification for high-risk transactions
  • Device recognition and risk-based authentication controls

These layered security measures help reduce the risk of fraud and account takeover. 

Detect Suspicious Activity Early

Fraud can occur quickly. Regularly review your account activity and investigate anything unusual.

Be alert for:

  • Transactions you do not recognize
  • Unexpected password reset notifications
  • Login alerts from unfamiliar devices or locations
  • Pop-up warnings requesting payment or technical assistance
  • Emails, text messages, or phone calls requesting personal information
  • Urgent requests to transfer money or purchase gift cards

If something seems suspicious, trust your instincts and contact your financial institution immediately using a verified phone number from your bank statement, debit card, or official website. Never use contact information provided in a suspicious message.

Respond Quickly if You Suspect Fraud

If you believe your information, device, or account may have been compromised:

  1. Contact your financial institution immediately.
  2. Change passwords for affected accounts.
  3. Enable or review Multi-Factor Authentication settings.
  4. Disconnect compromised devices from the internet and have them professionally scanned.
  5. Monitor your accounts carefully for unauthorized activity.
  6. Document what occurred, including dates, times, messages received, and any transactions involved.
  7. Consider placing a fraud alert or security freeze on your credit file if personal information may have been exposed.

Quick action can help limit financial losses and prevent further fraud.

Identity Theft: What It Is and How It Happens

Identity theft occurs when someone obtains and uses your personal information without permission. Criminals may target information such as:

  • Name
  • Address
  • Date of birth
  • Social Security Number
  • Driver’s license number
  • Online banking credentials
  • Debit or credit card numbers
  • Email addresses and passwords

Fraudsters may use stolen information to:

  • Open credit accounts
  • Apply for loans
  • Obtain government benefits
  • Make unauthorized purchases
  • Access financial accounts
  • Commit tax or employment fraud

Identity theft can damage your credit, result in financial loss, and require significant time to resolve.

Identity Theft Prevention Tips

Help reduce your risk by following these simple steps:

  • Shred documents containing personal information before disposal.
  • Review bank and credit card statements promptly.
  • Monitor your credit reports regularly.
  • Sign up for account alerts.
  • Protect Social Security numbers and other sensitive information.
  • Verify identities before sharing personal information.
  • Only provide sensitive information when you initiate contact with a trusted organization.
  • Secure physical mail and promptly retrieve mailed statements or checks.

Safe Online Practices

When Using Websites

  • Look for "https://" and the lock icon before entering sensitive information.
  • Verify website addresses carefully; scammers often use look-alike domains.
  • Type website addresses directly into your browser rather than clicking links in unsolicited emails or texts.
  • Use credit cards or protected payment methods when making online purchases.
  • Limit the amount of personal information shared on social media.
  • Be cautious of online advertisements and sponsored search results that impersonate legitimate companies.

Mobile Device Security

  • Protect devices with a passcode, PIN, fingerprint, or facial recognition.
  • Keep device operating systems and apps updated.
  • Enable device encryption.
  • Turn on "Find My Device" and remote wipe capabilities.
  • Download apps only from trusted app stores.
  • Avoid storing unnecessary sensitive information on mobile devices.

Creating Strong Passwords

Strong passwords remain one of the most important security controls.

Best practices include:

  • Use long passwords or passphrases (at least 12–16 characters).
  • Combine upper- and lower-case letters, numbers, and symbols.
  • Avoid personal information such as birthdays, names, or addresses.
  • Use a unique password for each important account.
  • Store passwords in a reputable password manager.
  • Never share passwords with anyone.
  • Avoid saving banking passwords in shared or public devices.

Common Scams and Fraud Schemes

Generative AI: Understanding the Opportunities and Risks

Artificial Intelligence (AI) tools such as ChatGPT, Microsoft Copilot, Google Gemini, Claude, and other generative AI platforms have become increasingly common in both personal and professional settings. While these technologies can improve productivity and provide valuable assistance, they also create new opportunities for fraudsters and cybercriminals.

Generative AI allows criminals to create highly convincing emails, text messages, websites, voice recordings, and even video content that can be difficult to distinguish from legitimate communications. Cybercriminals are increasingly using AI to enhance phishing campaigns, impersonate trusted organizations, and target consumers with personalized scams

How Criminals Use Generative AI

Fraudsters may use AI to:

  • Create realistic phishing emails that closely mimic a financial institution's branding, tone, and writing style.
  • Generate fake text messages claiming there is a problem with your account.
  • Clone the voice of a family member, business associate, or bank representative to request money or sensitive information.
  • Create fraudulent websites that appear nearly identical to legitimate banking websites.
  • Produce fake social media profiles and advertisements designed to steal personal information.
  • Generate convincing fake invoices or payment requests targeting businesses and consumers.

Protect Yourself from AI-Enhanced Scams

Because AI-generated fraud attempts can appear highly authentic, it is important to adopt a "trust but verify" approach.

Verify Before You Act

  • Never rely solely on the information provided in an email, text message, or phone call.
  • If you receive an urgent request involving money, account information, passwords, or authentication codes, independently contact the organization using a trusted phone number or website you know is legitimate.
  • Be cautious of requests that create a sense of urgency, fear, or pressure.

Protect Sensitive Information

  • Never provide passwords, passcodes, Multi-Factor Authentication (MFA) codes, or account credentials through email, text message, or an unsolicited phone call.
  • Avoid entering banking credentials after clicking links in emails or text messages. Instead, navigate directly to your financial institution's website.
  • Review account alerts and transaction notifications regularly.

Be Alert for Deepfakes and Voice Cloning

Deepfake technology can create realistic audio and video impersonations of trusted individuals.

If you receive a call from someone claiming to be:

  • A family member requesting emergency funds
  • A company executive asking for a wire transfer
  • A bank employee requesting account verification
  • A government representative demanding immediate payment

Pause and verify the request through an independent communication channel before taking action. 

Safe Use of AI Tools

If you choose to use AI tools:

  • Do not enter account numbers, Social Security numbers, passwords, PINs, tax information, or other confidential financial information into publicly available AI platforms.
  • Review the privacy policies and terms of service before sharing information with AI applications.
  • Use caution when relying on AI-generated content, as responses may occasionally contain errors or outdated information.
  • Always verify financial, legal, tax, and banking information through trusted sources before acting on it.

Remember

Artificial intelligence can be a valuable tool, but scammers are increasingly using the same technology to create more sophisticated fraud attempts. The best defense is to remain cautious, verify unexpected requests through trusted channels, and never share sensitive banking information unless you have independently confirmed the legitimacy of the request. 

Important: Your financial institution will never contact you unexpectedly and request your online banking password, one-time authentication code, PIN, or complete account credentials by email, text message, or unsolicited phone call. 

Phishing, Smishing, and Vishing

Criminals use emails (phishing), text messages (smishing), and phone calls (vishing) to trick individuals into revealing sensitive information.

Modern scams may use AI-generated messages, realistic branding, or even cloned voices to impersonate trusted organizations. 

Warning Signs

  • Generic greetings
  • Urgent requests for immediate action
  • Threats that an account will be suspended
  • Requests for passwords, PINs, MFA codes, or account information
  • Suspicious links or attachments
  • Poor grammar or unusual wording
  • Requests for payment through gift cards, cryptocurrency, or wire transfers

Remember: Legitimate financial institutions will never contact you unexpectedly and ask for passwords, one-time authentication codes, or full account credentials by email, text message, or unsolicited phone call. 

Tech Support Scams

Scammers may claim to represent Microsoft, Apple, your internet provider, or another technology company.

Common tactics include:

  • Pop-up messages claiming your device is infected
  • Calls stating your device has viruses or security problems
  • Requests for remote access to your computer
  • Demands for payment to "fix" non-existent issues
  • Fake refund requests where scammers claim they accidentally refunded too much money

Never grant remote access to your device unless you initiated contact with a trusted support provider.

Business Email Compromise (BEC)

Businesses are increasingly targeted by fraudsters who impersonate executives, vendors, or clients.

Before changing payment instructions, sending wires, or updating vendor banking information:

  • Verify requests through a known phone number.
  • Use dual approval processes.
  • Independently confirm unusual or urgent requests.

Additional Resources

For more information on fraud prevention and identity protection:

Important: Your financial institution will never contact you unexpectedly and request your online banking password, one-time authentication code, PIN, or complete account credentials by email, text message, or unsolicited phone call.

Remember: Cybersecurity is a shared responsibility. By staying informed, using strong security controls, monitoring your accounts regularly, and reporting suspicious activity promptly, you can significantly reduce the risk of fraud and identity theft.