Preventing Cyber Fraud

Online and mobile fraud have certainly become more commonplace and extra concerning these days. Unfortunately, just a password is no longer enough to protect your important personal information against the threat of a cyber data breach. Keep reading to find out important ways to protect yourself and your personal and financial data online.

  • Set-up multi-factor authentication (MFA) on your various accounts. What is MFA? This is a secondary layer of security used to verify your identity. This means in addition to logging in as normal, you would also receive a confirmation email or text with a temporary code that is typically only valid for a few minutes. This second layer of protection allows the bank account you’re logging into, app, social media platform, or online shopping site (even Amazon has a two-factor authentication option for logging into your account) to verify that it’s really you and not a fraudster. Logging in with a fingerprint or Face ID is also considered an MFA option. Using MFA will allow you to be much less likely to get hacked. The more layers of security protection you have, the better!
  • Be sure your software and OS are up to date. Always make sure your online and mobile security software has been updated. This means any anti-virus programs you’re running, firewalls, your computer, smartphone and tablet operating systems (OS), as well as apps and software. Making sure your devices are up to date means that there are no security holes present or ways to gain access to your secure data. An easy way to be sure this is set-up is to enable automatic device updates, or allow your device to perform the update each time you see a notification. Don’t wait until it’s too late!
  • Beware of suspicious emails, calls, and texts. Even if the message or call appears to be from your financial institution. Also be weary of any links that may appear in emails or texts. Clicking on a fraudulent link can be a phishing or malware scam which enables an online criminal to gain access to your bank accounts and personal data. If you receive a message or call that you are unsure of, hang up and don’t click on any links. Instead, call or stop into your trusted financial institution and ask them if they were in fact trying to contact you. An important note to remember is that a legitimate financial institution, business, or organization will never typically contact you out of nowhere and ask you to reveal any personal or financial information (they already have it).
  • Be careful when using public Wi-Fi. If you are logging into your mobile banking app or any secure accounts (especially ones that have access to credit or debit cards), be sure you are not on public Wi-Fi. This makes it easy for a cyber thief to hack into your device through a shared network. Login to these types of sites at home using your secure password protected network, and if you absolutely must login while on the go – be sure to turn off your device’s Wi-Fi connection first. How to know a browser or network is secure? You’ll see a padlock icon within the corner of the browser. This means that you’re on a safe, encrypted network.
  • Use strong passwords and security questions. When you do need to create a password, make sure it’s a strong one that’s hard to crack. For instance – avoid using common names, words, and phrases. Also refrain from using numbers that are in order (ex: Hello123 is not a secure password), and try to also use special characters or substitute characters for letters/numbers (ex: F$rst!97). When setting up security questions, choose ones that only you would know personally and that would be extremely difficult to guess.
  • Monitor your accounts and set-up notifications. It’s always a good idea to monitor your frequently used and bank accounts on a daily basis. This will allow you to check for any fraudulent transactions or purchases you did not make. Another useful tip is to setup account alerts for your bank accounts – most financial institutions or credit cards will allow you to set-up email or text alerts for purchases, debits over a certain amount, low balance alerts, phone or online transactions, and more. Enabling these notifications will allow you to see instantly when a transaction was made that was not done by you.

As always, if you find any fraudulent transactions or receive any suspicious communications regarding your First Financial account – please contact us right away at 732.312.1500 or by emailing info@firstffcu.com.

Also remember that First Financial will never ask you for online or mobile banking login codes you receive, under any circumstances. We will also not ever ask you to download any remote desktop applications to your device.

You can rest assured that First Financial’s Online Banking and Mobile App are protected with various MFA capabilities. We also have the First Financial Wallet App, where you can keep track of all your First Financial card purchases and receive real time alerts right to your mobile phone.

THINK First because There’s Harm In Not Knowing!

Ways to Protect Your Credit Cards

If you’ve ever been a victim of identity theft, you know it’s awful. Between the time it takes to get everything corrected and the stress it causes – it’s definitely a spot you’d like to avoid if you can. Though nothing is fool proof, there are several ways in which you can protect your finances. Here are a few that pertain to keeping your credit card information safe from fraud.

Secure all your cards: If your wallet is ever stolen and you lost every card, think about what a nightmare it would be to have to cancel and replace them all. Really consider this the next time you leave home. Try to only take the cards you absolutely need and keep the rest in a secure location like a safe or locked drawer. Try to also minimize the amount of cash you have on you as well and only bring what you need. This way if your wallet gets lost or stolen, you aren’t literally losing everything.

Pay attention: It might be difficult to keep track of a criminal’s activities in real-time, but you can check on your accounts regularly. Today’s smartphone banking and credit card apps really make it easy and fast to check on all your accounts and look for fraudulent transactions. If you’re keeping track of your spending and looking at your accounts daily, you’ll know the minute something happens that looks out of the ordinary. Checking on your accounts every day also helps you monitor your monthly budget and spending habits too.

Opt for being more high-tech: Have you ever used your smartphone’s digital wallet? Many retailers are set up to take payments via Apple Pay and Google Pay, and it’s very easy to use. EMV chips in your credit and debit cards also make transactions more secure and prevent card skimming as well. When shopping online, if PayPal or your phone’s digital wallet are options for payment over entering your card number – always go that route.

Using the above tips can help protect your financial information and really save you from an identity theft headache. Also be weary when using an ATM or paying for gas at the pump – be sure to check for any skimming devices before inserting your card. If something seems off to you, it probably is. Read about how to spot a skimming device in our guidebook here.

T.H.I.N.K First because There’s Harm In Not Knowing!

Article Source: John Pettit for CUInsight.com

6 Summer Fraud Scams to Avoid All Year

Here are summer’s most prevalent financial scams that are catching consumers by surprise. However, many of these scams are ongoing all year long and you should be on the lookout for them constantly.

1. Gift cards, secret shoppers, and fake offers.

How the scam works: Consumers are drawn in by a phony email or social media post to become a “secret shopper” in exchange for some form of financial gain. When a consumer agrees to participate, the fraudster seals the deal by delivering a very large counterfeit check. The criminal then asks the consumer to deposit the check and purchase gift cards with the funds – keeping a small portion of the proceeds as compensation for being the “secret shopper.” The victim is asked to email photographs of the gift cards, front and back, so the criminal can use them immediately – before the counterfeit check has a chance to bounce.

The takeaway: The bounced check and all associated damages are the responsibility of the consumer because the criminal and his or her email address are long gone by the time the check bounces.

2. “You can never be too rich or too thin” and other email scams.

Some consumers are attracted to “get rich” and “get thin” offers, and unfortunately an age old diet scam has surfaced again, targeting consumers with spam emails. When an unsuspecting consumer signs up for the “self improvement” deal, that individual agrees to recurring billing for the proposed service.

The takeaway: This ongoing billing arrangement is difficult to stop. And, in some cases, the stolen card information used for payment is also used for other fraudulent purposes.

3. Counterfeit money orders.

Fake money orders are frequently used for online purchases from websites like Craigslist. The problem is that high quality counterfeit money orders are hard to distinguish from the real thing.

The takeaway: If you think you could potentially have a counterfeit money order, call the U.S. Postal Service verification line at 1-866-459-7822. The U.S. Postal Service can verify the authenticity of money orders 48 hours after they are issued – and they can also offer tips on how to recognize fake money orders in the future.

4. “MSN” help desk fraud.

This form of fraud is usually directed at the elderly. A criminal calls an unsuspecting consumer and warns that his or her PC – however seldom used, is riddled with viruses. The fake technician offers to assist, and then dispatches the victim to a local big box store to buy prepaid gift cards which are given as payment for the tech support services.

The takeaway: Losses to victims of this scam can soar well into the thousands – and the criminals are willing to take every nickel without remorse. Some big box stores have started to try and identify consumers who may be embroiled in these scams, but they can run into roadblocks when victims are either mentally incapacitated – or reluctant to admit they have fallen for a scam.

5. Card cracking.

This rip-off scheme typically victimizes the younger crowd. A fraudster reaches out to a young person via social media and convinces the potential victim that they can both benefit by helping each other out – with the young account holder receiving a small sum of $100 or so, as compensation for cooperating with the fraudster. The victim then gives the criminal access to his or her online banking credentials, so the criminal can deposit counterfeit checks into the account. The fraudster also typically requires the usage of the account holder’s debit card and, in some cases, accompanies the co-conspirator to an ATM to perform withdrawals against the counterfeit checks that have been deposited. This is especially troubling if the account holder is a minor in the company of an adult criminal.

The takeaway: All financial damages, including non-sufficient funds checks, fall back onto the young consumer. And that easy $100 profit? It was fake as well.

6. Direct mail scams.

Bogus but official looking letters are delivered every day to random consumers with stern requests for Social Security Numbers and other personally identifiable information. Some of these letters are printed on what looks like big bank letterhead and in all cases, there is at least one “official looking” hard copy form that the consumer is asked to fill out and return.

The takeaway: The addresses on these letters and the return envelopes provided are criminal addresses. They are not P.O. boxes belonging to actual businesses or financial institutions. The main objective in this instance is identity theft, and this scam has been known to be very convincing to consumers.

Bottom Line: An informed consumer is an empowered one. Recognizing the signs of fraud will reduce your risk of becoming an identity theft victim.  Don’t wait until it’s too late! Enroll in Sherpa identity theft protection from First Financial. The best part? You can enroll right online, 24/7. You can trust in First Financial and Sherpa to help keep your personal information protected. Packages begin at just $5.99 per month – so click here to enroll today!

Article Source: John Buzzard for Co-Op Financial Services

5 Ways to Protect Your Financial Info from Hackers

Information breaches that would have been difficult to fathom years ago are now common. And people are rightfully worried. After all, if the federal government can get hacked and its employees’ data stolen, how vulnerable is a personal account held at a bank or brokerage?

So what actions can you take to protect yourself in what feels like an endless battle to keep your data secure? Here are five steps to consider:

 1. Diversify your passwords – and change them.

For the user’s convenience they often use the same password across multiple websites, which is a big mistake. It’s like giving an intruder a key that opens every lock. You want to make it extremely difficult for a hacker to access your sensitive information. Create unique password combinations (including letters, numbers and symbols) for each of the financial websites you log into, and establish a bi-annual schedule to change them.

2. Use an online password manager.

All of those hard to crack passwords can be a nightmare to remember and store, so utilize a reputable password manager. The best managers include password generators that create strong and unique choices. Most password managers allow you to sync your passwords across all electronic devices, making it easy to maintain multiple passwords.

3. Make life hard for crooks.

Shredding confidential documents, avoiding simple passwords, and keeping sensitive information off of unsecured channels are all effective actions. Thoroughly checking credit card statements for suspicious activity, and being aware of your surroundings when using ATMs, are security measures that remain effective. Don’t let your guard down. Learn more about preventing fraud at the ATM here.

4. Check your credit reports at least annually.

Periodically checking your credit report is a smart way to stay ahead of the bad guys, but many people don’t because of common misconceptions like the belief that you have to pay a fee to see your report, or that you must subscribe to a service.

The goal is to check for discrepancies, inconsistences and inaccuracies that might suggest identity theft. Annualcreditreport.com is a great (free) place to start.

5. Keep your guard up when it comes to emails.

Be wary of any email that requires you to click on a hyperlink to update a password or confirm confidential material. These emails are often “phishing” attempts seeking to scam you. They appear to come from familiar places such as your bank, an online retailer, or even the IRS. But – they are not legitimate, so be very careful before you open them!

It’s understandable to feel helpless in an age of smart criminals who conduct endless assaults on privacy. But simply putting the threat out of mind is not a solution, or thinking it can’t happen to you. Think first because there’s harm in not knowing!

Don’t wait until it’s too late! Be sure to enroll in First Financial’s Identity Theft Protection Program from Sherpa today. The best part? You can enroll right online, 24/7. You can trust in First Financial and Sherpa to help keep your personal information protected. Packages begin at just $5.99 per month – so click here to enroll today!

Article Source: Richard Rosso for nerdwallet.com

Top 10 Ways to Prevent Cyber Crime at Work and Home

Cyberattacks are unfortunately a common occurrence and on the increase. In fact, an average of 200,000 new malware samples are discovered daily, presenting an ominous threat to consumers at work and at home.  The following is a list of the top 10 cyber security tips.

1. Don’t click on emailed links. Instead, type the website URL directly into the web browser’s address bar, or search for the site using a search engine like Google.

2. Avoid opening any attachments you were not expecting. However, if you must – scan the attachment first for viruses.

3. Keep computers patched and up to date. This includes operating systems like Windows and iOS, and applications such as Adobe and Java. Keep antivirus software up to date on all devices, including phones.

4. Clean your desktop and your desk. Lock your screen whenever you leave your workstation or office. When you leave work for the day, lock all paperwork in your file cabinets. Everyone has a smartphone camera today, you always want to be cautious with sensitive documents and information.

5. Double check your work. Breaches can easily occur due to simple miscommunication. For example, someone within a company thinks another person has changed the password – and vice versa.

6. Shred it. This goes for any paperwork you are no longer using at work and at home.

7. Use different passwords for different sites. For personal use, consider using a password tool that allows you to set different passwords for each site you frequent, while only requiring you to remember one strong password.

8. Beware of phishing scams. Unlike common spam, a phishing email is after personal data and will likely have a sense of urgency, asking you to click here, act right away – the offer is time limited. Delete any emails that don’t sound right to you.

9. Avoid oversharing. The most common consumer threat today is social engineering in unexpected places like Facebook. Don’t answer questions on where you went to school, whether you have ever done something, or what your nickname is. This information can be used to break into your accounts.

10. Consider turning Siri off, and Amazon Echo, Alexa, and all the new devices that are listening and recording. You need to have a healthy suspicion of where this data is going. It might not be going where you think it is.

Ultimately, we should all strive to be good net neighbors, protecting our own identity at work and at home. This means taking care of ourselves so we don’t get infected and harm others. The threat is real, but following the right security protocols can dramatically reduce our risks.

Article Source: Colette L’Heureux-Stevens for Co-Op Financial Services

Important Member Alert: Publishers Clearing House Scam

Who wouldn’t love to be that winner you see on TV holding a great big sweepstakes check? That’s what con artists are counting on when they claim to be Publishers Clearing House. This trick is an oldie but goodie for scammers.

The scam starts with a call or letter saying you’ve won the Publishers Clearing House sweepstakes. But to collect your prize, they say, you need to send money to pay for fees and taxes. Typically you’ll be asked to send money by Western Union or MoneyGram, or by getting a reloadable card or gift card. Scammers ask you to pay these ways because it’s nearly impossible to trace the money — and you’ll almost never get it back.

But that’s not the only way scammers get your money with this scam. Some will send you a realistic-looking fake check in the mail. You’re told that, to claim your prize, you need to deposit the check and send some of the money back for made-up expenses. But when the check you deposit bounces — even after it seemed to clear, you may be on the hook for the money you sent.

If you think you’ve won a prize, here are a few things to know:

  • Never send money to collect a prize, sweepstakes check, or lottery winnings. If you have to pay, it’s a scam.
  • Never deposit a check and send back money, even if the funds appear in your account. That’s a sure sign of a scam.
  • If anyone calls asking you to pay for a prize, hang up and report it to the FTC.

Still think this sweepstakes is real? The real Publishers Clearing House says it will never ask you to pay a fee to collect a prize.

If at any time you feel any of your First Financial accounts may have been compromised in a similar scam, contact our Member Relationship Center right away at 732.312.1500. If your First Financial credit or debit cards were compromised in a scam, call the 24/7 toll-free number on the back of your card to report the incident and replace your card. All important phone numbers for members can be found on our website: https://www.firstffcu.com/contact-us.htm

Article Source: Emma Fletcher for FTC.gov