Security Center

Identify Theft continues to be one of the fastest growing crimes in the United States. Your personal information is a very valuable commodity to fraudsters. Know the steps you can take to protect your personal information and, if needed, what to do if you become a victim of identity theft.

Preventing Identity Theft

• Don’t share your secrets: Don’t provide your Social Security number or account information to anyone who contacts you online or over the phone. Protect your PINs and passwords and do not share them with anyone. Use a combination of letters and numbers for your passwords and change them periodically. Do not reveal sensitive or personal information on social networking sites.
• Shred sensitive papers including receipts, banks statements, and unused credit card offers before throwing them away.
• Keep an eye out for missing mail: Fraudsters look for monthly bank or credit card statements or other mail containing your financial information. Consider enrolling in online banking to reduce the likelihood of paper statements being stolen.
• Use online banking to protect yourself: Monitor your financial accounts regularly for fraudulent transactions. In addition to MyCardRules, you can sign up for text alerts or email alerts for certain types of transactions.
• Monitor your credit report by ordering a free copy of your credit report every four months from one of the three credit reporting agencies at www.annualcreditreport.com.
• Protect your computer: Make sure the virus protection software on your computer is active and up to date. When conducting business online, make sure your browser’s padlock or key icon is active. Also look for an “s” after the “http” to be sure the website is secure.
• Protect your mobile device: Use the passcode lock on your smartphone and other devices. This will make it more difficult for thieves to access your information if your device is lost or stolen. Before you donate, sell or trade your mobile device, be sure to wipe it using specialized software or using the manufacturer’s recommended technique. Some software allows you to wipe your device remotely if it is lost or stolen. Use caution when downloading apps, as they may contain malware and avoid opening links and attachments – especially for senders you don’t know.

If Your Identity Has Been Stolen:

• Contact First National Bank immediately to report any fraudulent activity you’ve seen on your account or to close any impacted accounts.
• Contact the three major credit bureaus listed below and place a fraud alert on your credit file. You should only need to contact one bureau to request the alert and they will contact the other two for you.
  • Equifax: To report fraud, call 1-800-525-6285 and write: P.O. Box 740241, Atlanta, GA 30374-0241. For the hearing impaired, call 1-800-255-0056 and ask the operator to dial. For the Auto Disclosure Line, call 1-800-685-1111 to request a copy of your report.
  • Experian: To report fraud, call 1-888-EXPERIAN (397-3742) and write: P.O. Box 9530, Allen TX 75013. TDD: 1-800-972-0322
  • TransUnion: To report fraud, call 1-800-680-7289 and write: Fraud Victim Assistance Division, P.O. Box 6790, Fullerton, CA 92634 TDD: 1-877-553-7803
• Obtain your free annual credit report and review it closely.
• Visit the Federal Trade Commission’s website at https://www.consumer.ftc.gov/features/feature-0014-identity-theft. This site will walk you through the step-by-step repair process and also includes checklists and forms which will assist you through the recovery of your good name.

Remember, First National Bank will never:

• Call, email or text you asking for your Online Banking password, account numbers, or debit card numbers. If you receive such a call, email or text message, do NOT give out any information.
• Send an email to you containing computer software updates.

Important: If you receive a phone call, email, text message or visit to your place of business that you question, please contact us before taking any other action.

Online Safety

Though the internet has many advantages, it can also make users vulnerable to fraud, identity theft and other scams. First National Bank recommends the following tips to keep you safe online:

• Keep your computers and mobile devices up to date. Having the latest security software, web browser, and operating system are the best defenses against viruses, malware, and other online threats. Turn on automatic updates so you receive the newest fixes as they become available.
• Set strong passwords. A strong password is at least eight characters in length and includes a mix of upper and lowercase letters, numbers, and special characters.
• Watch out for phishing scams. Phishing scams use fraudulent emails and websites to trick users into disclosing private account or login information. Do not click on links or open any attachments or pop-up screens from sources you are not familiar with. Forward phishing emails to the Federal Trade Commission (FTC) at spam@uce.gov – and to the company, bank, or organization impersonated in the email.
• Keep personal information personal. Hackers can use social media profiles to figure out your passwords and answer those security questions in the password reset tools. Lock down your privacy settings and avoid posting things like birthdays, addresses, mother’s maiden name, etc. Be wary of requests to connect from people you do not know.
• Secure your internet connection. Always protect your home wireless network with a password. When connecting to public Wi-Fi networks, be cautious about what information you are sending over it.
• Shop safely. Before shopping online, make sure the website uses secure technology. When you are at the checkout screen, verify that the web address begins with https. Also, check to see if a tiny locked padlock symbol appears on the page.
• Read the site’s privacy policies. Though long and complex, privacy policies tell you how the site protects the personal information it collects. If you don’t see or understand a site’s privacy policy, consider doing business elsewhere.

Mobile Safety

Your mobile device provides convenient access to your email, bank and social media accounts. Unfortunately, it can provide the same convenient access for criminals. First National Bank recommends following these tips to keep your information, and your finances, safe.

• Use the passcode lock on your smartphone and other devices. This will make it more difficult for thieves to access your information if your device is lost or stolen.
• Log out completely when you finish a mobile banking session.
• Protect your phone from viruses and malicious software, or malware, just like you do for your computer by installing mobile security software.
• Use caution when downloading apps. Apps can contain malicious software, worms, and viruses. Beware of apps that ask for unnecessary “permissions.”
• Download the updates for your phone and mobile apps.
• Avoid storing sensitive information like passwords or a social security number on your mobile device.
• Contact us immediately if you change your phone number or lose your mobile device.
• Be aware of shoulder surfers. The most basic form of information theft is observation. Be aware of your surroundings especially when you’re punching in sensitive information.
• Wipe your mobile device before you donate, sell or trade it using specialized software or using the manufacturer’s recommended technique. Some software allows you to wipe your device remotely if it is lost or stolen.
• Beware of mobile phishing. Avoid opening links and attachments in emails and texts, especially from senders you don’t know. And be wary of ads (not from your security provider) claiming that your device is infected.
• Watch out for public Wi-Fi. Public connections aren't very secure, so don’t perform banking transactions on a public network. If you need to access your account, try disabling the Wi-Fi and switching to your mobile network.
• Again, report anything suspicious to your bank immediately

ATM Safety

• Be aware of your surroundings, particularly at night. If you observe or sense suspicious persons or circumstances, do not use the machine at that time.
• Have your card ready and in your hand as you approach the ATM. Don't wait to get to the ATM and then take your card out of your wallet or purse.
• Visually inspect the ATM for possible skimming devices. Potential indicators can include sticky residue or evidence of an adhesive used by criminals to affix the device, scratches, damaged or crooked pieces, loose or extra attachments on the card slot, or noticeable resistance when pressing the keypad.
• Be careful that no one can see you enter your PIN at the ATM. Use your other hand or body to shield the ATM keyboard as you enter your PIN into the ATM.
• To keep your account information confidential, always take your receipts or transaction records with you.
• Do not count or visually display any money you received from the ATM. Immediately put your money into your pocket or purse and count it later.
• If you are using a drive-up ATM, be sure passenger windows are rolled up and all doors are locked. If you leave your car and walk to the ATM, lock your car.

Special Precautions for Using an ATM at Night

• Park close to the ATM in a well-lighted area.
• Take another person with you, if at all possible.
• If the lights at the ATM are not working, don't use it.
• If shrubbery has overgrown or a tree blocks the view, select another ATM and notify your bank.

Protecting Your Business

Corporate Account Takeover is a type of fraud where thieves gain access to a business’ finances to make unauthorized transactions, including transferring funds from the company, creating and adding new fake employees to payroll, and stealing sensitive customer information that may not be recoverable. First National Bank recommends following these tips to keep your small business safe.

• Educate your employees. You and your employees are the first line of defense against corporate account takeover. A strong security program paired with employee education about the warning signs, safe practices, and responses to a suspected takeover are essential to protecting your company and customers.
• Protect your online environment. It is important to protect your cyber environment just as you would your cash and physical location. Do not use unprotected internet connections. Encrypt sensitive data and keep updated virus protections on your computer. Use complex passwords and change them periodically.
• Partner with us to prevent unauthorized transactions. We offer programs that safeguard your business account from unauthorized transactions. Positive Pay and other services offer call backs, device authentication, multi-person approval processes, and batch limits to help protect you from fraud.
• Pay attention to suspicious activity and react quickly. Look out for unexplained account or network activity, pop ups, and suspicious emails. If detected, immediately contact your financial institution, stop all online activity and remove any systems that may have been compromised. Keep records of what happened.
• Understand your responsibilities and liabilities. The account agreement with us will detail what commercially reasonable security measures are required in your business. It is critical that you understand and implement the security safeguards in the agreement. If you don’t, you could be liable for losses resulting from a takeover. Contact us if you have any questions about your responsibilities.

For additional information, visit the American Banker Association’s website dedicated to educating business owners on Corporate Account Takeover

As Americans begin the process of filing tax returns, identity thieves are scheming to get their hands on that money. Tax identity theft has been the most common form of identity theft reported to the Federal Trade Commission for the past five years.

Tax identity fraud takes place when a criminal files a false tax return using a stolen Social Security number in order to fraudulently claim the refund. Identity thieves generally file false claims early in the year and victims are unaware until they file a return and learn one has already been filed in their name.

To help consumers prevent tax ID fraud, First National Bank is offering the following tips:

• File early. File your tax return as soon as you’re able giving criminals less time to use your information to file a false return.
• File on a protected Wi-Fi network. If you’re using an online service to file your return, be sure you’re connected to a password-protected personal network. Avoid using public networks like a Wi-Fi hotspot at a coffee shop.
• Use a secure mailbox. If you’re filing by mail, drop your tax return at the post office or an official postal box instead of your mailbox at home. Some criminals look for completed tax return forms in home mailboxes during tax season.
• Find a tax preparer you trust. If you’re planning to hire someone to do your taxes, get recommendations and research a tax preparer thoroughly before handing over all of your financial information.
• Shred what you don’t need. Once you’ve completed your tax return, shred the sensitive documents that you no longer need and safely file away the ones you do.
• Beware of phishing scams by email, text or phone. Scammers may try to solicit sensitive information by impersonating the IRS. Know that the IRS will not contact you by email, text or social media. If the IRS needs information, they will contact you by mail first.
• Keep an eye out for missing mail. Fraudsters look for W-2s, tax refunds or other mail containing your financial information. If you don’t receive your W-2s, and your employer indicates they’ve been mailed, or it looks like it has been previously opened upon delivery, contact the IRS immediately. If you believe you’re a victim of tax identity theft or if the IRS denies your tax return because one has previously been filed under your name, alert the IRS Identity Protection Specialized Unit at 1-800-908-4490. In addition, you should:
  • Respond immediately to any IRS notice and complete IRS Form 14039, Identity Theft Affidavit.
  • Contact us immediately, and close any accounts opened without your permission or tampered with.
  • Contact the three major credit bureaus to place a ‘fraud alert’ on your credit records:
    • Equifax, www.Equifax.com, 1-800-525-6285
    • Experian, www.Experian.com, 1-888-397-3742
    • TransUnion, www.TransUnion.com, 1-800-680-7289
  • Continue to pay your taxes and file your tax return, even if you must do so by paper.

More information about tax identity theft is available from the FTC at ftc.gov/taxidtheft and the IRS at irs.gov/identitytheft.

Beware of Fake Check Scams

From The Federal Trade Commission:

Fake checks drive many types of scams – like those involving phony prize wins, fake jobs, mystery shoppers, online classified ad sales, and others. In a fake check scam, a person you don’t know asks you to deposit a check – sometimes for several thousand dollars and usually for more than what you are owed – and wire some of the money back to that person. The scammers always have a good story to explain the overpayment – they’re stuck out of the country, they need you to cover taxes or fees, you need to buy supplies, or something else. But by the time your bank discovers you’ve deposited a bad check, the scammer already has the money you sent, and you’re stuck paying the rest of the check back to the bank.

The Federal Trade Commission receives tens of thousands of reports each year about fake checks. Over the last three years, the number of complaints has steadily increased, and so have the dollars lost. The FTC’s new infographic, developed with the American Bankers Association Foundation, offers some tip-offs to rip-offs and what to do if you get a check from someone you don’t know.

Please share this information with others. Victims may be embarrassed to talk about their experiences, but you can help. A simple phone call, email or text, saying “Look what I just found” and sharing this information may make a difference in someone else’s life.

Want to avoid the latest rip-offs? Sign up for free consumer alerts from the FTC at ftc.gov/subscribe.