Pacific Oaks FCU is actively engaged in the protecting and safeguarding of your confidential information. We employ advanced technology to deliver convenient account access while maintaining your personal privacy. Your credit union is firmly committed to working with you to prevent fraud.
Fraud can have a serious impact on your finances and your reputation. Even with advanced security measures in place anyone can become a victim of identity theft.
If you suspect that your account(s) or personal information may have been compromised it is vital that you report it to us immediately. We will make every effort to protect you and to thoroughly investigate any reported incident. Pacific Oaks understands how disruptive and potentially destructive identity theft and fraud is and we commit to minimize any impact to you.
- Install Internet security software to protect your computer from being infected by a virus, malware, and/or spyware.
- Maintain the system updates for your security software. It is critical to update your security software daily to maintain the highest level of protection.
- Use strong passwords and change them on a regular basis. (At least quarterly.) Do not use the same password for multiple usernames or accounts. Thieves will often target less secure usernames and passwords, such as access for an online forum or social networking site and try to use the same passwords (or minor variations) to gain access to highly secure systems such as online banking.
- Make a strong password by using at least one number, a mix of lowercase and capital letters as well as punctuation characters. A password that is at least eight (8) characters long and not found in the dictionary is exponentially harder to crack than a five-character password using all lowercase letters and no additional characters.
- Multi-Factor Authentication helps to protect against online fraud by providing additional methods of authentication "factors" beyond the username and password, thereby making authentication far more robust..
- Enable the firewall feature within your security software or operating system. This can be used to maintain rules for blocking specific content.
- Set the security software to scan your system for infections on a routine basis.
- Maintain all security updates for your computer's operating system and software applications.
- Understand the risks associated with accessing your accounts from a publicly accessible computer or Internet connection. A public computer or public Internet connection may be infected with a virus and/or malware and any information accessed from that system might be at risk.
- Do not purchase pirated or bootlegged copies of software or computer operating systems, especially security software. What may seem like a deal could cost you thousands of dollars and countless hours. If it seems too good to be true, it probably is.
We rely on your assistance with protecting your accounts from unauthorized access. Do not share confidential account information with anyone; including friends, relatives and business associates. Pacific Oaks will never contact you and ask you to supply or to confirm confidential account information such as your Social Security or Tax ID number, Date of Birth, or other confidential information.
If you believe your accounts or personal information may have been compromised---immediately report the incident to any of our branch offices or by calling us at (805) 384-1100.
To report a lost or stolen VISA card call us at (800) 543-5073.
We have you covered with the Falcon® Fraud Manager system for all your credit and debit transactions. With Falcon, you will have the benefit of knowing that your purchases are protected from fraud. This gives you peace of mind that your security is our first priority. Feel more secure each time you use your card. For more information on Falcon®, call our Electronic Services Department at 805-384-1100
Criminals continue to develop new scams and methods to defraud the general public.
The best defense against such attempts is to be aware and understand how to recognize suspicious behavior or activity. Here are some of the more common methods utilized by fraudsters to compromise an identity.
Phishing - Phishing is an attempt to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. The first step to avoiding Phishing is to understand that reputable business entities, such as Pacific Oaks, will never ask you to confirm sensitive information via email or telephone. Look for revealing clues such as incorrect spelling/grammar, suspicious links embedded in an email message, or instructions to call a phone number other than what is commonly listed online or in the phone book.
Vishing - Vishing is the criminal practice of using social engineering over the telephone system; most often using features facilitated by using Voice over IP (VoIP) to impersonate a legitimate business in order to gain access to private personal and financial information from the public for the purpose of financial reward. If you suspect you are receiving a phone call from an unfamiliar phone number (Caller ID says “Pacific Oaks” but the number is not local); hang up and call Pacific Oaks at 805.384.1100 to report the incident. Remember, we will never ask you for identifying personal information by calling you.
Smishing - Similar to phishing, Smishing uses cell phone text messages to deliver the "bait" to get you to divulge your personal information. The "hook" (the method used to actually "capture" your information) in the text message may be an external link to a fraudulent web site address or URL that will ask you for personal information or instruct you to download malicious software or spyware onto your cell phone. Another more common practice is to see a phone number that connects to automated voice response system that prompts you to enter personally identifiable information to “confirm” or “activate” your account.
Social Engineering – Social Engineering is the practice of posing as a trusted business associate or vendor to access private personal information for the purpose of identity theft or fraud. Social Engineers will ask questions designed for you to “volunteer” personal information. Identity Thieves may already have some of your information and use partial information to confirm or garner additional data useful in perpetrating identity theft. Do not volunteer any personal information or confirm information to someone calling you.
Remember, we will never ask you for identifying personal information by calling you.
Deposit Fraud – Thieves will ask you to deposit a monetary instrument such as lottery winnings, an inheritance, or money order in your account on their behalf. Often, there will be a compelling reason why they cannot negotiate the items themselves. To “re-pay” you for your kindness, they will offer you a percentage of the proceeds or offer to split the cash with you. When the item is deposited, they might pressure you to withdraw the funds immediately (using the available existing cash in your account). By the time the item comes back as fraudulent, they are long gone and you are legally responsible for any negative balance.
Another common version of this fraud is to pay for an online auction item or rental property with a Cashier’s Check or Money Order that exceeds the agreed upon price. The fraudster will ask for a portion of the cash back, stating it was an oversight---or saying they need the balance back for an emergency.
Remember, you wouldn’t carry someone else’s luggage or accept an item from a stranger at an airport---so don’t be terrorized by identity thieves looking to trade on your good name or credit.
External Resources
United States Postal Inspection Service
Federal Trade Commission
FakeChecks.org
Better Business Bureau
Federal Bureau of Investigations
SANS Institute Resource Center
Verified by Visa - Protect your Visa card online with a personal password
Protecting Your Identity - download an informative booklet
IRS Warns of New Email and Telephone Scams using the IRS Name
More Tips
- Hang up, shred or delete when you are uncomfortable, uncertain or if something sounds too good to be true.
- Take your time — don’t rush into accepting an offer. Scammers will use high-pressure tactics.
- Don’t buy something merely because you’ll get a free gift.
- Get all information in writing before you agree to buy.
- Check out the company’s record with your state’s Attorney General’s office and the Better Business Bureau.
- Don’t give your credit card or checking account number to anyone who emails you, calls on the phone or sends you a postcard.
Articles
Don't be the Target of Criminals
Tips For A Secure Password
