Customer Identification Program
In an
effort to prevent the use of the U.S. Banking System in terrorist and
other illegal activity, A.J. Smith Federal Savings is
complying with federal regulations to obtain, verify and record
identification from all persons establishing a new account or being
added as signatories to existing accounts.
Please do
not be offended when asked for identification as these requirements
cannot be waived.
Phishing
There’s
a new type of Internet piracy called “phishing.” It’s pronounced
“fishing,” and that’s exactly what these thieves are doing,: “fishing”
for your personal financial information. What they want are account
numbers, passwords, Social Security numbers, and other confidential
information that they can use to loot your checking account or run up
bills on your credit cards. In the worst case, you could find yourself a
victim of identity theft. With the sensitive information obtained from
a successful phishing scam, these thieves can take out loans or obtain
credit cards and even driver’s licenses in your name.
They can
do damage to your financial history and personal reputation that can
take years to unravel.
But if you understand how phishing works and how to protect yourself,
you can help stop this crime.
Here’s how phishing works:
In
a typical case, you’ll receive an e-mail that appears to come from a
reputable company that you recognize and do business with, such as your
financial institution. In some cases, the e-mail may appear to come from
a government agency, including one of the federal financial institution
regulatory agencies. The e-mail will probably warn you of a serious
problem that requires your immediate attention. It may use phrases, such
as “Immediate attention required,” or “Please contact us immediately
about your account.” In a phishing scam, you
would be requested to reply to an email
and provide personal information to rectify any problems with either your
account or personal information.
If you provide the requested information, you may find
yourself the victim of identity theft.
Pharming
There
is a second popular Internet threat and it's called Pharming
(pronounced "farming"), which refers to the redirection of an individual
to an illegitimate Web site through technical means. An Internet
banking customer, who routinely logs in to his or her online banking Web
site, may be redirected to an illegitimate Web site instead of accessing
his or her bank's Web site.
Here's
one way it could be done....
You normally log into
www.ajsmithbank.com
for Internet Banking. You receive an email that reads “There is a
question about your AJ Smith Checking Account. Please click the
following link to log in to your Internet Banking account –
www.ajsmthbank.com
. If you look closely, the link you are to follow is missing the “i”
in Smith. This is when the switch to an illegitimate Web site
occurs. If this was an actual Pharming setup, clicking this link
would have taken you to a Web site that although looks very
legitimate, is not. Now when you continue by typing in your user ID
and Password, you have just provided the Pharming thief with your
log in information.
There are other ways of Pharming, but the above example is probably
the one used the most because it is the easiest to accomplish.
Rule of thumb
–
legitimate companies will NEVER ask to confirm or check information
through an email or email link. If you receive such a request,
you should always contact them by phone to verify any
information.
How to Protect Yourself
1
Never provide your personal information in response to an unsolicited
request,
whether it is over the phone or over the Internet. E-mails and Internet
pages created by phishers and pharmers may look exactly like the real thing. They may
even have a fake padlock icon that ordinarily is used to denote a secure
site. If you did not initiate the communication, you
should not
provide any information. Always review what URL (Internet address)
you have been moved to, when clicking a link inside of an email.
2
If you believe the contact may be legitimate, contact the
financial institution yourself.
You can find phone numbers and Web sites on the monthly statements you
receive from your financial institution, or you can look the company up
in a phone book or on the Internet. The key is that
you
should be the one to initiate the contact, using contact information
that you have verified yourself.
3
Never provide your password over the phone or in response to an
unsolicited Internet request.
A financial institution would never ask you to verify your account
information online. Thieves armed with this information and your account
number can help themselves to your savings.
4
Review account statements regularly to ensure all charges are
correct.
If your account statement is late in arriving, call your financial
institution to find out why. If your financial institution offers
electronic account access, periodically review activity online to
catch suspicious activity.
What to do if you fall victim:
Contact
your financial institution immediately and alert it to the situation.
If
you have disclosed sensitive information in a phishing or pharming attack, you
should also contact one of the three major credit bureaus and discuss
whether you need to place a fraud alert on your file, which will help
prevent thieves from opening a new account in your name.
Here is the contact information for each bureau’s fraud division:
Equifax Experian
TransUnion
800-525-6285
888-397-3742 800-680-7289
P.O. Box 740250
PO Box 1017 PO Box 6790
Atlanta, GA 30374 Allen, TX
75013 Fullerton, CA 92634
Report all suspicious contacts to the Federal Trade Commission through
the Internet at
www.consumer.gov/idtheft , or by
calling
1-877-IDTHEFT.
You Can Fight Identity Theft, Here’s How:
Never provide personal financial information,
including your Social Security number, account numbers or passwords,
over the phone or the Internet if you did not initiate the contact.
Never click on the link provided in an e-mail
you believe is fraudulent. It may contain a virus that can contaminate
your computer.
Do not be intimidated by an e-mail
or caller who suggests dire consequences if you do not immediately
provide or verify financial information.
If you believe the contact is legitimate,
go to the company’s Web site by typing in the site address directly or
using a page you have previously book marked, instead of a link provided
in the e-mail.
If you fall victim to an attack, act immediately
to protect yourself. Alert your financial institution. Place fraud
alerts on your credit files. Monitor your credit files and account
statements closely.
Report suspicious e-mails or calls
to the Federal Trade Commission through the Internet at
www.consumer.gov/idtheft
, or by calling
1-877-IDTHEFT.
|