FIRSTBANK PUTS PROTECTING YOU FIRST

Awareness of these fraud scams is the best protection.

Phishing is a scam to deceive users into providing sensitive information such as credit/debit card numbers, PINs, account number, User IDs and Passwords for online banking, and Social Security numbers. These are usually presented to the user via email with a sense of urgency in order to get the recipient to respond quickly. The recipient is asked to respond with the requested information or by accessing a link provided in the email.

Spear Phishing is a more specific form of Phishing where the sender may already have some details such as an account number in order to make the email look more authentic. Or it may target employees of a particular organization to make it appear someone else with the organization sent the email. These emails may appear to be more personalized.

Whaling is an even more personalized form of Phishing where individuals collect extensive information on executives or other key members of a company using various social engineering techniques. Most of these emails attempt to deceive the recipient into clicking a link or attachment within the email which would then install malicious software.

Vishing or Voice Phishing termed “vishing” attempts to deceive users into divulging sensitive information over the phone, typically through automated customer service lines and Voice over IP services. Recipients may receive an email or text message that instructs them to call a number regarding a problem with their account. Once the targeted person (potential victim) calls that number, the automated service or perpetrators will ask the person to provide sensitive data such as their account number, social security number, date and dollar amount of their last deposit/withdrawal, etc.

Social Engineering is the act of manipulating people into performing actions or divulging confidential information usually through telephone or online communication. The term applies to trickery or deception for the purpose of information gathering, fraud, or computer access; in most cases the attacker never comes face-to-face with the victim.

Pretext Calling is a form of social engineering. It is a scheme associated with identity theft in which a fraudster, pretending to represent a legitimate person or entity, calls an unsuspecting party seeking personal identification data, such as social security numbers, passwords, account information, account activity, last deposit/withdrawal amount, etc.

Mobile Tips

Smartphones and tablets are portable computers, and therefore need similar protection. Here are some tips you can use to increase the security of your mobile device:

• Use passwords for access, and set the screen lock for after fifteen minutes or less of activity.
• Use security software.
• Turn on data encryption.
• Disable the geotag feature.
• When not using WiFi or Bluetooth, turn those services off.
• Keep the software and apps updated.
• Only download apps from trusted sources (such as iTunes for Apple and the Google Play Store).
• Before installing or using the app, understand the specific data and services the app can access.
• Do not root or jailbreak the device.
• Change passwords from accounts accessed by the phone if lost or stolen.
• When in doubt of an email, text, or voicemail, do not respond.
• Ensure the site is security enabled (a web address that begins with http://)

Protecting the Elderly

• Avoid getting on call lists.
• Screen your calls.
• Have a plan for speaking to telemarketers.
• Know that your phone number may be collected.
• Don’t give your financial information to callers you don’t know.
• Don’t be pressured into making an immediate decision.
• Get all information in writing before you agree to a purchase.