Security & Fraud Prevention

Phishing is the fraudulent practice of sending emails or other messages purporting to be from reputable organizations with the aim of getting you to reveal personal information, such as passwords or credit card numbers. Phishing is one of the most common and harmful ways your security can be breached. Here are some critical things to know:

Know the red flags: who send phishing messages are good at making their content and interactions seem appealing and authentic. It can be difficult to tell whether it’s genuine or a potential threat. Assess the message for awkward or unusual formatting, overly explicit asks to click a hyperlink or open an attachment, and subject lines that create a sense of urgency. These are all hallmarks of phishing.

Do not write down your login and password information. If you must write them down, store them in a secure place.

Verify the source: many phishing communications try to impersonate someone you already know — a colleague, service provider or friend — to try and trick you into believing their content is trustworthy. Don’t fall for it. If you sense something may be out of place or unusual, reach out directly to the individual or business to confirm whether the message is real.

Be aware of phishing variations: other forms of phishing, such as voice phishing or fishing, have become an alternative for bad actors looking to gain sensitive information from unsuspecting individuals. Smishing is another — SMS (or text message) phishing — that is on the rise. Similar to conventional phishing, these variations are typically executed by individuals posing as a legitimate organizations.

Identity theft is the fraudulent acquisition and use of a person’s private information, usually for financial gain. There are many ways to keep your identity safe.

• Protect your social security number, card numbers, PINs (personal identification numbers), passwords and other personal information.
• Protect your incoming and outgoing mail and email, and be vigilant online:
  • monitor your bank account statements and credit card bills.
  • protect documents that have personal information.
  • if asked for your social security number, ask questions before giving it out.
  • use strong passwords, and change them on a regular basis.
  • whenever possible, add multi-factor authentication (MFA) when offered by online retailers, email providers, and other mobile and online services.

Set up a folder to keep a detailed history of transactions and communications. Include a log of every action you take, copies of all correspondence and/or forms you receive or send, names and contact information of everyone you contact, as well as any information surrounding the contact.

In addition:

• keep track of your financial loss.
• change your password(s). If your information was obtained through a website, mobile app, or any other digital or online platform, threat actors may already have your credentials. Change them immediately and opt-in for any multi-factor authentication options offered.
• report the identity theft to the authorities.
• contact all creditors. Do this by phone and in writing (save copies of the letters) to be sure they are properly informed.
• contact the three major credit reporting agencies. Ask for a “Fraud Alert Victim Impact” statement to be placed in your credit file asking that creditors call you before opening any new accounts. Request that a copy of your credit report be sent to you.
• contact the Federal Trade Commission (FTC). The FTC is the national clearing house for complaints by victims of identity theft. Visit www.ftc.gov to learn more.
• ask businesses to provide you with information about transactions made in your name. The Washington State Identity Theft Law requires businesses to provide information about all transactions made in your name.

Regardless of what device or browser you use, safeguarding your personal information is of the utmost importance. Here are some tips.

• Never share login IDs, user IDs, passwords, secure access codes or PIN numbers.
• Use a unique login or password for your financial accounts — do not use the same login or password for other purposes.
• Use strong, complex passwords. Strong passwords contain both uppercase and lowercase letters, as well as numbers and special characters.
• Whenever possible, use multifactor authentication (MFA).
• Do not write down your login and password information. If you must, store the information in a secure place.
• Do not access your financial accounts from a public computer or over a public wireless access point. Such systems are often unsecured.
• Do not provide personal or financial information over unsecured website. Secure websites start with “https,” unsecured sites start with “http.”

Here are some basic, general practices you can put into place to help ensure the security of your information and accounts.

• Firewalls and anti-virus software can protect your computer. Ensure any anti-virus software you use is kept up-to-date.
• Some internet browsers are more secure than others. Research browser security, and keep your browser updated to the most recent version.
• Stay alert to questionable websites that send scams requesting sensitive personal or financial information.
• Turn off your computer when not in use, even if you have anti-virus software and/or a firewall.
• Banks and other legitimate businesses never email or text customers asking for passwords or updated information — don’t click on links in emails pretending to be from your bank or another business.
• Don’t open a link in a suspicious email. Instead, confirm the web address by typing what the text shows directly into a browser window.
• When shopping online do not enter any personal or payment information unless you are sure the website is legitimate and secure. Secure websites start with “https,” unsecured sites start with “http.”
• Update your passwords and PINs periodically.

Establish good habits when it comes to securing your mobile devices and any account transactions you conduct on your device. Here are some tips and best practices to make mobile banking safe and secure.

• • If you need to share your device with anyone, or send it in for repairs/service, be sure to first:
    • clear your browser history and cache—they may contain account numbers or other sensitive information.
  • When given an option, use personal security questions to further guard your accounts and information.
  • Never leave your device unattended.
  • Use your device’s built-in lock function—set a password for start-up and time-out.
  • If you lose your device or it’s stolen:
    • notify your mobile service provider to suspend/deactivate your device until it’s located.
    • login to online banking on a different device, such as a desktop or laptop computer, and update your secure access delivery options. Remove your device from secure access delivery until it has been located.

• As an additional step, you can ask our Customer Care Center to restrict your accounts until it’s found by calling 1 (833) 367-2687 Monday through Friday, from 8 a.m. to 5:30 p.m.