ID Theft & Fraud Prevention
Identity theft is illegal use of another person's identity. It comes in many forms such as account fraud, credit/debit card fraud, communication (phone/computer), or stealing another's social security number.
How We Protect You
Keeping your information safe and secure is F&M Banks highest priority. F&M Bank uses the latest in technology to provide a secure online banking environment allowing you to securely manage your accounts online.
- Multiple Layers of Authentication – When logging into online banking, F&M goes beyond just a username and password. When logging on a user has to verify their PassMark and multiple security questions.
- Secure Firewalls – F&Ms Online Banking is secured by multiple firewalls.
- Session Timeouts – If you logged in and are not using Online Banking, you will be logged out and have to login again.
- Secure Messages – F&M Bank has a secure message system inside its online banking program. If you have a message that needs to contain sensitive information you can send it this way, rather than a regular unsecure email.
- Time/Date Stamp – Every time you log in, we show the date and time of your last visit. If you didn't sign on at that time, there has been unauthorized access.
Debit Card Security
- Monitoring and Fraud Detection – F&M Bank utilizes monitoring tools that monitor certain types of transactions or irregular activity. These transactions are scored against your normal activity allowing us to detect a change or possible fraud.
- Transaction Verification – If the monitoring and fraud detection notices unusual activity, we will contact to verify the changes.
- PIN Changes – You can change the PIN on your card whenever you need by calling 1-866-985-2273 from your registered phone number.
Debit card department is available to serve you at 405-608-0504. If your card has been lost or stolen after normal business hours call 1-800-523-4175.
Protect Yourself and Your Identity
Reduce Your Risk
- Check your accounts on a regular basis using our FREE INTERNET BANKING or our 24 Hour F&M Bankline. Report inconsistencies to F&M Bank immediately.
- Receive eBills and pay bills online using our FREE BILL PAY.
- Avoid having statements and notices lost in the mail or stolen from a mailbox by changing from paper statements to eSTATEMENTS and eNOTICES.
- Do not ever share personal information, such as Social Security Numbers, account numbers, or login information via email. F&M will never ask for this information via email.
- Beware of phishing emails telling you that you must verify or change your account. F&M will never ask for this information.
- Never send personal information via an unsecure email.
- Always log off websites for transactions, shopping, and online banking.
- Quit your browser when not using internet.
- Passwords are meant to be kept secret. Do not share them or leave them in unsecured areas. Change them regularly for better protection.
- Protect answers to security questions and don't pick easy to answer questions.
- Be cautious when using public hotspots and consider your Wi-Fi auto connect settings.
- Verify when using a website that asks for your personal information, that the site shows "https:" in the address bar.
Protect Your Computer
- Install anti-virus/anti-spyware to help protect your computer. Also verify the software is updating regularly.
- Use a firewall to help prevent unauthorized access by restricting traffic to your computer.
- Update your computer regularly with the most recent operating system and software patches.
- Back up all sensitive information and files.
- Always use a secure network. Beware when using public networks, especially unsecure wireless networks. Online banking activities should only be conducted on a computer/network that you know is safe.
- Avoid downloading programs from unknown sources.
- Install a personal firewall on the computer.
- Turn your computer completely off when not in use.
Protect your Mobile Device
- Download Malware Protection not only for your computer but also for phones, tablets, and e-readers that connect to the internet. Use well known companies before downloading these apps. Make sure it is updating regularly.
- Do not root or jailbreak a mobile device. This removes protections from the carrier and device manufacturer.
- Beware of everything you download to your phone. (Apps) Only use reputable applications.
- If your phone is lost or stolen, contact your wireless carrier immediately to have the device shut down.
- Use screen lock or other settings on your mobile device.
- Do not respond to text messages asking for account information. F&M will never send a text to ask for this information.
- Report lost or stolen cards and checks immediately.
- Review monthly statements carefully for fraudulent activity.
- Limit the amount of information on checks. Don't print your driver’s license or social security number on your checks.
- Store new and canceled checks securely.
- Carry your checkbook only when necessary.
- Always keep your debit card secure.
- Do not send card number through email.
- Remember to call and cancel your card if you no longer use it. After it is cancelled you can cut the card up.
- If you receive a replacement card, destroy your old card.
- Memorize your PIN. Do not write it down or share it with others.
- Never give your account number, debit card number, PIN, or Social Security number to solicitors or callers you have not contacted.
- Only provide personal information on websites and on calls that you have initiated.
- Keep credit/debit card numbers, PIN's, passwords, checks, Social Security numbers, insurance cards, driver's license numbers, or any other personal information in a safe location. (Dispose of this information properly if not needed. Using a cross-cut shredder is recommended.)
- Keep deposit/withdrawal slips, credit card purchase receipts, bank and credit card statements, credit card solicitations, utility and medical bills, insurance information, and investment updates in a safe location.
- Dispose of this information properly if information is no longer needed. Using a cross-cut shredder is recommended.
- Have all mail with sensitive information sent to a Post Office Box. When sending mail drop it off at a Postal Drop Box and do not leave it in your mail box. Also stop your mail when you leave for vacation.
- Never give out any information over the phone, unless you have a very good reason.
- Limit the information on your checks and remember that your checks contain all of your account information.
- Don't ever respond to unsolicited emails asking for your information. (Phishing, mentioned above)
- Don't use PIN's or passwords that are easy to guess.
- Obtain and check copies of your credit report regularly. The three major reporting agencies are required to each give you a report once a year.
- Carry only necessary information, leave your social security card and other information you do not use at home in a secure location.
- Make copies of vital information you carry regularly and store them in a secure place.
Recognizing ID Theft and Fraud
Debit Card Fraud – Debit card fraud happens in many multiple of ways. Some of the most common include lost or stolen card, card duplication, or unauthorized purchases over the phone. The best protection is to report lost and stolen cards immediately and review your account regularly.
Phishing – Phishing is the most common type of online fraud. Individuals are randomly targeted by people sending mass emails. These messages usually contain "urgent information" regarding account status. Clicking on links contained in the emails send you to "spoofed or hacked" websites that many times look legitimate.
Remember, F&M Bank will never send out an email requesting personal information from customers! Never respond to any email that instructs you to provide any personal information. If you have a question if the email or website is legitimate, please contact F&M Bank.
Vishing – Vishing is a variation of the Phishing Scam. This combines, "Voice" and "Phishing" and many times involves automated recordings. Usually responding they will have you enter a PIN, Birthday, card number, or social security number.
The individual performing this scam can make the legitimate number and name of the bank show up on caller ID. Be very diligent before releasing any personal information. Contact the bank directly to verify the validity of the message.
Spear-Phishing – Another variation on the Phishing scam. With this type of scam, criminals already know something about you. Possibly information they gained from social network sites or maybe information gained from another crime. Since they know something about you, they try to use that information to get you to release more critical information.
SMiShing – The SMiShing variation is a variation where criminal activity is using social engineering. This scam uses cell phones, and by using text messages or email an attacker lures you to a malicious site or phone number, where they gain access to your personal info. The name comes from SMS (Short Message Service) which is the technology used in text messaging. Scams vary, some scams direct you to legitimate automated voice response system that ask to enter your personal information.
Pharming – Pharming is a way the scammers misdirect users to fraudulent Web Sites without their knowledge or consent. Unlike phishing where the scammers come to you, in this scam you go to the scammers. This can be caused by malware on your computer or a website that has been hacked.
Malware – This Malicious Software, is software that attacks your computer and allows it to be taken over by another person or steal information. These programs are downloaded unknowingly and often look like legitimate software. Malware includes Viruses, Worms, Trojan horses, and spyware. With this software, the hacker can steal information, send spam, commit fraud, and inflict damage to your PC.
The best advice in avoiding Malware is to never open links in SPAM emails or messages that don't look right. Always go to recognizable websites. Best tip is to always use a good anti-virus/ant-spam software that updates regularly.
Trojan – This form of Malware is when a program contains hidden software. For example, this could be a game that contains a Keystroke logger.
Worm – This software program is a malware that infects one computer then spreads to other computers that are connected to the network.
Keystroke Logger – A Keystroke logger is a form of Malware/Spyware where an application runs silently and records everything that is typed on a keyboard. This information includes passwords and usernames. This information is then sent to the criminal over the internet.
Screen Grabber – A Screen grabber is another form of Malware/Spyware where an application that runs silently takes screen shots of that device. The screen shot is sent to the third party over the Internet. Screen shots are basically the same thing you would see if you were at the computer.
Nigerian Email Scam – The scam started from Nigerians who needed help getting their money out of the country while war was raging. These scams offer large amounts of money if you pay a fee to them. There are now many variations on this scam from not just Nigeria but all over the world. If you receive an email claiming with one of these scams, simply delete the email. Do Not Respond!
Cross-Border Scams – These scams attempt to steal by offering an individual lottery winnings, money orders, and inheritance claims. Be vigilant that these scams are trying to use a big payday to can your trust. If something sounds too good to be true, it usually is!
Reporting ID Theft or Fraud
If you suspect your personal information has been compromised take action immediately.
1. Contact F&M Bank (F&M may recommend the following):
- Close your account and open a new one
- Close your debit card and replace with a new card
- Disable Online Banking and Bill Pay Services
2. Call Police
Contact police in your local area to file a police report.
3. Contact the three credit reporting agencies and report it if your identity has been stolen
4. Contact the Federal Trade Commission
5. If mail is stolen, contact the United States Postal Service
6. Inform check security companies of the fraud
National Check Fraud Center
Equifax Check Systems
International Check Services
Reporting Identity Fraud
If you encounter a suspicious email or website that claims to be F&M Bank, do not respond or link any links. F&M Bank will never ask for any personal information in emails or text messages.
If you receive an email that appears to be from F&M Bank, report attempted phishing to F&M Bank at 405-715-1100.
Frequently Asked Questions
Question: Why do I get emails from other banks if I do not have accounts?
Answer: A criminal trying to "phish" has sent a mass email out hoping to get a customer at the bank he is claiming to represent. Usually the phishing attempts target large banks with many customers because it presents them with a good chance at catching someone. It can happen with smaller banks as well.
Question: I have Anti-Virus software, is that all I need to do?
Answer: Anti-Virus is a very important and critical step in protecting yourself, but it is not enough. Anti-Virus is only one part of a plan to stay safe online.
Question: I access my Internet Banking on my cell phone, am I ok?
Answer: Same steps as using a computer and more need to be taking when using a cell phone. On top of the regular online security you need to think about incidents such as your phone being stolen.
Did You know?
Watch out for text messages starting with the number 19. By responding you could be charged a premium rate on your cell phone bill.
Resources and Related Links
Federal Trade Commission (FTC)
Donotcall.gov | National Do Not Call Registry
optoutprescreen.com | Opt out of pre-approved credit offers
Annual Credit Report