 |
Electronic Banking Tips |
Identity Theft
FBI Fraud Alert
Types of Computer Infections
Online Banking Security
Counterfeit Check Scams
ATM/Debit Card Safety Tips
Internet Phishing Scams (3.2 MB PDF file)
Check 21
Three important ways to protect yourself from a computer infection:
- Do not open emails unless you know the sender
- Do not open attachments unless you are expecting them
- Do not execute downloaded software from the Internet until it has been scanned for viruses
What is a virus? A computer virus is a small program written to alter the way a computer operates, without knowledge of the user. A virus must meet two requirements:
- It must execute itself. A virus will often place its own code in the path of another program.
- It must replicate itself. Viruses can infect both desktop computers and network servers.
What is a worm?
A worm is a special type of virus. Worms are programs that replicate themselves from computer to computer without the use of a host file. Worms generally exist inside of other files such as Word or Excel documents. When triggered, worms most commonly spread by way of your address book.
What is a Trojan horse?
A Trojan horse is a computer program in which a harmful code is embedded in a seemingly harmless program or data file in such a way that it can get control and crash your hard drive or erase data. For Trojan horses to spread, you must invite these programs onto your computer. For example, by opening an email attachment or downloading a file from the Internet.
The term comes from a story in Greek mythology in which the Greeks gave a giant wooden horse to the Trojans as a peace offering. But after the Trojans accepted the gift and brought it inside their city walls, Greek soldiers snuck out of the horse's hollow belly, opened the city gates, and allowed many more Greek soldiers to invade and capture the city of Troy.
One of the most well-known types of Trojan horse is a program that claims to rid your computer of viruses but instead introduces viruses onto your computer.
If you receive a suspicious email and you want to check its authenticity prior to opening the attachment, go to the following website: http://www.trendmicro.com/vinfo/virusencyclo and type in key words from the email where indicated.
If you feel your computer has been infected by a virus, worm, or Trojan horse, immediately scan your computer with an anti-virus product found at your local home office or computer store.
What is Spyware?
Spyware is software that secretly gathers user information through the user's Internet connection without his or her knowledge, usually for advertising purposes. Once installed, the spyware monitors user activity on the Internet and transmits information to someone else. Spyware can gather information about emails, passwords, and even account numbers.
License Agreements that accompany software downloads sometimes warn the user that a spyware program will be installed along with the requested software. Carefully read licensing agreements in their entirety because the notice of a spyware installation is often hidden in hard-to-read legal disclaimers.
If you feel your computer has been infected by spyware, immediately scan your computer with an anti-spyware product found at your local home office or computer store.
Need more information? Call 1.888.ORRSTOWN or 717.530.3530, or click here to contact us.
What has Orrstown Bank done to protect your information?
Orrstown Bank's computers are protected with 128-bit SSL (Secure Sockets Layer), a layer of encryption (or information scrambling) for transmitted messages. 128-bit SSL is the highest layer of encryption current available. This means that messages are immediately encrypted when it leaves your computer and remains encrypted until it reaches Orrstown Bank's computer, making it virtually impossible to read if intercepted along the way. Orrstown Bank's computers are protected by firewalls, which is a combination of hardware and software security measures that only grant access to authorized users. Orrstown Bank's internet banking service, bank@home, automatically timeouts after 10 minutes of inactivity.
What can you do to help protect your information?
- Memorize your passwords and PINs. Never write them down or share them with anyone.
- Do not choose to "Save Password" on your computer. Anyone else who uses your computer can easily gain access to your online account because the access information would already be stored.
- Change your password or PIN regularly.
- Properly log off when you have finished your banking transactions to break the connection with Orrstown Bank's computer. In addition, completely close your Web Browser to break your connection with the World Wide Web.
- Beware of requests for personal information, such as passwords, account numbers, social security numbers, and mother's maiden name. Know that an Orrstown Bank employee will never ask you any personal information in the form of an email.
Need more information? Call 1.888.ORRSTOWN or 717.530.3530, or click here to contact us.
One of the largest risks to U.S. banks is counterfeit check scams. These scams originated several years ago in Nigeria where corruption and lack of law enforcement created a safe haven for this type of activity. Organized crime groups in Nigeria employ hundreds of people who work long hours in public Internet cafés scamming people. These groups are acquiring millions of dollars annually from unsuspecting victims overseas.
Originally, scammers contacted their victims via letter or fax. Now with the availability of computers and Internet access, things have become much easier for the scammers. Some of these groups work in other parts of the world such as the U.K. and Canada. Many other foreign organized crime groups have also copied the scams originally developed by the Nigerians.
In addition, personal and business customers who deal with individuals or companies located outside the U.S. are at risk of having their account information compromised and used to create counterfeit items that are sent to unsuspecting victims of these scams. Scammers who work in mailrooms make photocopies of checks received from U.S. companies. These copies are used to create counterfeit checks used in the scams described below.
Described below are the most common types of scams. There are no hard and fast rules here and the scams are always evolving. Orrstown Bank relies heavily on our front line staff to be alert to unusual circumstances and to ask questions of their customers.
Nigerian 419 Scam: - This is the original scam from which all the others have developed. This scam involves the victim receiving a letter, fax, or e-mail from someone claiming to be a high level government official from a foreign country, commonly Nigeria. They seek the assistance of someone with a U.S. bank account to assist them to get money into the country in exchange for a percentage of the funds.
Inheritance, Mystery Shopping, or Lottery Scams: - This scam evolved from the original 419 scam and has many of the same characteristics. As in the 419 scam, the victim receives a letter, fax, or e-mail from someone overseas. The communication informs the victim that a long lost relative has died or been killed, their assistance is needed with “mystery shopping”, or that the recipient is a lottery winner. They are sent a counterfeit check to deposit or cash.
Internet Auction Scam: - Everybody loves e-Bay®, including the scammers! This scam evolved from the 419 scam, but because it involved lower dollar amounts and new technology it had a much higher percentage of success for the scammer. In this scam, the victim places an item for sale on the Internet (not necessarily on e-Bay, often on local classified websites). Payment is sent via counterfeit check for thousands of dollars in excess of the purchase price. The buyer is asked to wire the excess money to the buyer’s shipper who will arrange pickup of the item. The money is wired before the check comes back, leaving the victim (or their bank) out the money.
Work From Home Scam: - Another very effective counterfeit check scam. In this scam the scammer places ads on job search sites or replies to those who post job wanted ads. The victim is asked to receive checks, deposit the items, keep a percentage for themselves, and forward the rest of the funds via wire to their employer. The checks are counterfeit and the victim or their bank is left taking the loss.
Charitable Organization Scam: - Scammers surf the message boards of religious organizations and gain the trust of an unsuspecting victim. The scammer will claim to be a recent convert who has a large sum of money they want to invest in the religious organization. From here it functions similarly to the 419 scam.
Lonely Hearts Scam: - The scammers surf personal ads or matchmaking websites for unsuspecting victims. They befriend a victim and become involved in a cyber relationship. Once the victim is hooked, the scammer says that they want to come to the U.S. to be with them. They ask for money to fly to the U.S. and if the victim cannot or will not send it, they are sent a counterfeit check from a “relative” of their overseas companion which they are asked to cash and forward to them for a plane ticket.
Types Of Counterfeit Checks
Washed or Altered Checks: - Scammers use canceled checks from legitimate U.S. bank accounts and use simple chemicals to wash away the original payment information and the cancellation stamp. Sometimes they will actually just erase the information from the front of the check with an ink eraser. These are fairly easy to detect and are usually a long shot for the scammer.
Counterfeit Cashier’s Checks and Money Orders: - Scammers use PC’s, printers, check printing software, and check stock to produce counterfeit checks. They have advanced to make cashier’s checks or money orders. These items have maximum hold periods mandated by Reg. CC and the funds are made available to the victim before the bogus checks can be returned. These checks can be verified by calling the bank on which they are drawn. To counteract this, the scammers have actually started placing their own phone numbers in place of the bank’s phone number on the checks.
Counterfeit Company Checks: - These checks appear to come from legitimate U.S. companies ranging from furniture manufacturers to insurance companies. The checks usually contain the actual account information of the company’s real bank account, so if a call is placed to the company’s bank to verify the check you will often be told that the check is good. Verifying these checks requires calling the company’s accounts payable department.
Counterfeit U.S. Treasury Checks: - These checks are less common as they are a bit trickier for the scammer to pull off, but not impossible with a scanner and good color printer. Counterfeit treasury checks are relatively easy for experienced bankers to pick out, who usually call the treasury for verification.
Counterfeit U.S. Postal Service Money Orders: - These items are easy to pick out when comparing them to real U.S. Postal Service Money orders. Counterfeits are often issued for the maximum amount and several are presented at once. The U.S. Postal Service will verify their money orders at this toll free number: 1-866-459-7822.
Canadian or International Checks: - Checks that are payable through Canadian or foreign banks are not subject to U.S. banking regulations and can take over a month to be returned. Orrstown Bank may accept these checks as “collection items”. This involves mailing the item directly to the bank and requesting guaranteed funds in return before a customer’s account is credited.
ATM/Debit Card Security
- Treat your card as if it were cash. Always keep it in a safe place.
- Keep your personal identification number (PIN) a secret. Never write it down.
- Know your merchant before you disclose any card information over the phone. No one needs to know your PIN, not even your financial institution.
- Report a lost or stolen card immediately by calling Orrstown Bank at 1.888.ORRSTOWN or 717.530.3530. If you are calling after hours, please call Hot Card Services at 1.800.264.5578.
- Carefully review your account statements. Compare your statement with your receipts.
Security Tips at Walk-Up ATM's
- Observe the ATM surroundings before approaching a walk-up ATM. If anyone or anything appears to be suspicious, cancel your transaction and leave the area at once.
- If an ATM is obstructed from view or poorly lit, go to another ATM. It is a good idea to take along a companion when using an ATM, especially at night.
- Minimize time spent at the ATM by having your card out and ready to use. Do not let anyone see how much money you withdrew, and never count your money at the ATM.
- Never allow a stranger to assist you in conducting an ATM transaction, even if you have trouble or if your card is stuck.
- Use your body as a shield to block the ATM from anyone waiting to use the terminal so that others cannot see your PIN or transaction amount.
- Look for possible fraudulent devices attached to the ATM. If the ATM looks different or appears to have any alterations or attachments to the card slot or PIN pad, do not use it.
Security Tips at Drive-Up ATM's
- Keep your doors locked, windows up and engine running at all times when waiting in line.
- Leave enough room between cars to allow for a quick exit should it be necessary.
- Before lowering your window to use a drive-up ATM, observe the entire surrounding area. If anyone or anything appears to be suspicious, cancel your transaction and drive away at once.
- Minimize time spent at the ATM by having your card out and ready to use. Once your transaction is complete, take your money, card and receipt and immediately drive away from the terminal. Do not count your money at the ATM.
- If anyone follows you after you have completed your ATM transaction, go immediately to a crowded, well-lit area and call the police.
Point of Sale (POS) Security
- Never allow the cashier or anyone else to enter your PIN for you, even if they are assisting you with the transaction.
- Block the view of others when using a POS terminal.
- Make sure the transaction is complete and you have received a receipt before leaving.
- If you received cash back, put it away before leaving the terminal.
- When using an outdoor POS terminal, such as a gas station, observe your surroundings before making a transaction. If anything looks suspicious, leave the area at once.
- It is a good idea to take a companion with you when using an outdoor POS terminal at night.
- If anyone follows you after you have completed your POS transaction, go immediately to a crowded, well-lit area and call the police.
This information is provided by the PULSE EFT Association, a leading provider of ATM and debit card services to banks across the country, including Orrstown Bank. We appreciate their cooperation in helping us to ensure the safety of your money.
Need more information? Call 1.888.ORRSTOWN or 717.530.3530, or click here to contact us.
What is Check 21?
It is a federal law and is an acronym for Check Clearing for the 21st Century Act. Check 21 was enacted on October 28, 2004.
What does it allow?
Check 21 will allow checks to clear in a matter of hours instead of days because "substitute checks" will be transmitted electronically between financial institutions. The substitute check, a digital image (front and back) of the original, will replace paper checks over time and will be accepted as a legal document.
Will my deposits be credited to my account quicker?
You will not necessarily receive credit for deposits quicker than you currently do. Check 21 focuses on expediting the check clearing process.
Will I still receive my original cancelled checks back?
No, if you currently receive your original cancelled checks, you will now receive substitute checks, which are legal equivalents of the originals. Orrstown Bank will receive substitute checks; therefore, we will only have substitute checks to send back to you.
What will happen to original checks under Check 21?
Original checks can be destroyed at any time, so long as Orrstown Bank is able to provide a legible copy of the check for seven years.
Need more information? Call 1.888.ORRSTOWN or 717.530.3530, or click here to contact us.
|
