Personal Access
ONLINE BANKING

Online Security Tips

The more you know about keeping your personal information safe, the more comfortable you'll be online. Below you'll find some helpful tips we put together to keep you informed and your account information safe.

Phone and Text Messaging Phishing Scam
It has come to our attention that some members have received calls indicating that their VISA® Check Card or VISA® Credit Card has been compromised. The caller states that the member must give identifying personal information to verify their identity so their card will be reinstated. Calls like this are fraudulent.

Do not provide any information to these callers - the information you provide may be used for identity theft. Do not return these calls if a message is left for you.

Cyber-criminals are also increasingly using cell phone numbers, which they have collected via both legal and illegal methods to send text messages to a member cell phone. Please be advised that we do not send out any sort of text messages regarding member accounts to our members’ cell phones.

If you receive one of these messages informing you that something related to your account needs to be responded to, disregard it. Do not respond to the message and please feel free to call us at 763.544.1517 or 800.862.1998 and let us know the details of the text message or any concerns you may have.

TruStone will never ask for personal information such as Social Security Numbers, VISA® Card numbers, or PIN’s to verify your identity. If you have provided information to these callers, please let us know immediately at 763.544.1517 or 800.862.1998.

We are working hard to make sure your account information is never compromised, but there are some things you can do to keep your accounts safe as well. As a rule, if you are contacted by a party and you are not sure if they are legitimate, end the call and call us at 763.544.1517 or 800.862.1998 with any questions about your account.

Online Services Security Alert
As part of TruStone’s ongoing efforts to protect your account we have implemented a number of features in Personal Access to keep online access safe and secure.

One critical element of that security is the security image. This image is designed to verify that you have actually reached the TruStone site and not a fraudulent site. Each time you log-in to Personal Access your security image is presented. It is usually a word or phrase that you selected at the time you enrolled.

If this image has changed, without your request, please contact us immediately at 763.544.1517 or 800.862.1998 and do not log-in to your account.

Web Site Security

Email Phishing Scam
It has come to our attention that fraudulent emails have been sent from parties claiming to be representatives of TruStone.

This email states that account access has been restricted and you must log-in to your account to restore access. The link in the email directs you to a false website, which steals your member number and PIN. Even though this web site looks similar to our Personal Access Online Banking site, it is not.

Always keep in mind that TruStone will never send emails asking for personal account information.

If you have provided this information in one of the situations described, please call us immediately at 763.544.1517 or 800.862.1998.

If you think your Personal Access Online Banking account security has been compromised:

Change your Personal Access PIN - This will prevent any parties that might have your PIN from accessing your account online. Please note: This will change your Telexpress PIN, as well.
Contact TruStone Financial Immediately - Email estaff@trustonefinancial.org, or call us at 763.544.1517 or 800.862.1998. If the fraud involves a TruStone VISA® or Check Card, call 1.800.449.7728.
Carefully watch your account for any suspicious activity - It's a good practice to check your accounts at least once a week.

Visa® Credit Card - General Information
Protecting yourself and your credit can be as easy as keeping in touch. Here are some tips on keeping your credit card secure:

Zero liability - If your VISA® credit card is used for fraudulent activity, you will pay nothing. See VISA®'s site for all the details.
Regularly check your statements - You can catch unauthorized transactions early by checking your account regularly with easy online VISA access. Whenever possible, cancel paper bills and statements and switch to eStatements and paying bills online.
Get your Free Annual Credit Reports - It's your credit, so make sure no one else is using it. Check annually that there aren't activities listed that you didn't initiate.

Visa® Credit Card - Card and PIN Safety

Report lost or stolen cards immediately at 1.800.449.7728 24-hours a day
Sign your card on the signature panel as soon as you receive it.
Protect your cards as if they were cash.
Don’t leave your credit cards in the glove compartment of your car. A high proportion of all credit card thefts occur in glove compartments.
Never write down your PIN - memorize it. Also, never use your PIN as a password.
Ensure that you get your card back after every purchase.
Always check sales receipts for the correct purchase amount before you sign them and keep copies of your receipts.
Always check your billing statement and verify the amounts of your purchases.
Make a comprehensive list of all your cards and their account numbers and store it in a safe place.
Don’t volunteer any personal information when you use your credit card, other than displaying personal ID as requested by a merchant.
Don’t lend your card to anyone. You are responsible for its use. Some credit card misuse can be traced directly to family and friends.
Never disclose your PIN to anyone. No one from a financial institution, the police, or a merchant should ask for your PIN.

Visa® Credit Card - ATM Safety

Watch your surroundings - If the machine is poorly lit, or in a hidden area, use another ATM.
Guard your PIN - Keep a lookout for suspicious activity. Always guard your PIN and transaction amount. Immediately cancel your transaction and leave if you see something suspicious.
Keep your card ready - Avoid counting cash, or rummaging through personal items while standing at the ATM.
Be safe at the drive-through - When using a drive-through ATM, lock your car doors and roll-up your windows.
Take your receipt - Always take your receipt. It contains personal information that could be helpful to thieves.
Avoid strangers - When using an indoor ATM that requires your card to open the door, avoid letting unknown people in with you.

Visa® Credit Card - Online Safety
The web can be a great place to find information, but be extra cautious about the information you give. Here are just a few tips on what to think about while online.

Never send account information, such as your account number or PIN, in the body of an email. You never know who could be intercepting it.
Beware of phishing emails. These are emails that appear to be from your credit union or an online merchant asking you to provide your account information. These emails are bogus. VISA® and reputable merchants will never ask for any account or personal information in an email.
Never click on internet links within emails. Instead, type the known link yourself.
Before making purchases online, be sure that the site has built-in security features to protect your account information. All reputable merchant sites use encryption technologies that will protect your private data from being read by others as you conduct an online transaction.
When using a public computer to shop online, always remember to log off and quit the browser when you are finished. All it takes for someone to view your personal information is simply hitting the back button.
Protect information by only using a computer that has a firewall in place.
Implement anti-spyware and anti-virus software updates as soon as they’re available.

Visa® Credit Card - Mail and Phone Safety
Mail and phone solicitations bring many tempting offers, but not all are legitimate! Be especially careful about deals that sound too good to be true, and keep the following advice in mind:

Never give your account information to anyone claiming to be from VISA or your bank unless you initiated the call.
Be wary of high-pressure sales tactics, especially if the sale must be completed immediately.
Record the name, address, and phone number of the soliciting organization, and obtain names of other customers who can supply references.
Ask questions. The fewer questions a telemarketer can answer, the less likely that he or she is calling from a legitimate business.
Do not give your account number over the phone unless you initiated the call. When in doubt, consult the Better Business Bureau or the U.S. Postal Inspection Service.
Notify the Post Office immediately, if you change your address.
Make sure your mailbox is secure, and promptly remove delivered mail.
Call the Post Office immediately if you are not receiving your mail.
If you are told of a forwarding order placed on your mail without your knowledge, go to the Post Office to check the signature and cancel the order.

Identity Fraud
What is Identity Theft?
Identity theft is when someone uses personal information about you and uses it as a kind of disguise; by using your identity, any crimes they commit appear to be committed by you!

Common scams include stealing confidential information (Social Security number, account information, credit card numbers or other identifying information) and using that information to either clean out your current accounts or open new accounts in your name. After opening these accounts, the criminals run up huge bills, which creditors contact YOU about for payment. These crimes can ruin your credit history and attach your name to a criminal history that you didn’t do.

How do Criminals Get My Information?
Stealing wallets used to be the best way identity thieves obtained Social Security numbers, driver’s licenses, credit card numbers and other pieces of identification. While this is still a method, identity thieves now use more sophisticated means:

Dumpster diving in trash bins for unshredded credit card and loan applications and documents containing Social Security numbers.
Stealing mail from unlocked mailboxes to obtain newly issued credit cards, bank and credit card statements, pre-approved credit offers, investment reports, insurance statements, benefits documents, or tax information.
Accessing your credit report fraudulently, for example, by posing as an employer, loan officer, or landlord. Obtaining names and Social Security numbers from personnel or customer files in the workplace.
“Shoulder surfing” at ATM machines and phone booths in order to capture PIN numbers.
Finding identifying information on internet sources, via public records sites and fee-based information broker sites.

What Can I Do To Protect Myself?
Keep important personal information in a safe place. To minimize the amount of information a thief can steal, do not carry extra credit cards, your Social Security card, birth certificate or passport in your wallet or purse, except when needed. At work, store your wallet in a safe place. If possible, keep infrequently used documents (Social Security cards, birth certificates, car titles) in a safe or safe deposit box.

Guard your Social Security number. Do not carry other cards in your wallet that contain your Social Security number, except on days when you need them.

Make sure your mail is secure. If you don't have a locked mailbox, use a post office box or a commercial mailbox service. When you are away from home for an extended time, have your mail held at the Post Office, or ask a trusted neighbor to pick it up.

When ordering new checks, pick them up at the credit union. Don´t have them mailed to your home. If you have a post office box, use that address on your checks rather than your home address, so thieves will not know where you live. Use post office drop-boxes to mail bills. When you pay bills, do not leave the envelopes containing your checks at your mailbox for the postal carrier to pick up, or in open boxes at the receptionist´s desk in your workplace. If stolen, your checks can be altered and then cashed by the imposter.

Don't offer information to callers/websites you don't know. Never give out your Social Security number, credit card number or other personal information over the phone, by mail, or on the web unless you initiated the contact. Odds are good that offers asking for your personal information in return for a “vacation” or “prize” are fraudulent.

Always take credit card receipts with you. Never toss them in a public trash container. Watch the mail when expecting new credit cards. Contact the issuer if the card does not arrive.

Order your credit report at least once per year. Credit reports will show any new account activity recorded in your name; if an identity thief has opened accounts in your name, they will show up on this report.

Interested in more information? Check these resources:

Credit Reporting Agencies
Equifax - 800.685.1111
Experian - 888.EXPERIAN or 888.397.3742
TransUnion – 800.916.8800
Federal Trade Commission Identity Theft Clearinghouse
877.IDTHEFT or 877.438.4338
Identity Theft Resource Center
858.693.7935
Privacy Rights Clearinghouse
619.298.3396
Test your identity theft risk factor
U.S. Dept. Of Justice Identity Theft Survival Kit
800.725.0807
Fight Identity Theft

Basic Internet Security
Many companies, including TruStone, are making more and more of their products and services available online. TruStone uses a variety of technologies and techniques to secure its products and services. You can also enhance security and help control risks when using your personal computer or when conducting business online. Here’s how:

Personal Computer (PC) Security

Control physical access to your P); do what you can to prevent unauthorized people from using your PC.
If you are using your PC and need to walk away from it for any reason, log off or lock your workstation.
Select passwords that would be difficult for others to guess and change them frequently.
Do not give your passwords to anyone. Do not save passwords on your web site or leave written notes with your password near your PC.

Virus Management

Install virus management software on your PC and use it regularly.
Keep it up to date (i.e., latest signature files, product upgrades).
Be cautious when downloading and running programs or Java or ActiveX applets as they may contain unsecure data which cannot be filtered.
Use extreme caution when opening email received from unknown sources and pay special attention to any attachments. Do not launch or open an attachment from an unknown source. When in doubt…delete it without opening it.

PC Software

Understand and use the security features provided by your PC software, such as those included in many operating systems, browsers and word processing systems.
Ensure that your browser uses the strongest encryption available and be aware of the level of encryption used when you connect to various sites and applications. For example, TruStone’s Personal Access Online Banking currently requires the use of 128-bit encryption.
Use only software from reliable sources.
Stay aware of the latest release and patch levels of the PC software you use.

Encryption/Browser Update

Encryption is the scrambling of data into a code that is unreadable to anyone who does not have the key that deciphers it. Only you and TruStone have the key to unlock your code. With TruStone’s Personal Access Online Banking, all of your account information is protected by 128-bit encryption to maintain the privacy and confidentiality of your data. To take advantage of strong encryption technology, you will need to use a secure browser that supports 128-bit encryption.

Links to Third Party Websites

TruStone is not responsible for the content, privacy practices, or operation of any third-party websites. TruStone represents neither the third party nor the member if you enter into a transaction. You are encouraged to read the privacy and security policies on the site you are entering, as they may differ from those of TruStone. Links are provided for the convenience of TruStone members only.

Email Tips

Do not provide your email address to third party websites without reading the privacy and security policies and terms and conditions of these sites to ensure you understand the circumstances in which your email address will be used.
TruStone will NEVER ask for personal account information via email.
If you receive email asking for account information such as your username, password, address or social security number, DO NOT REPLY. Delete any emails of this nature immediately.