In addition to identity theft, every year millions of people are victims of fraud and scams, which often start with an email, text message, or phone message that appears to be from a legitimate, trusted organization. These messages typically ask consumers to verify or update personal information or they direct consumers to bogus websites in the hopes that consumers will visit the site and enter their personal information.
Security Tips to Protect Your Online and Mobile Banking Account Information
- Don’t reveal your username or password to anyone. Your username and password are designated to protect your banking information. This only works if you keep the information to yourself.
- Create a safe password – the longer and more complex the harder it is to guess.
- Don’t walk away from your computer if you are in the middle of an Online Banking session.
- Once you have finished your Online or Mobile Banking session, log off before visiting other internet sites or mobile applications.
- If you notice any suspicious or unusual activity related to any of your accounts, contact Pacific Crest immediately.
- If your mobile device is lost or stolen, we recommend that you contact us so we can disable your Mobile Banking access.
- It is advised that you not utilize public Wi-Fi for connectivity to Online or Mobile Banking. Public Wi-Fi can be configured to capture private information from unsuspecting internet users.
- Limit the personal details you share on social media and/or consider limiting access to your personal page—it can provide identity thieves with too much information. They can use the information on your sites to guess your passwords or the answers to challenge questions used by secure sites. Choose wisely when setting up challenge questions to avoid easily-discovered answers.
Phishing Scam Tips
Phishing is a type of online scam where criminals make fraudulent emails, phone calls, and texts that appear to come from a legitimate bank. Every year, people lose hundreds, even thousands, of dollars to these scams. The communication is designed to trick you into entering confidential information (like account numbers, passwords, PINs, or birthdays) into a fake website by clicking on a link or telling it to someone imitating your bank on the phone.
Don’t fall for frauds — learn how to spot shady texts, emails, and phone calls by knowing the things your bank would never ask and following these tips to help prevent them.
Help Prevent Scams
- Set up multi-factor authentication on your bank and email login.
- Use long, complex passwords.
- If you receive a text or call from your bank, hang up and call the number on the back of your debit card, bank statement, or the bank’s website.
- Keep your computer and mobile device browser and operating system up-to-date by taking advantage of the latest security patches and enhancements.
- Update your anti-virus software regularly to keep your computer and mobile device free from viruses or malware.
- Slow down — think before you act. Acting too quickly can result in unintentionally giving scammers access to your bank account — and your money. Scammers want you to feel confused and rushed, which is always a red flag. Banks will never threaten you into responding or use high-pressure tactics.
Email Scams
Email scams account for 96 percent of all phishing attacks, making email the most popular tool for the bad guys. Often, the scammer will disguise the email to look and sound like it’s from your bank. When in doubt, call the number on the back of your debit card, bank statement, or the bank’s website. It’s vital to verify a source before responding, following links, or downloading attachments.
Do not reply to the sender and do not call any phone numbers provided in the message. Send a new separate email to the sender to verify the content. If the sender is unknown to you, it’s best to delete it.
Avoid clicking links
If an email pressures you to click a link — whether it’s to verify your login credentials or make a payment, you can be sure it’s a scam. Banks never ask you to do that. Links in phishing messages could direct you to fraudulent websites without your knowledge.
Raise the red flag on scare tactics
Banks will never use scare tactics, threats, or high-pressure language to get you to act quickly, but scammers will. Demands for urgent action should put you on high alert. No matter how authentic an email may appear, never reply with personal information like your password, PIN, or social security number.
Watch for attachments and typos
Your bank will never send attachments like a PDF in an unexpected email. Misspellings and poor grammar are also warning signs of a phishing scam. Attachments may contain malware such as viruses, worms, or spyware.
Be skeptical of every email
Always treating incoming emails as a potential risk will protect you from scams. Fraudulent emails can appear very convincing, using official language and logos, and even similar URLs. Always be alert. Links in phishing messages could direct you to fraudulent websites.
Unless expecting the email and you’ve verified the source, do not download any attachments in the message. Attachments may contain malware such as viruses, worms, or spyware.
Text Message Scams
Don’t click links
Never click on a link sent via text message if it asks you to sign in to your bank account. Scammers often use this technique to steal your username and password. When in doubt, visit your bank’s website by typing the URL directly into your browser or log in to your bank’s mobile app. It’s vital to verify a source before responding, following links, or downloading files.
Never send personal information
Your bank will never ask for your PIN, password, or one-time login code in a text message. If you receive a text message asking for personal information, it’s a scam.
Delete the message
Don’t risk accidentally replying to or saving a fraudulent text message on your phone. If you are reporting the message to law enforcement or the FTC, take a screenshot to share, then delete it.
Forward suspicious text messages to 7726 (SPAM).
Phone Call Scams
Don’t rely on caller ID
Always be wary of incoming calls. Scammers can make any number or name appear on your Caller ID. Even if your phone shows it’s your bank calling, it could be anyone. Area codes can be misleading. If your Caller ID displays a local area code, this does not guarantee that the caller is local.
Never give sensitive information
Financial institutions and legitimate companies will never call you to request your personal information. Never share sensitive information like your bank password, PIN, or a one-time login code with someone who calls you unexpectedly — even if they say they’re from your bank. Banks may need to verify personal information if you call them, but never the other way around.
Watch out for a false sense of urgency
Scammers count on getting you to act before you think, usually by including a threat. Banks never will. A scammer might say “act now or your account will be closed,” or even “we’ve detected suspicious activity on your account” — don’t give in to the pressure.
Hang up — even if it sounds legit
Whether it’s a scammer impersonating your bank or a real call, stay safe by ending unexpected calls and instead dial the number on the back of your debit card, bank statement, or the bank’s website.
Mobile Payment App Scams
Be wary of texts or calls about payment apps
Payment app scams often start with a phone call or text. If you get an unexpected call, just hang up. If you get an unexpected text, delete it. Even when they seem legitimate, you should always verify by calling your bank or payment app’s customer service number.
Use payment apps to pay friends and family only
Don’t send money to someone you don’t know or have never met in person. These payment apps are just like handing cash to someone.
Raise the alarm on urgent payment requests
Scammers rely on creating a sense of urgency to get you to act without thinking. They might claim your account is in danger of being closed, or threaten you with legal action. These high-pressure tactics are red flags of a scam — a real bank would never use them.
Avoid unusual payment methods
Banks will never ask you to pay bills using a payment app or ask you to send money to yourself. Scammers can “spoof” email addresses and phone numbers on caller ID to look like they’re from your bank, even when they’re not. When in doubt, reach out to your bank directly by calling the number on the back of your debit card, bank statement, or the bank’s website.
What to do if you fall for a scam
Contact your bank immediately by calling the number on the back of your debit card, bank statement, or the bank’s website. Request to close or freeze any accounts that may have been tampered with or fraudulently established. Contact Pacific Crest at (425) 670-9600 or (800) 335-4126.
- Change your online login credentials, username, passwords, and PINs with all of your financial institutions. If you haven’t already done so, implement multi-factor authentication, which is a setting that prevents cybercriminals from accessing your accounts, even if they know your password.
- If you linked a payment app to a credit card or debit card, report the fraud to your credit card company or bank. Ask them to reverse the charge.
- Secure your email and other communication accounts. Many people reuse passwords and your email or cell phone account may be compromised as well.
- Go to the Federal Trade Commission (FTC) IdentityTheft.gov to see what steps to take, including how to monitor your credit.
- If you lost money, file a police report. Get a copy of the report to submit to your creditors and others that may require proof of the crime.
- File a complaint with the FTC or call 1-877-FTC-HELP (1-877-382-4357). The FTC cannot resolve individual complaints, but your complaint could help law enforcement detect patterns of fraud and abuse.
- Check your credit reports and place a fraud alert on them
- Get a free copy of your credit report from annualcreditreport.com.
- Review your credit report to make sure unauthorized accounts have not been opened in your name.
- Report any fraudulent accounts to the appropriate financial institutions.
- Place a fraud alert on your credit by contacting one of the three credit bureaus.
Manage your postal mail
- Use secure drop locations for outgoing mail like post office collection boxes.
- Retrieve incoming mail from your mailbox right away, even if you use a locked mailbox.
Be aware of your surroundings
- Don’t use any ATM that shows signs of tampering, and report any such suspicions to the bank or ATM operator.
- Keep your credit and debit card in sight whenever possible, and swipe or insert the chip yourself if you have that option.
Store and dispose of information carefully
- Store financial documents and records in a secure, preferably locked location—yes, even at home.
- Shred all printed documents with account information before discarding them. Destroy records, receipts, credit offers, and applications, checks, bank statements, and expired credit cards if you no longer need them. Check with your financial adviser or your state’s Attorney General for guidelines on how long to keep personal records.
- Before disposing of computers or other devices, permanently wipe the device—information left behind can be a gateway to all of your online activity and accounts.
Additional resources:
FDIC Consumer Assistance Topics – Cybersecurity
Federal Trade Commission (FTC) Resources: