Provident Credit Union has extensive safeguards to protect your information and your funds. Read about what you can do to further protect yourself against fraud and identify theft. http://www.providentcu.org/index.asp?i=security Provident Credit Union Copyright (c) 2009, Provident Credit Union http://www.providentcu.org/NewGraphics/newerGraphics/ProvLogoReflecting.png 2007-01-01T12:00:00-08:00

Ads on Craigslist say you will be paid to help credit unions bypass eligibility rules for new members. Don't fall for it: this is a phishing attack.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/craigs_list.asp 2010-01-11T00:00:00-08:00 2010-01-11T00:00:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Alert-Side.png"> <p><i>May 15, 2007</i></p> <p>Provident Credit Union has learned recently of a new scam perpetuated on credit union members via Craigslist. The listing purports to represent several different credit unions, and offers to pay you to "sponsor" other people who would not otherwise be eligible for membership, so that they may join too. <a href="http://www.providentcu.org/NewGraphics/Content/Craigslist_Scam.gif" target="_blank" >Here is an example</a> of one we found.</p> <p>Don't believe it. While we may sometimes have promotions that reward you to "refer a friend", the person you refer must be eligible (through a family relationship to you, or by living or working in one of our areas of coverage, or by belonging to a company or organization that is an official Provident sponsor). Provident Credit Union does not pay you to circumvent legally established eligibility rules, nor do other reputable credit unions.</p> <p>What these scammers are usually really after is your personal account information, so that they can break into your account or use the information for identity theft and fraud. Please save yourself a world of problems and hassle by not responding to person or e-mail in the listing. You can report suspicious listings to Craigslist via the "prohibited" link in the box in the upper right corner of its Craigslist page.</p> <p>When dealing with your financial security, it is always better to be too suspicious than not suspicious enough, and you should always maintain a healthy dose of skepticism for any offer that sounds like it might be illegal and is not promoted on the credit union's Web site. </p> <h3>Recognizing Other Common Craigslist Scams:</h3> <p>The most common scams on Craigslist involve cashiers checks (which might initially clear and then later are found to be fraudulent) and wiring money. Look out for these warning signs:</p> <ul> <li style="margin-top:1em;margin-bottom:1em;">Someone sends you a check for more than the amount you're owed and asks you to wire money to them in return. </li> <li style="margin-top:1em;margin-bottom:1em;">You've only ever communicated with the buyer by e-mail or phone and you've never met with the buyer face-to-face before finalizing the transaction.</li> <li style="margin-top:1em;margin-bottom:1em;">You are asked to lie about the circumstances of a check you receive, or you are pressured to act quickly.</li> <li style="margin-top:1em;margin-bottom:1em;">The name of the check issuer seems odd, or you receive a business check from a business or individual account that is different from the person buying your item.</li> <li style="margin-top:1em;margin-bottom:1em;">A foreign company offers you a job receiving payments from customers, and requires you to then wire the funds.</li> <li style="margin-top:1em;margin-bottom:1em;">A distant seller asks for a partial payment upfront, after which he will ship goods.</li> </ul> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><A href="http://www.providentcu.org/index.asp?i=security" title="" rel="Contents"><span>Security Issues Index</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/Fraudulent_Cashiers_Checks_San_Mateo_CU.asp"><span>Fraud Alert: San Mateo CU Cashier's Checks</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/K2b4CC41uw0" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=craigs_list

Please be aware of counterfeit cashier's checks drawn on San Mateo Credit Union that are reported to be circulating.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/Fraudulent_Cashiers_Checks_San_Mateo_CU.asp 2009-11-23T00:00:00-08:00 2009-11-23T00:00:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Alert-Side.png"> <p>Please be aware of counterfeit cashier's checks drawn on San Mateo Credit Union that are reported to be circulating.</p> <p>As with authentic San Mateo Credit Union cashier's checks, the fraudulent cashier's check has the text "~SAN MATEO~" in large, capital, maroon-colored letters in the top left corner, with the text "CREDIT UNION" in capital letters printed in the same font below. <p>The fraudulent checks may be distinguished from authentic San Mateo Credit Union cashier's checks in the following ways:</p> <table border="0" cellpadding="0" cellspacing="0" class="table"> <tr> <th style="width:50%" scope="col">Fradulent Checks</th> <th style="width:50%" scope="col">Authentic Checks</th> </tr> <tr> <td><strong>Two</strong> horizontal maroon lines are located directly under the credit union name in the left hand corner.</td> <td><strong>One</strong> horizontal maroon line is located directly under the credit union name in the left hand corner.</td> </tr> <tr> <td>The text "CASHIER"S CHECK" in capital letters is printed in light colored font and enclosed within a gray oblong shape at the top center.</td> <td>&nbsp;</td> </tr> <tr> <td>Below the gray oblong shape is the address "<strong>350 CONVENTION WAY, REDWOOD, CA 94063</strong>" followed by the phone number "<strong>1(888) 609 8710</strong>" printed in dark colored font.</td> <td>The address "<strong>P.O. Box 910, Redwood City, CA 94064-0910</strong>" followed by the phone number "<strong>(650) 363-1725</strong>" is printed in small dark colored font, and is located directly to the right of the credit union name.</td> </tr> <tr> <td>A dark blue colored border is located along all four edges of the check.</td> <td>A maroon colored border is located along the top edge of the check.</td> </tr> <tr> <td>Within the top border is the text "<strong>THIS DOCUMENT HAS A SECURITY COLOR BACKGROUND ON FACE AND ORIGINAL DOCUMENT SECURITY SCREEN ON BACK WITH PADLOCK SECURITY ICON</strong>" in capital letters printed in light colored font.</td> <td>Within the top border is the text "<strong>THE CHECK IS VOID WITHOUT A MAROON BACKGROUND AND AN ARTIFICIAL WATERMARK SEAL ON THE BACK - HOLD AT ANGLE TO VIEW SEAL</strong>" in capital letters printed in light colored font.</td> </tr> <tr> <td>The background of the check has a light blue marble pattern.</td> <td>Most of the background of the check has a light maroon and white marble pattern, with a light maroon and white wave pattern in the rectangular section located in the bottom right hand corner. </td> </tr> <tr> <td>Below the dollar amount to the right side of the fraudulent cashier's check is the text "VOID IF OVER $5,000.00" in capital letters printed in small black font.</td> <td>Within the rectangular section mentioned above is the text "SAN MATEO CREDIT UNION" followed by the text "VOID AFTER 90 DAYS" and the text "SIGNATURE HAS A COLORED BACKGROUND" printed in small maroon font in capital letters.</td> </tr> <tr> <td>Serial numbers are as long as 6 digits.</td> <td>Serial numbers are as long as 8 digits</td> </tr> <tr> <td>The fraction code located at the <strong>top right</strong> hand corner of the check is "<strong>74-7836</strong>" over "<strong>272</strong>".</td> <td>The fraction code located at the <strong>top center</strong> of the authentic cashier's check is "<strong>90-7485</strong>" over "<strong>3211</strong>".</td> </tr> <tr> <td>The <acronym title="Magnetic Ink Character Recognition">MICR</acronym> line at the bottom of the check begins with the check's serial number, followed by the routing number "321174851" for San Mateo Credit Union, and then the account number.</td> <td>The <acronym title="Magnetic Ink Character Recognition">MICR</acronym> line at the bottom of the check begins with the check's serial number, followed by the routing number "321174851" for San Mateo Credit Union, and then the account number beginning with the number "8".</td> </tr> </table> <p>Fraudulent cashier's checks have been written in the amount of "$3,950.00" and other various amounts. </p> <p>If you have further questions, or have seen any of these counterfeit cashier's checks, please contact Deanna Degan of San Mateo Credit Union, at (650) 363-1783.<br> </p> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/craigs_list.asp" title=""><span>Fraud Alert: Craigslist Scam</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/CardActivationSMishing.asp"><span>Telephone/Text Message Phishing Scam</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/IkML5-aBSwM" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=Fraudulent_Cashiers_Checks_San_Mateo_CU

Scammers continue to use SMS text messages to try to get you to reveal your private information, so they can gain access to your accounts and/or steal your identity.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/CardActivationSMishing.asp 2008-09-24T00:00:00-07:00 2009-11-23T00:00:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Alert-Side.png"> <div style="border:2px solid yellow; padding:1em; display:table;"> <h3>Update (November 23, 2009):</h3> <p>Some Provident members have received fraudulent text messages on their phones recently. The message states that the member's credit union account has been frozen, and provides a phone number to call to resolve the problem. It is a scam: Provident did not send it. If you receive such a text, just delete it without calling the number, as it is almost certainly an attempt to steal your card number(s) or other sensitive information. </p> </div> <div style="border:2px solid yellow; padding:1em; display:table;" style="min-height:242px; _height:242px;"> <img src="http://www.providentcu.org/NewGraphics/newerGraphics/SMiShing.png" alt="PSCU Financial Sercives notification. 100 UNAUTHORIZED ACCESS. TOLL-FREE CALL 8005318675" width="160" height="240" align="right" style="margin-left:1em; border:1px solid #999;"><h3>Update (March 2, 2009):</h3> <p>Some Provident members have received this sort of text message recently, purporting to be from PSCU Financial Services. When you call the number, it asks you for your 16 digit credit or debit card number. </p><p>Do not fall for this scam: it is not from PSCU or Provident, and you should never give out your card numbers or other private information as a result of a text message or e-mail. At right is a sample of the fraudulent text message (presentation will vary depending on phone). The phone number shown in the sample has already been disconnected, and will likely be different with each round of messages sent out. </p> </div> <p><i>September 24, 2008</i></p> <p>We've recently been hearing reports of phishing scam that targets credit union members in an attempt to steal Visa Check Card numbers, using an automated telephone service or a text message. In this scam, you may receive a message indicating your debit card may have been compromised and has been placed on a hold status. In order to activate the card, the message asks you to call another phone number and enter your 16-digit card number and PIN. If you get a phone message or text message like this, don't fall for it. Once the fraudsters have that information, they can quickly drain your accounts, and continue to cause you trouble by using the information for identity theft.</p> <p>These recent attacks are reminders how important it is to safeguard your private banking information at all times. While most phishing is done via e-mail, these phishing attempts with alternate contact points are now common enough to have their own names: "<a href="http://en.wikipedia.org/wiki/Vishing" target="_blank">Vishing</a>" (Voice + Phishing) for when a phone is used, and <a href="http://www.unstrung.com/document.asp?doc_id=122478" target="_blank">SMiShing</a> (SMS Messaging + Phishing) for when SMS text messages are used.</p> <p>Protect yourself against all phishing scams. Never provide your financial or personal information to an unknown or suspicious source. Remember, Provident will <strong>never</strong> ask you for personal account information by e-mail, telephone, or text message unless <strong>you</strong> initiate the contact. <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/Fraudulent_Cashiers_Checks_San_Mateo_CU.asp" title=""><span>Fraud Alert: San Mateo CU Cashier's Checks</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/First_Star_Credit_Union_Fraud.asp"><span>Fraud Alert: First Star Credit Union</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/0vIibIZB5To" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=Card_Activation_SMishing

An entity representing itself as First Star Credit Union or First Star Lending Services is not actually a credit union, and is scamming people into paying an advance fee for a loan they never receive.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/First_Star_Credit_Union_Fraud.asp 2009-04-24T00:00:00-07:00 2009-04-24T00:00:00-07:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Alert-Side.png"> <p>Provident would like to make you aware of a fraud alert issued by the California Department of Financial Institutions (<acronym title="Department of Financial Institutions">DFI</acronym>) regarding an entity representing itself as First Star Credit Union or First Star Lending Services. Despite the name they are using, First Star is not a real credit union.</p> <p>First Star purports to offer a variety of loans, including personal loans and mortgages. The scam involves an &ldquo;advance fee&rdquo; loan, in which consumers are asked to send money prior to receiving the loan. The target audience for these offers is generally individuals with poor credit. Those who are solicited are told that their credit will not be checked and are guaranteed an approval. Victims are asked to send the fee, generally via wire transfer, before the loan will be funded. The scammer takes off with the fee and the borrower is left with nothing. </p> <p>First Star, which claims to have a Pennsylvania address, is neither licensed by the Pennsylvania Department of Banking, nor is it chartered by the National Credit Union Administration (<acronym title="National Credit Union Administration">NCUA</acronym>). </p> <p><strong>If you are solicited by or have communicated with First Star, please contact DFI&rsquo;s Legal Division at (213) 897-2160.</strong> If you have concerns or questions, please contact Provident at (650) 508-0300 or (800) 632-4600.</p> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/CardActivationSMishing.asp" title=""><span>Telephone/Text Message Phishing Scam</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/CallForwardPhishing.asp"><span>"Call Forwarding" E-Mail Phishing Scam</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/L5hTAWUUIrM" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=First_Star_Credit_Union_Fraud

Getting caught in this phishing scam results in your phone calls being received by the phisher instead of you. Your personal and banking information is also compromised.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/CallForwardPhishing.asp 2007-05-15T00:00:00-07:00 2007-05-15T00:00:00-07:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Alert-Side.png"> <p><i>May 15, 2007</i></p> <p>The information security company SecureWorks reports a new e-mail phishing scam that uses a &quot;Call Forwarding&quot; technique. The phisher obtains your personal information and tricks you into forwarding your phone calls to another number. A courtesy call from your financial institution to verify suspicious activity would be intercepted by the thief.</p> <p>The e-mail explains that your financial institution needs to verify your phone number and states that if the number is not confirmed your account will be suspended. You are asked to dial *72 followed by a series of numbers. This initiates the feature to forward all your incoming calls. You will then be prompted to confirm your phone number and to verify/update personal information such as social security and account numbers. With this information, the phisher can make fraudulent transactions. If your financial institution calls you about suspicious activity, the phisher receives the phone call and confirms that the transactions are legitimate.</p> Protect yourself against phishing scams. Never provide your financial or personal information to an unknown or suspicious source. Remember, Provident will <strong>never</strong> ask you for personal account information by e-mail or telephone unless <strong>you</strong> initiate the contact. <p><a href="http://www.secureworks.com/research/threats/callforward" target="_blank" >Click here</a> to read more about this tactic, and protecting yourself.</p> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/First_Star_Credit_Union_Fraud.asp" title=""><span>Fraud Alert: First Star Credit Union</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/ExtortionEmail.asp"><span>E-Mail Scam Includes Hit-Man Threat</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/xjufsWhUnrc" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=CallForward

This e-mail scam preys not on recipients' greed or good intentions, but on their fears. It contains a message that threatens to kill recipients if they do not pay thousands of dollars to the sender, who purports to be a hired assassin.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/ExtortionEmail.asp 2007-01-15T00:00:00-08:00 2007-01-15T00:00:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Alert-Side.png"> <p><i>January 15, 2007</i></p> <p>A wave of spam-like e-mails is being distributed across the Internet. The e-mail contains a threatening message and attempts to extort money from the recipient. This e-mail scam preys on individual's fears by threatening to kill them if the sender, who identifies himself as a hired assassin, is not paid a large amount of money within a specified time frame.</p> <p>The e-mails often target professionals at their work e-mail address. Recipients who have replied to the messages are shocked to find that the scammers provide personal details about the victim such as the name of a spouse or pet, street address, or a phone number in an attempt to prove they are telling the truth.</p> <p><strong>This is a hoax</strong>, so don't respond. The best defense is to delete&ndash;unopened&ndash;unsolicited spam e-mail.</p> <p><a href="http://www.fbi.gov/page2/jan07/threat_scam011507.htm" target="_blank" >Click here</a> to read more from the <a href="http://www.fbi.gov/page2/jan07/threat_scam011507.htm" target="_blank" >FBI Web site</a>.</p> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/CallForwardPhishing.asp" title=""><span>"Call Forwarding" E-Mail Phishing Scam</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/TJXCardNumbersCompromised.asp"><span>Potential Visa Card Compromise: Update</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/nwhR2DbmCxI" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=Extortion

A computer hacker stole thousands of credit card and debit card accounts numbers from TJX, parent company of T.J. Maxx, Marshalls, and others. What to do.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/TJXCardNumbersCompromised.asp 2007-01-29T00:00:00-08:00 2007-01-29T00:00:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Alert-Side.png"> <p><i>January 29, 2007</i></p> <p>TJX Company, the parent company of TJ Maxx, Marshalls, HomeGoods and A.J. Wright Stores in the U.S. and Puerto Rico, and its Winners and HomeSense stores in Canada, suffered a large-scale unauthorized intrusion into its computer systems that process and store information related to customer transactions. Based on current reports, the information at risk appears to be account numbers, expiration dates, Card Verification Values (CVV) and name. The compromised information does not appear to involve other personal information such as Social Security Numbers, addresses and birth dates. <a href="http://www.tjx.com/tjx_message.html" target="_blank" >Click here</a> to read more at the <a href="http://www.tjx.com/tjx_message.html" target="_blank" >TJX website</a>.</p> <p>While we are <b>still working with Visa to determine if any of our members were impacted by this situation</b>, here are some suggestions:</p> <ol class="bulletblue"> <li style="margin-top:1em;margin-bottom:1em;"><b>Do not cancel your credit or your debit cards.</b></li> <li style="margin-top:1em;margin-bottom:1em;">Once we know more about the situation, we will contact you by phone or by mail individually if you were impacted. At that time we will advise and assist you with what you need to do to protect yourself. </li> <li style="margin-top:1em;margin-bottom:1em;"><b>Rest assured we do not hold members liable for fraudulent credit card charges -- not even the first $50 as some other credit card companies are known to do.</b></li> <li style="margin-top:1em;margin-bottom:1em;">No matter the circumstances, a good financial habit to adopt is the regular monitoring of all your accounts. You should be checking your credit card statements regularly and reporting anything fraudulent to us immediately. You can review your paper statements monthly or check online as often as you like. <a href="https://accountmanager.providentcu.org/index.asp?i=enroll">Click here</a> to sign up to our <b>free</b> Account Manager service today. </li> <li style="margin-top:1em;margin-bottom:1em;">If you've moved recently, please make sure Provident has your current e-mail, address, and phone number in case we need to contact you. </li> </ol> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/ExtortionEmail.asp" title=""><span>E-Mail Scam Includes Hit-Man Threat</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/Phishing_EMails.asp"><span>Fake E-Mails/Phishing</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/xrUu67hcHkc" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=TJX

The latest attacks use e-mails made to look like they are from government agencies, in order to try to get you to reveal sensitive information, such as your PIN, Social Security Number, or credit card number. Learn about these and similar types of e-mail based fraud, and what you can do to protect yourself.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/Phishing_EMails.asp 2009-03-04T00:00:00-08:00 2009-03-04T00:00:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Student-Side.png"> <p>Phishing attacks use e-mail or malicious Web sites to solicit personal, often financial, information. Attackers may send e-mail, seemingly from a reputable credit card company or financial institution, that requests account information, often suggesting that there is a problem. When users respond with the requested information, attackers can use it to gain access to the accounts.</p> <h3>How Do You Avoid Being a Victim?</h3> <ul> <li style="margin-top:1em;margin-bottom:1em;">Do not reveal personal or financial information in an e-mail, and do not respond to e-mail solicitations for this information. This includes following links sent in e-mail. </li> <li style="margin-top:1em;margin-bottom:1em;">Do not send sensitive information over the Internet before checking a Web site's security. </li> <li style="margin-top:1em;margin-bottom:1em;">Pay attention to the <acronym title="Uniform Resource Locator">URL</acronym> (link address) of a Web site. A malicious Web site may look identical to a legitimate site, but if the URL uses a variation in spelling or a different domain (e.g., ".com" vs. ".net"), it may indicate it is being run by someone else. </li> <li style="margin-top:1em;margin-bottom:1em;">If you are unsure whether an e-mail request is legitimate, try to verify it by contacting the company directly. Do not use contact information provided on a Web site connected to the request; instead, check previous statements for contact information. Information about known phishing attacks is also available online from groups such as the <a href="http://www.antiphishing.org/phishing_archive.html" target="_blank" >Anti-Phishing Working Group</a>. </li> <li style="margin-top:1em;margin-bottom:1em;">Install and maintain anti-virus software, firewalls, and e-mail filters to reduce some of this traffic.</li> <li style="margin-top:1em;margin-bottom:1em;">Use your <a href="http://staysafeonline.org/content/email-filters" target="_blank" >junk mail filters</a>. These are your best bet to avoid getting scam e-mail in the first place.</li> </ul> <h3>What Do You Do If You Think You Are a Victim?</h3> <ul> <li style="margin-top:1em;margin-bottom:1em;">If you believe you might have revealed sensitive information about your organization, report it to the appropriate people within the organization, including network administrators. They can be alert for any suspicious or unusual activity.</li> <li style="margin-top:1em;margin-bottom:1em;">If you believe your financial accounts may be compromised, contact your financial institution immediately and close any accounts that may have been compromised. Watch for any unexplainable charges to your account. Consider reporting the attack to the police, and file a report with the <a href="http://www.ftc.gov/" target="_blank" >Federal Trade Commission</a>.</li> </ul> <h3>More Information about Phishing:</h3> <p>For more details on phishing and how to protect yourself against phishing scams, visit the <a href="http://www.antiphishing.org/" target="_blank" >Anti Phishing Working Group</a> and the <a href="http://www.us-cert.gov/cas/tips/ST04-014.html" target="_blank" >United States Computer Emergency Readiness Team (US-CERT)</a>, a partnership between the U.S. <a href="http://www.dhs.gov/" title="Go to Department of Homeland Security Web site">Department of Homeland Security</a> and the public and private sectors. </p> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/TJXCardNumbersCompromised.asp" title=""><span>Potential Visa Card Compromise: Update</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/passmarkFAQ.asp"><span>Enhanced Security Sign On: FAQ</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <p><small style="font-weight:normal; color:#999; font-size:9px; display:block; ">Content on this page primarily produced by <a href="http://www.us-cert.gov/index.html" title="Go to US-CERT.gov Web site">US-CERT</a>, part of the <a href="http://www.dhs.gov/" title="Go to Department of Homeland Security Web site">Department of Homeland Security</a>. </p> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/99yMR_fbLIo" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=phishing

Provident is offering a new way to sign on to home banking that provides more security to members, which goes beyond just Member Number and PIN, and also helps protect against phishing.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/passmarkFAQ.asp 2007-01-01T12:21:00-08:00 2007-01-01T12:21:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Student-Side.png"> <p><b class="updated">Updated 10/17/2007</b></p> <p><b>Online security is more important than ever and Provident is taking it to the next level.</b></p> <p>On May 10, 2007, Provident began offering a new way to sign on to home banking that provides more security to members, which goes beyond just User ID and password, and also helps protect against phishing. On October 17th, the older way to sign on was removed, and the new method became required for all sign-ons. See below for answers to common questions you might have about this newer, more secure way of signing onto home banking.</p> <div id="QandA"> <div class="qaline"></div> <a name="q1"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> Why is my online banking experience changing?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> In order to make your online banking experience as secure as possible, we are introducing a new security feature. The new security feature is a Personal Security Image and its name, which are customized by you. When you see your Personal Security Image and Caption it gives you the confidence that you are at the real Provident Account Manager site (online banking site), and not a fake site. This means you can bank online with an even greater confidence.</p> <div class="qaline"></div> <a name="q2"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> What is the new security feature?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> The new security feature adds a layer of protection to your online account by letting you know it&rsquo;s really us, and letting us know it&rsquo;s really you. </p> <p><b>Letting <i>you</i> know it&rsquo;s really <i>us</i>:</b></p> <ul> <li style="margin-top:1em;margin-bottom:1em;">You pick one of thousands of images (or upload your own) and enter a brief name describing the image.</li> <li style="margin-top:1em;margin-bottom:1em;">When you sign on to your account your Personal Security Image and its name will appear before you enter your password.</li> <li style="margin-top:1em;margin-bottom:1em;">Seeing your Personal Security Image and its name will let you know that you are at the real Provident Account Manager (online banking) site and not a look-alike. This means it is safe to enter your password. </li> <li style="margin-top:1em;margin-bottom:1em;">If the correct image and its name do not appear do not enter your password.</li> </ul> <p style="margin-top:0; padding-top:0;"><em>Remember: Once you have signed up, <strong>NEVER</strong> enter your password without first seeing your Personal Security Image and its name.</em></p> <p><b>Letting <i>us</i> know it&rsquo;s really <i>you</i>:</b></p> <ul> <li style="margin-top:1em;margin-bottom:1em;">The new security feature will recognize the computers you normally use to access Account Manager. <li style="margin-top:1em;margin-bottom:1em;">If you or someone else attempts to sign on from a new or unrecognized computer, you will need to answer a security question that only you should know the answer to before being allowed to continue (other security conditions may also trigger us asking you a security question). </ul> <div class="qaline"></div> <a name="q3"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> How much does it cost?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> There is absolutely no cost to you to take advantage of the new security system.</p> <div class="qaline"></div> <a name="q4"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> Where do I enter my password?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> Due to the new security feature, you do not enter your password until you see your Personal Security Image and its name. To begin signing into your account simply enter your User ID and click the "Sign On" button.</p> <div class="qaline"></div> <a name="q5"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> How am I more secure with the new security system?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> The new security system protects you from accidentally revealing your password to a fake site. In addition, if others try to sign on to your account from another computer, they will be asked a security question to which only you should know the answer.</p> <div class="qaline"></div> <a name="q6"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> <span style="color:red; font-weight:normal;">Updated 2/26/2008:</span> How do I sign up for the new security system?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> Just use the normal sign-on form in the upper left corner of the site to enter your User ID and press the button to continue. If you've been using the older, "traditional" sign on method prior to this, you will be prompted to enter additional information the first time you sign on with the newer method. This will include choosing your Personal Security Image and name as well as several security questions that only you would know the answers to. Once this occurs you have added a layer of protection to your account!</p> <div class="qaline"></div> <a name="q8"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> Can I still sign on from the home page?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> Yes, although you will no longer see a password field on the home page, or a menu to choose the older "traditional" sign on method. From now on, you enter your password on a separate page after you have already submitted your User ID. The password entry is the last step of signing on (unless we have to ask any security questions to help confirm your identity), where you'll see your personally chosen image confirming the identity of our site to you. This is also the same procedure to follow when signing on from any other page.</p> <div class="qaline"></div> <a name="q10"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> <span style="color:red; font-weight:normal;">Updated 10/17/2007:</span> Will using this new method be mandatory?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> This is now required for all members signing on to online banking. The opt-in period ended on October 17th, 2007.</p> <div class="qaline"></div> <a name="q12"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> Why do I need the new security feature?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> As time goes on, there are more and more attempts by fraudsters trying to trick people into revealing their personal information, such as passwords or PINs, by creating fake Web sites that look very much like the sites of legitimate financial institutions (such as credit unions or banks). These fraudsters send out e-mails with links to these fake Web sites claiming that you need to sign on to your account by clicking the link. This phenomenon has been called Phishing, (pronounced &quot;fishing&quot;). We are committed to proactively protecting you, our member, against these types of threats. By making sure you always see your Personal Security Image and Caption before entering your personal information, you can ensure your information is being entered into a legitimate site.</p> <div class="qaline"></div> <a name="q13"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> Why am I being asked a question when I try to sign on?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> We ask you one of your security questions when we detect that you are trying to sign on from a new or unrecognized computer. This helps us makes sure it&rsquo;s really you trying to access your account. If you choose to have us remember your computer you will not have to answer your security questions again when using that computer. </p> <p>However, if you are using a public computer or one you don&rsquo;t normally use for home banking, you should choose to <strong>not</strong> have our security system remember that computer. Other circumstances can also potentially trigger a security question to be asked too, even if you are using a computer you have asked us to remember.</p> <div class="qaline"></div> <a name="q14"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> Can I access my account from multiple computers?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> Yes, you can still access your account from any number of computers. If you sign on from a new or unrecognized computer you will first need to answer one or more security questions before your Personal Security Image is displayed. This helps us verify your identity and make sure it is really you trying to access your account. There is no limit on how many different computers you can use to sign on to your account.</p> <div class="qaline"></div> <a name="q15"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> How easy is it to use the new security system?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> It is extremely simple for anyone to use. Just use the site as usual and look for your Personal Security Image and Caption before you enter your password.</p> <div class="qaline"></div> <a name="q16"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> I share my computer with someone who has their own account. Can both of us still sign on from this machine?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> Yes, you can both use the same computer to sign on to your individual accounts. There is no limit on how many people can sign on to the Account Manager from the same computer.</p> <div class="qaline"></div> <a name="q17"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> Can I change my Personal Security Image and Caption?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> Yes, you can change your Personal Security Image and Caption at any time. To make the change, go to the &quot;Security Settings&quot; link after you sign on to your account.</p> <div class="qaline"></div> <a name="q18"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> I am trying to sign on from my own computer, but the Web site is not showing me my Personal Security Image and Caption. Instead, it is asking me a question. What is happening?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> This might happen in some cases if you have deleted all cookies on your computer. Additionally, other conditions can also trigger the asking of a security question, even if you are using a computer you have asked us to remember (if you have recently changed your security questions, image, or caption, for instance). Before answering a security question or entering your password, make sure that you are going to the legitimate Provident Web site. The easiest way to ensure this is by typing the URL (the Internet location address) of Provident (providentcu.org) directly into your web browser. Then, you should see your Personal Security Image and Caption next to the password field. If your Personal Security Image and Caption appear, you can be confident that you are at the legitimate Provident Account Manager Web site and can safely enter your password.</p> <p><strong>Remember:</strong> Once you have set up your security image, caption, and questions, <strong>NEVER</strong> enter your password without first seeing your Personal Security Image and Caption.</p> <div class="qaline"></div> <a name="q19"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> Will my password change due to the new security system?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> No. Your Personal Security Image and Caption as well as the security questions and answers you provide are separate from your regular password, which you will continue to use as the last step of signing on. We do not always ask the security questions to sign on, but we will always ask for your password.</p> <div class="qaline"></div> <a name="q22"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> <span style="color:red; font-weight:normal;">Updated 06/04/08:</span> What if I have a joint account? Does each person have their own separate image and caption?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> The images, captions, and security questions are associated with a particular User ID. So if 2 people are sharing the same User ID for a shared account, then they would also need to both know what the images, captions, and answers to the security questions are. Households with more than one membership at Provident would have separate images, captions, and security questions for each one. <b style="color:red;">New! </b>As of June 4, 2008, members can now set up two different User IDs for the same member number. This allows you to have separate Security images and questions for each sign-on, and allows you to pick questions that are harder for other people to answer.</p> <div class="qaline"></div> <a name="q20"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> I already have anti-virus and a personal firewall. Why do I need this?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> We are glad to hear you use antivirus and a personal firewall. Be sure that you keep both software programs up-to-date for the best possible protection against viruses, Trojans, and hackers. This new security feature protects against other kinds of threats such as a stolen User ID and password. It works <em>with</em> your other personal security programs, but it does not replace them. </p> <div class="qaline"></div> <a name="q21"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> Is my personal information still safe?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> Yes. In fact, your personal information is safer than ever before because we are making sure it is really you and not an unauthorized user trying to access your information.</p> <div class="qaline"></div> <a name="q22"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> <span style="color:red; font-weight:normal;">Added 8/24/2007:</span> Provident's site is telling me I need to turn on cookies, but they are on. What's wrong?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> There are three likely possibilities for problems like this:</p> <ul> <li style="margin-top:1em;margin-bottom:1em;">We might have had trouble detecting your cookie support. This is especially likely to happen if you right click on the page to refresh it, but there may be other ways it could happen as well. If this happens to you just <b>click on the "click here to continue" link in the message</b> to re-check for cookies. </li> <li style="margin-top:1em;margin-bottom:1em;">Another possibility is that you may be running software that interferes with cookie usage. There are many filtering and blocking software packages available which may filter out cookies. If you are running software like this, then you may have to change its settings to allow the Provident site to set and read cookies. </li> <li style="margin-top:1em;margin-bottom:1em;">Finally, your machine may be behind a firewall or proxy server that prevents cookie transmission. This happens mostly in corporate environments. So, regardless of your browser settings, cookies won't be sent or received by your browser. Since the cookies aren't making it through the corporate network to your browser, the Web Site will assume you personally aren't accepting them. If this is happening to you, your IT or IS department would need to change their software settings in order to allow Provident's cookies through.</li> </ul> <div class="qaline"></div> <a name="q23"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> <span style="color:red; font-weight:normal;">Added 8/24/2007:</span> I've set my cookie-blocking software to allow providentcu.org cookies from being blocked. Why am I still getting cookie-related errors on the Provident site?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> Provident has more than one site domain involved for signing on to online banking. If you are only allowing certain sites to use cookies (in a "white list" or list of exceptions to the blocking behavior), you may need to specify all the site domains that Provident uses. Please make sure that all of the following sites used by Provident are allowed to set and read cookies:</p> <ul> <li style="margin-top:1em;margin-bottom:1em;">http://providentcu.org</li> <li style="margin-top:1em;margin-bottom:1em;">http://www.providentcu.org</li> <li style="margin-top:1em;margin-bottom:1em;">https://accountmanager.providentcu.org</li> <li style="margin-top:1em;margin-bottom:1em;">https://secure.providentcu.org</li> </ul> <p>In addition, some of our functionality is provided by partner companies, and that functionality can be curtailed if their sites are blocked from using cookies, so they should also be added to any exception list you maintain:</p> <ul> <li style="margin-top:1em;margin-bottom:1em;"><b>Bill Manager:</b> https://billpay1.pscufs.com</li> <li style="margin-top:1em;margin-bottom:1em;"><b>Mortgage rates, mortgage application, etc.:</b> http://providentcu.mortgagewebcenter.com, https://providentcu.mortgagewebcenter.com</li> <li style="margin-top:1em;margin-bottom:1em;"><b>CU Service Center search results:</b> http://www.cuservicecenter.com</li> </ul> <p>You may also need to unblock the following site addresses if you use them to sign on from our home page:</p> <ul> <li style="margin-top:1em;margin-bottom:1em;">http://providentcu<b>.com</b></li> <li style="margin-top:1em;margin-bottom:1em;">http://www.providentcu<b>.com</b></li> <li style="margin-top:1em;margin-bottom:1em;">http://providentcu<b>.net</b></li> <li style="margin-top:1em;margin-bottom:1em;">http://www.providentcu<b>.net</b></li> </ul> <div class="qaline"></div> <a name="q24"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> <span style="color:red; font-weight:normal;">Added 8/24/2007:</span> Why can't I sign on using Safari?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> We do support Safari on our site, in fact the site was designed on a Mac and is regularly tested in Safari. However, the default configuration for cookies in Safari, to accept cookies "only from sites you navigate to," can cause problems because the Provident site combines pages from more than one site domain. Even when these domains are all coming from Provident, Safari still considers them to be separate sites, and blocks the cookies from one of them, due to this setting. This is easily fixed if you make the following changes in Safari:</p> <ol> <li style="margin-top:1em;margin-bottom:1em;">In Safari, click on the "Safari" menu at the top of the screen, and select "Preferences&hellip;".</li> <li style="margin-top:1em;margin-bottom:1em;">In the window that opens, click on the "Security" icon.</li> <li style="margin-top:1em;margin-bottom:1em;">Next to where it says "Accept Cookies", select "Always".</li> </ol> <p>There are also plug-in extensions you can download, such as "<a href="http://www.versiontracker.com/dyn/moreinfo/macosx/28647" target="_blank" >SafariPlus</a>", that will give you more finite control over your cookies, so that you can add Provident sites to a "white list" of sites that are allowed to use cookies. If you decide to go this route, be sure to add the following four sites to your white list in order to avoid sign on problems:</p> <ul> <li style="margin-top:1em;margin-bottom:1em;">http://providentcu.org</li> <li style="margin-top:1em;margin-bottom:1em;">http://www.providentcu.org</li> <li style="margin-top:1em;margin-bottom:1em;">https://accountmanager.providentcu.org</li> <li style="margin-top:1em;margin-bottom:1em;">https://secure.providentcu.org</li> </ul> <div class="qaline"></div> <a name="q25"></a> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> <span style="color:red; font-weight:normal;">Added 8/24/2007:</span> Why can't I sign on using FireFox?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> We do support FireFox on our site, and usually this is not a problem. However, if you've ever had FireFox version 1 or earlier on your computer, it may be set to allow "only cookies from the originating server". This value may be retained even after you upgraded to version 2 or later, which does not have this setting visible. This can cause problems because the Provident site combines pages from more than one site domain. Even when these domains are all coming from Provident, FireFox still considers them to be separate sites, and blocks the cookies from one of them, due to this setting. This is easily fixed with the following steps:</p> <ol> <li style="margin-top:1em;margin-bottom:1em;">In FireFox, type "about:config" into the address field at the top of the window, where site addresses are normally shown.</li> <li style="margin-top:1em;margin-bottom:1em;">On the page that opens, type "cookie" into the "filter" field in order to reduce the number of configuration options shown.</li> <li style="margin-top:1em;margin-bottom:1em;">Find the line "network.cookie.cookieBehavior" and double-click on it.</li> <li style="margin-top:1em;margin-bottom:1em;">Change the "1" to "0" (zero).</li> </ol> <p>If you prefer to keep cookies turned off for other sites, but to allow them for Provident sites, you can follow these steps to add Provident's sites to a "white list" of sites that are allowed to use cookies:</p> <ol> <li style="margin-top:1em;margin-bottom:1em;">The first step depends on your Operating System: <ul><li style="margin-top:1em;margin-bottom:1em;"><b>Windows:</b> In FireFox, click on the "FireFox" menu at the top of the screen, and select "Preferences&hellip;".</li><li style="margin-top:1em;margin-bottom:1em;"><b>Mac OS X:</b> In FireFox, click on the "Tools" menu at the top of the window, and select "Options&hellip;".</li></ul></li> <li style="margin-top:1em;margin-bottom:1em;">In the window that opens, click on the "Privacy" icon.</li> <li style="margin-top:1em;margin-bottom:1em;">Click on the "Exceptions" button.</li> <li style="margin-top:1em;margin-bottom:1em;">Enter the following sites, one at a time, clicking the "Allow" button after each one: <ul> <li style="margin-top:1em;margin-bottom:1em;">http://providentcu.org</li> <li style="margin-top:1em;margin-bottom:1em;">http://www.providentcu.org</li> <li style="margin-top:1em;margin-bottom:1em;">https://accountmanager.providentcu.org</li> <li style="margin-top:1em;margin-bottom:1em;">https://secure.providentcu.org</li> </ul> </li> </ol> </div> <p class="paragraph QAbreakToReg">&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/Phishing_EMails.asp" title=""><span>Fake E-Mails/Phishing</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/checkingFraud.asp"><span>Cashiers Check / Money Order Scam</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/9ko1VCxin1U" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=passmarkFAQ

Are you offering something for sale on the Web or in a classified ad? Beware of anyone who wants to overpay and get change, even if their check or money order seems to clear.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/checkingFraud.asp 2007-01-01T12:20:00-08:00 2007-01-01T12:20:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Student-Side.png"> <p>Recently, increasing numbers of people have been hurt financially by a scam in which they receive cashiers checks or money orders for over the amount they are expecting. Here are the basics of how the scam works:</p> <ol class="bulletblue"> <li style="margin-top:1em;margin-bottom:1em;">You advertise something for sale on the Internet, or in classified ads, or elsewhere</li> <li style="margin-top:1em;margin-bottom:1em;">Someone responds and says they will buy it, and sends you a cashiers check or money order, but for too much.</li> <li style="margin-top:1em;margin-bottom:1em;">You cash the check. It clears, so you think it is fine. You send back the overage (usually by wire), drawn from the balance in your account.</li> <li style="margin-top:1em;margin-bottom:1em;">The check is discovered to be counterfeit, and is deducted back out of your account. The buyer never picks up the merchandise.</li> </ol> <p>The scammer is never interested in meeting you to take what you had for sale. He might not even live in the same country (many of these scams originate in Nigeria). All he cares about is getting you to send him the change. He may even make the deal sound better by offering to pay more than you asked by doing this favor of sending him change. Don't fall for it! If you deposit a counterfeit check or money order, you do not get to keep the money you got when you cashed it.</p> <p>There are countless variations on this scam, including e-mails that tell you you won a contest or that some dignitary needs help moving funds out of his country. So be suspicious of anything that requires you to send money back to someone you don't know.</p> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/passmarkFAQ.asp" title=""><span>Enhanced Security Sign On: FAQ</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/EncryptedMailFAQ.asp"><span>Encrypted E-Mail at Provident</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/g60qyBzml4I" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=checkingFraud

Provident Credit Union doesn't take any chances when it comes to protecting your sensitive information. Read about our mail encryption program, and what you should do if you receive an encrypted e-mail from Provident.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/EncryptedMailFAQ.asp 2007-01-01T12:19:00-08:00 2007-01-01T12:19:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Student-Side.png"> <p>See below for answers to common questions about exchanging securely encrypted e-mail messages with Provident.</p> <div id="QandA"> <!-- FAQ Name: pccufaq --> <!-- Entry Id: Q115101028200040 --> <!-- Grade: 10 --> <div class="qaline"></div> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> How do I read an encrypted e-mail, once I have clicked on the link you e-mailed me to go to the PGP Universal Encryption Web site?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> The first time you visit the PGP Universal site you will be asked to create a passphrase. You will not be asked to provide personal information. (If you are asked for personal information or required to download software or if you have <b>any doubt</b> about whether the Web site you go to is legitimate, or might be a phishing site, then do not perform the software download and do not use the site to correspond with us. Instead, contact us by phone or through our Account Manager online banking.)</p> <p>After you enter a unique passphrase, you can then choose how to read any future encrypted e-mails from Provident. Your choices are either <b>1)</b> the Web interface or <b>2)</b> through existing encryption options you might have already set up. Your choices here apply only to "PGP Universal", and not to Account Manager messages. After you log out from the Web interface you will be asked for your passphrase again. You only need to provide it if you want to log right back in to view your message(s) again through the Web interface. Otherwise, you may just close the window.</p> <p> <!-- FAQ Name: pccufaq --> <!-- Entry Id: Q115101012400031 --> <!-- Grade: 10 --> <div class="qaline"></div> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> Should I always use PGP Universal Encryption to send secure e-mail to Provident?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> For most people, most of the time, Account Manager's "Secure E-Mail" will remain the preferred way of exchanging messages securely with Provident. However, if we send an e-mail to your regular e-mail address and it is encrypted by PGP Universal, the e-mail you receive will include a very simple link to the PGP Universal Web site with further instruc?ions on how to read your encrypted message.</p> <p> <!-- FAQ Name: pccufaq --> <!-- Entry Id: Q115100986800029 --> <!-- Grade: 10 --> <div class="qaline"></div> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> How does Provident encrypt its messages to members?</h4> <div class="q subhead">A.</div><p> Provident has two ways of exchanging secure encrypted messages with you: </p><ol class="bulletblue"><li style="margin-top:1em;margin-bottom:1em;">Provident has long offered its members a "Secure E-Mail" feature in "Account Manager" online banking, where you can exchange mail messages with us securely. When you use this feature, any mail you send or receive through the Account Manager interface will be encrypted (encoded so no one but the sender and recipient can read it). Anyone else trying to intercept it will only see gibberish instead.</li><li style="margin-top:1em;margin-bottom:1em;">Provident also has another way to exchange encrypted e-mail with you, which does not require Account Manager. This option is called "<b>PGP Universal</b>", which automatically encrypts any regular e-mail sent by Provident to you that might contain sensitive information (such as your member number or PIN).</li></ol> <p> <!-- FAQ Name: pccufaq --> <!-- Entry Id: Q115100959600011 --> <!-- Grade: 10 --> <div class="qaline"></div> <h4><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">Q.</span> Why does Provident use encryption when sending messages through the Internet?</h4> <p><span style="font-size:22px; font-weight:bold; line-height:11px; padding-right:.3em; color:#999999; ">A.</span> Standard e-mail is not a secure way to send private or confidential information. Standard e-mail messages are essentially like postcards, in that they can be intercepted, copied, and read by others while in transit to their destination. </p> <p> <INPUT TYPE="hidden" NAME="Question" VALUE="Q115100959600011 Q115100986800029 Q115101012400031 Q115101028200040"> </div> <p class="paragraph QAbreakToReg">&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/checkingFraud.asp" title=""><span>Cashiers Check / Money Order Scam</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/HowTheyDidIt.asp"><span>How Did They Access My Account?</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/25_7iaf5w34" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=EncryptedMail

Scam artists are continuously finding new ways to commit credit card and ATM fraud against you, and they no longer need the actual card. Find out how to protect your Visa from the latest threats.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/HowTheyDidIt.asp 2007-01-01T12:18:00-08:00 2007-01-01T12:18:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Student-Side.png"> <h3>Protect Against Fraud &ndash; <span style="white-space:nowrap;">They Don't Need Your Actual Card!</span></h3> <p>You've received bad news&ndash;your ATM, check card or credit card has been used fraudulently. But your card has been in your possession all along&ndash;how could it have been used? Scam artists are continuously finding new ways to steal your personal and financial information, including credit card, ATM card, and check card information&ndash;and they no longer need the actual card to commit fraud against you.</p> <h3>How to Protect Yourself</h3> <ul class="bulletblue"> <li style="margin-top:1em;margin-bottom:1em;"><strong>Select the &quot;credit&quot; option</strong> with your Check Card whenever possible (at trusted merchants) so that you do not have to use your PIN. You&rsquo;ll also have a signed receipt for your records.&nbsp;</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Check your Provident Credit Union accounts frequently</strong> for fraudulent transactions. <a href="http://www.providentcu.org/index.asp?i=AboutOnlineBanking" target="_top">Account Manager</a> and <a href="http://www.providentcu.org/index.asp?i=TTT" target="_top">Touch Tone Teller</a> are ideal ways to keep tabs on your accounts between statement cycles. Report anything suspicious to us promptly.</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Sign up for <a href="http://www.providentcu.org/index.asp?i=deposit" target="_top">Direct Deposit</a> and use <a href="http://www.providentcu.org/index.asp?i=aboutOnlineBanking&search=BillManager" target="_top">Bill Manager</a></strong> to pay your bills online, safely and securely. Bill Manager is available through Account Manager.</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Use ATMs that are familiar</strong> to you whenever possible. You're more likely to notice something unusual, like the positioning of the camera or something that wasn&rsquo;t there before.</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>At unfamiliar ATMs, take note of what you see.</strong> If anything is affixed close to the screen or keypad, like a camera or even a brochure rack, don't go any further. Report it to the host financial institution.</li> </ul> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/EncryptedMailFAQ.asp" title=""><span>Encrypted E-Mail at Provident</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/DebitCards.asp"><span>Credit/Debit/ATM Card Fraud</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/njZaEHK3kWc" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=HowTheyDidIt

Criminals have more than one way to try to get access to your cards and their numbers. Avoid letting someone you don't even know go on spending sprees with your accounts.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/DebitCards.asp 2007-01-01T12:17:00-08:00 2007-01-01T12:17:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Student-Side.png"> <p><strong>How it works:</strong> With credit cards, a thief might use your card or obtain a new card in your name, perhaps by stealing a pre-approved card application from your mail and having the card sent to a different address. Or he or she might counterfeit your current credit card. One scenario: The crook or an accomplice might work at a retail establishment--perhaps a bar or restaurant--where the card briefly may be out of sight. This person can swipe your card through an electronic <strong>&quot;skimming&quot;</strong> device that captures key account information from the card's magnetic strip.</p> <p>As for ATM cards (which deduct amounts taken at automated teller machines from your checking or savings account) and debit cards (which deduct for cash or payments transacted at ATMs or retail establishments), the perpetrator might steal an existing card or make a new one. He or she also might obtain your personal identification number (PIN)--the security code you use to authorize transactions. </p> <p>One way potential thieves might try to learn your PIN is to watch you type it as they look over your shoulder (even using binoculars, a telescope, or a video camera to try to see it). Another tactic used by criminals is to attach a keystroke recording device to an ATM or checkout register, perhaps at a gas station, convenience store, or other establishment where customers may be in too much of a hurry to notice something suspicious. Yet another way to obtain a PIN is to trick a consumer into divulging the numbers in response to a deceptive call or e-mail (a process commonly known as <strong>&quot;<a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/../SecurityResources/Phishing.asp" target="_self">phishing</a>&quot;</strong>).</p> <p><strong>Best defense:</strong> Check your bank and credit card statements as soon as they arrive and immediately report any unusual or unauthorized transactions. Or better yet, don't wait for the statements, but be more proactive by going online frequently to check your recent transactions for suspicious activity. </p> <p>Remember that criminals steal credit card solicitations, bank statements, and other important papers out of mailboxes, so take precautions with your incoming and outgoing mail (see &quot;<a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/../SecurityResources/10SimpleThings.asp" target="_self">Ten Simple Things You Can Do to Fight Fraud</a>&quot;). Also, contact your financial institution if your credit, debit or ATM card is lost, stolen or stuck inside an ATM. Never give your credit card or debit card number or PIN in response to an unsolicited e-mail or phone call. Never write your PIN on your card or on a piece of paper in your wallet&ndash;memorize the number instead.</p> <p>Avoid ATMs in dark or remote areas or if people seem to be loitering by the machines. Steer clear of anyone offering to &quot;help&quot; you carry out a transaction--it may be a setup. Walk away if it appears that any machines may have been tampered with or if there's a sign directing you to use one of multiple machines--the one that may be rigged with a keystroke recorder or a plastic insert that grabs cards until the criminals come for them.</p> <p>Be very skeptical if a retail employee swipes your credit or debit card through two devices instead of one--the second device could be a skimmer for recording your account information. If you spot a suspicious employee or machine at a retail establishment, report it to a manager. If you still have concerns, report it to your card issuer's fraud department. Always take your credit, debit and ATM receipts with you--never leave them for a crook to find useful account information printed on the receipts.</p> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/HowTheyDidIt.asp" title=""><span>How Did They Access My Account?</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/10SimpleThings.asp"><span>Ten Ways to Fight Fraud</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/-c53Fo7bsXQ" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=cardFraud

Fraud and theft are things we all have to be aware of and vigilant against. Here are 10 things you can do to protect yourself.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/10SimpleThings.asp 2007-01-01T12:16:00-08:00 2007-01-01T12:16:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Student-Side.png"> <ol class="bulletblue"> <li style="margin-top:1em;margin-bottom:1em;"><strong>Protect your Social Security number, credit card and debit card numbers, PINs (personal identification numbers), passwords and other personal information.</strong> A thief can use these details to order checks or credit cards, apply for loans or otherwise commit fraud using your name. &nbsp;<br> &nbsp;<br> Among the preventive measures you can take: <strong>Don't provide financial and other personal information in response to an unsolicited phone call, fax, letter or e-mail</strong>&ndash;it could be from a fraud artist masquerading as a legitimate business person or government official. Be particularly cautious with your Social Security number (SSN). While your employer and financial institutions will need your SSN for tax purposes, you have the right to refuse requests for your SSN from merchants and service providers (who have other ways to identify you). Also, if your state puts SSNs on driver's licenses, find out if you can use another number.<br> &nbsp;<br> Keep bank and credit card statements, tax returns, checks and other sensitive documents in a safe place at home. Shred these documents before discarding them.<br> &nbsp;<br> Also choose PINs and passwords for your credit union and Internet accounts that will be tough for someone else to figure out. Don't use your birth date or home address, for example. (More suggestions for guarding personal information appear elsewhere in this article.)</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Deal only with legitimate, reputable businesses. </strong>Try to do business with companies you already know or that have been recommended. Do your research before giving money or personal information to an unfamiliar merchant (or charity or any other organization). For example, contact your state's Attorney General's office or the <a href="http://www.bbb.org/" target="_blank">Better Business Bureau</a> and ask about complaints, lawsuits or other matters involving a company's reputation. To check out an unfamiliar banking institution, contact the FDIC (see &quot;For General Information from Financial Regulators&quot;).</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Get key details in writing and read them thoroughly before agreeing to anything.</strong> Don't rely on a sales person's oral representations for a significant purchase or investment. Get as much written information as possible, including a contract, specifying cost information and your consumer rights. If a marketer refuses to supply written information or employs high-pressure sales tactics to get you to act fast, take that as your cue to say &quot;goodbye.&quot;</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Beware of &quot;deals&quot; requiring money up-front.</strong> &quot;Congratulations, you've won a free vacation!&quot; &quot;Get rich quick&ndash;at no risk!&quot; &quot;We'll fix your credit problems&ndash;fast.&quot; Do these sound familiar? They're likely to be schemes to trick you into sending money or providing bank account information in exchange for promises of goods or services that will never be delivered. Be skeptical of any offer that's &quot;free&quot; or otherwise hard to believe and that, as a precondition, requires you to pay money (perhaps for a supposed &quot;fee&quot; or &quot;tax&quot;).</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Be extra careful when providing personal information over the telephone or Internet.</strong> Scam artists hide at the other end of the phone line or computer screen. So, don't give bank account information, Social Security numbers or personal data in response to an unsolicited phone call or e-mail (see our article on &quot;<a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/../SecurityResources/Phishing.asp" target="_self">phishing</a>&quot;). Remember that a legitimate company would never ask for passwords or other personal information by e-mail. Before providing credit card or other information to a Web site, confirm that the site is legitimate, not a copycat designed by a crook, by verifying that the Web site's address is an exact match for what appears in literature from the company or some other reliable source. You'd be wise to avoid an online merchant that doesn't list a phone number or physical address, as these are possible signs that the Web site and its owners are fraudulent.</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Safeguard mail going to or from your home.</strong> It could include checks, credit card applications, bank statements and other items of value to a thief. Try to send and receive mail using locked mailboxes or otherwise secure locations. Remove incoming mail from your mailbox as soon as possible. If your mailbox is unlocked and you're going to be away on vacation or some other travel, have your mail held at the post office or picked up by a neighbor. If you're expecting a check, a credit card, or bank account information and it doesn't arrive in a reasonable period, notify the sender. As for outgoing mail containing a check or other personal financial information, put it in a blue Postal Service mailbox, hand it to a mail carrier, or take it to the post office.</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Stop bandits from recycling your trash into cash. </strong>Thieves known as &quot;dumpster divers&quot; pick through garbage looking for credit card applications, monthly bank statements, receipts, &quot;loan checks&quot; (mailed by financial institutions with offers to &quot;write yourself a loan&quot;) and other documents they can use to commit fraud. Before tossing out these items, destroy them, preferably using a &quot;crosscut&quot; shredder that turns paper into confetti. Before selling, donating or disposing of an old personal computer, use special software to completely erase files that contain financial records, tax returns, and other personal information. Thieves can sometimes access personal information from computer disks, even if you've deleted or revised the files on the disk. The easiest solution is to physically break any disk before throwing it away.</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Limit the confidential information in your wallet in case it gets lost or stolen.</strong> Don't carry around more checks, credit cards or other bank items than you need. Consider reducing the number of credit cards you carry by canceling ones you don't use. Keep passports, Social Security cards, and birth certificates in a secure place, not in your wallet. Never keep passwords or PINs on or near your checkbook, credit card, ATM card, or debit card.</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Review your credit card bills and bank statements as soon as they arrive, or go online even more often to review your recent account activity.</strong> If you notice something suspicious, perhaps a credit card purchase you didn't make or an unauthorized withdrawal from your checking account, contact the financial institution immediately. <br> &nbsp;<br> Also make sure you get your statement every month. If no statement arrives, that could be a sign that an identity thief has stolen it from your mailbox, or changed your mailing address for purposes of committing fraud in your name but from another location. Subscribe to Provident's e-Statements in order to avoid vulnerabilities of physical access to your statement.</li> <li style="margin-top:1em;margin-bottom:1em;"><strong>Monitor your credit report for warning signs of fraud.</strong> Most experts say you should check your credit report at least once a year from each of the three major credit bureaus: <a href="http://www.equifax.com" target="_blank" >Equifax</a> (800-685-1111), <a href="http://www.experian.com" target="_blank" >Experian</a> (888-397-3742), and <a href="http://www.transunion.com" target="_blank" >TransUnion</a> (800-888-4213). When you get your report, look for anything suspicious, such as credit cards, loans, or leases that have been wrongfully taken out in your name.<br> &nbsp;<br> You can obtain a free copy of your credit report once a year from each of the three major credit bureaus. You also have the right to learn your credit scores, which are designed to help predict how likely you are to repay a loan or make payments on time. Plus, merchants must notify you if they plan to report negative information about you to a credit bureau. <br> &nbsp;<br> A copy of your credit report is also free in some states and some situations (such as if you believe you're a fraud victim or if you were recently denied credit or a job based on a credit report), but the most you'll pay under current rules is $9. <br> &nbsp;<br> Another option is to pay a service to help you monitor your credit report for possible signs of fraud. But beware of telephone or Internet scams promoting credit monitoring services, &quot;free&quot; credit reports, or credit card or ID theft insurance. These frauds typically use false or misleading statements to get you to send money or divulge personal information, including credit card or bank account numbers (see #1 and #5, above). </li> </ol> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/DebitCards.asp" title=""><span>Credit/Debit/ATM Card Fraud</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/SecurePassword.asp"><span>Up to Date Info / Add Password</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/N6tuSV7XOMU" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=10SimpleThings

You never know when we may need to contact you, so keeping your contact information up to date is important. Also, did you know that you can add a password to your account to use over the phone?

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/SecurePassword.asp 2007-01-01T12:15:00-08:00 2007-01-01T12:15:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Student-Side.png"> <p>Provident Credit Union receives hundreds of pieces of returned mail due to out-of-date information. If you&rsquo;ve recently changed your address, work or home phone number, or e-mail address, please be sure to notify us immediately so that we are able to get in touch with you. You never know when we may need to reach you.</p> <h3>Choose Your Own Secure Password</h3> <p>To protect your account information even further, we recommend that you set up a password that will serve as identification when you request account information or transactions through our Call Center or at one of our branches. At one time, Social Security Numbers and mother&rsquo;s maiden names were commonly used. But these days, using these as a form of identification is something that people are concerned about, even with their financial institution. Creating a unique password is a safe and secure alternative. To select your password, give us a call at (650) 508-0300 or (800) 632-4600, send a <a href="http://www.providentcu.org/index.asp?i=signOn" target="_top" >secure e-mail</a> message through Account Manager with your requested password, or visit your local <a href="http://www.providentcu.org/index.asp?i=branches" target="_top">community branch</a>. We&rsquo;ll have you set up in no time.</p> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/10SimpleThings.asp" title=""><span>Ten Ways to Fight Fraud</span></A></span><i>&nbsp;</i><span class="next"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/IDTheft.asp"><span>Go Online to Avoid ID Theft</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/3sEXv7U7YKM" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=passwordPhone

Is fear of identity theft keeping you from using online services, such as online banking? Learn how frequent use of Account Manager and e-Statements actually reduces your risk.

http://www.providentcu.org/+AccessAccounts/SecurityEtc/SecurityResources/IDTheft.asp 2007-01-01T12:14:00-08:00 2007-01-01T12:14:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/Student-Side.png"> <p>If concern over security breaches has kept you from utilizing <a href="http://www.providentcu.org/index.asp?i=AboutOnlineBanking" target="_top">Account Manager and e-Statements</a>, our free online account services, you should know that electronic access and delivery of your account information is much more secure than receiving it in the mail.</p> <p>Hard copy account statements are too easily intercepted. Between the time they've been printed to the time they reach your mailbox, many human hands have handled them, increasing the risk of your account information being compromised.</p> <p>In fact, the majority of identity theft happens offline, such as by people stealing your mail, rummaging through your trash, or stealing your wallet or purse. With Account Manager, you are required to enter a PIN (Personal Identification Number) that is only known to you, and you can check your account information regularly to ensure nothing is amiss. With e-Statements, we notify you by e-mail when your e-Statement is ready and you access it by signing on to Account Manager. With Provident's firewalls and the high level of encryption, your account information is secure. It's that simple and that safe.</p> <p>Minimize the risk of identity theft--why not make this spring the time you give <a href="http://www.providentcu.org/index.asp?i=AboutOnlineBanking" target="_top">Account Manager and e-Statements</a> a try. If you are a first-time user of online banking services or <a href="http://www.providentcu.org/index.asp?i=TTT" target="_top">Touch Tone Teller</a>, contact our Call Center at (650) 508-0300 or (800) 632-4600 during business hours to request a PIN. You'll be set to go in just minutes.</p> <p>&nbsp;</p> <div id="inFrameBottomNav"> <span class="prev"><a href="http://www.providentcu.org/AFrames/AccessAccounts/SecurityEtc/SecurityResources/SecurePassword.asp" title=""><span>Up to Date Info / Add Password</span></A></span><i>&nbsp;</i><span class="next"><A href="http://www.providentcu.org/index.asp?i=security" title="" rel="Contents"><span>Security Issues Index</span></A></span><div><a href="http://www.providentcu.org/index.asp?i=security" target="_self" rel="Contents">Security Issues Index</a></div> </div> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/KCo-SuEZ7Sw" height="1" width="1"/> http://www.providentcu.org/index.asp?i=security&search=IDTheftVsOnline

news.cnet.com: Worms, Trojans, and SMS attacks are risks for mobile devices like the iPhone, but the biggest practical threat to users is losing the device. Get your questions answered about protecting yourself in this age of mobile phone computing.

http://news.cnet.com/8301-27080_3-10424759-245.html 2007-01-01T12:13:00-08:00 2007-01-01T12:13:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/External_Link-Side.png"><b>news.cnet.com: </b>Worms, Trojans, and SMS attacks are risks for mobile devices like the iPhone, but the biggest practical threat to users is losing the device. Get your questions answered about protecting yourself in this age of mobile phone computing. <p>&nbsp;</p> <p><a href="http://www.providentcu.org/index.asp?i=security">Security Issues Index</a></p> <p>&nbsp;</p> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/TNvUYhYia5M" height="1" width="1"/> http://news.cnet.com/8301-27080_3-10424759-245.html

www.staysafeonline.info: The go-to resource for cyber security awareness and education. A public-private partnership, NCSA provides tools and resources to empower people to stay safe online.

http://www.staysafeonline.info/ 2007-01-01T12:12:00-08:00 2007-01-01T12:12:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/External_Link-Side.png"><b>www.staysafeonline.info: </b>The go-to resource for cyber security awareness and education. A public-private partnership, NCSA provides tools and resources to empower people to stay safe online. <p>&nbsp;</p> <p><a href="http://www.providentcu.org/index.asp?i=security">Security Issues Index</a></p> <p>&nbsp;</p> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/p5Jmr974vx0" height="1" width="1"/> http://www.staysafeonline.info/

onguardonline.gov: OnGuardOnline.gov provides practical tips from the federal government and the technology industry to help you be on guard against Internet fraud, secure your computer, and protect your personal information.

http://onguardonline.gov/ 2007-01-01T12:11:00-08:00 2007-01-01T12:11:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/External_Link-Side.png"><b>onguardonline.gov: </b>OnGuardOnline.gov provides practical tips from the federal government and the technology industry to help you be on guard against Internet fraud, secure your computer, and protect your personal information. <p>&nbsp;</p> <p><a href="http://www.providentcu.org/index.asp?i=security">Security Issues Index</a></p> <p>&nbsp;</p> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/zy_hqHybirU" height="1" width="1"/> http://onguardonline.gov/

www.snopes.com: It's a con that's been separating people from their cash since the 1920s, but its gotten much worse in the age of e-mail. Learn about this prevalent crime so that you do not become its next victim.

http://www.snopes.com/crime/fraud/nigeria.asp 2007-01-01T12:10:00-08:00 2007-01-01T12:10:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/External_Link-Side.png"><b>www.snopes.com: </b>It's a con that's been separating people from their cash since the 1920s, but its gotten much worse in the age of e-mail. Learn about this prevalent crime so that you do not become its next victim. <p>&nbsp;</p> <p><a href="http://www.providentcu.org/index.asp?i=security">Security Issues Index</a></p> <p>&nbsp;</p> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/xmES1wsUOAE" height="1" width="1"/> http://www.snopes.com/crime/fraud/nigeria.asp

www.ftc.gov: A list of Articles and Microsites with information you should know about Spam (unsolicited and unwanted e-mail), what you should do to avoid it, what to when you get it, and why this is important.

http://www.ftc.gov/bcp/menus/consumer/tech/spam.shtm 2007-01-01T12:09:00-08:00 2007-01-01T12:09:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/External_Link-Side.png"><b>www.ftc.gov: </b>A list of Articles and Microsites with information you should know about Spam (unsolicited and unwanted e-mail), what you should do to avoid it, what to when you get it, and why this is important. <p>&nbsp;</p> <p><a href="http://www.providentcu.org/index.asp?i=security">Security Issues Index</a></p> <p>&nbsp;</p> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/TgO1Uvz_eFU" height="1" width="1"/> http://www.ftc.gov/bcp/menus/consumer/tech/spam.shtm

www.ftc.gov: Don't be conned! Some e-mail looks legitimate, but is just there to get you to type in enough info for other people to steal your identity or spend your money, and ruin your credit.

http://www.ftc.gov/bcp/edu/pubs/consumer/alerts/alt127.shtm 2007-01-01T12:08:00-08:00 2007-01-01T12:08:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/External_Link-Side.png"><b>www.ftc.gov: </b>Don't be conned! Some e-mail looks legitimate, but is just there to get you to type in enough info for other people to steal your identity or spend your money, and ruin your credit. <p>&nbsp;</p> <p><a href="http://www.providentcu.org/index.asp?i=security">Security Issues Index</a></p> <p>&nbsp;</p> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/amiGTq1zgus" height="1" width="1"/> http://www.ftc.gov/bcp/edu/pubs/consumer/alerts/alt127.shtm

www.ftc.gov: Avoid being a victim of identity theft and learn what to do if you are victimized; visit this FTC Web site.

http://www.ftc.gov/bcp/edu/microsites/idtheft/consumers/index.html 2007-01-01T12:07:00-08:00 2007-01-01T12:07:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/External_Link-Side.png"><b>www.ftc.gov: </b>Avoid being a victim of identity theft and learn what to do if you are victimized; visit this FTC Web site. <p>&nbsp;</p> <p><a href="http://www.providentcu.org/index.asp?i=security">Security Issues Index</a></p> <p>&nbsp;</p> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/MZD8C_33sy4" height="1" width="1"/> http://www.ftc.gov/bcp/edu/microsites/idtheft/consumers/index.html

www.ustreas.gov: In spite of what that e-mail might say, federal financial agencies do not communicate with consumers by e-mail requesting important personal information such as your name, account numbers, date of birth, or social security number.

http://www.ustreas.gov/press/releases/js1130.htm 2007-01-01T12:06:00-08:00 2007-01-01T12:06:00-08:00 <img style="float:right; display:block;margin-left:1em;" src="http://providentcu.org/NewGraphics/NewerGraphics/categories_HomePage/w/External_Link-Side.png"><b>www.ustreas.gov: </b>In spite of what that e-mail might say, federal financial agencies do not communicate with consumers by e-mail requesting important personal information such as your name, account numbers, date of birth, or social security number. <p>&nbsp;</p> <p><a href="http://www.providentcu.org/index.asp?i=security">Security Issues Index</a></p> <p>&nbsp;</p> <img src="http://feeds.feedburner.com/~r/pcu-security/~4/FgLUxZy43mI" height="1" width="1"/> http://www.ustreas.gov/press/releases/js1130.htm