Security Information Archive

Holiday Tips for Using Gift Cards

Tuesday, December 14th, 2010

Gift cards remain one of the most popular items for the holiday season, and Americans are expected to spend billions on gift cards again this year.  First Savings and the Independent Community Bankers of America (ICBA) offer these tips to help consumers buy and use branded gift cards—those cards that carry the Visa or MasterCard logo, as well as other major general purpose gift card brands that are accepted by many merchants.

“Now, more than ever, people really appreciate receiving gifts they can use,” said Todd Hurley, First Savings Executive Vice President and Chief Retail Officer.  “Branded gift cards are a thoughtful and practical option because they are being accepted by an increasing number of merchants.  But with these cards—as with any credit or debit card—we want our customers to have the information they need to use them wisely and avoid fraud.”

Branded gift cards look like a credit card, but are limited by the dollar amount loaded on the card by the purchaser and should be treated as cash. They differ from retail gift cards, which are issued by and accepted solely at the issuing retailer.

First Savings reminds consumers how important it is to know the facts when buying or using branded gift cards. Some tips include:

  • Know the card’s terms and conditions, as they may vary. For example, there may be fees for dormancy, transaction, inactivity, ATM, balance inquiry or reloading. These fees and other terms and conditions are usually printed on the card.
  • Some cards have an expiration date that may appear on the card itself, on the card’s sleeve, at the retailer’s or on the issuer’s website.
    • Keep the card’s account number and original packaging, which includes the customer service number, in a safe place.  You may need this information should your card become lost or stolen or there is a need to obtain a replacement card.
    • Sign the card in the space provided.
    • Whenever possible, register your card online.  This will help if you have any service issues.       
    • Before using the card, know your balance. Most issuers offer toll-free voice response systems where you can check your balance. Funds are immediately deducted from the available card balance when you make a purchase.
    • Most major retailers accept split payments.  You can pay with the gift card and pay the balance of a purchase using another form of payment. But you have to tell the merchant the exact amount you want deducted from your gift card.
    • It’s a good idea to keep gift cards after the card balance has been used. You may need to show the card should you make a return or an exchange.
    • When using a gift card at service locations, such as restaurants, be sure you have the available balance to cover incidentals and tips.
    • When using a gift card at a gas pump or any automated self-service terminal, be sure there are enough funds to cover the entire purchase. Even if the card is short by only a few dollars, the transaction may not be approved.

 

“Community bankers work throughout the year to offer our customers the products and services they want and the information they need to safeguard their finances.  We want to be especially sure during the holiday season that our customers who receive a branded gift card know how to protect it and themselves and enjoy the full value of their gift,” Hurley said.

For more information, visit www.icba.org.  

About ICBA

The Independent Community Bankers of America, the nation’s voice for community banks, represents nearly 5,000 community banks of all sizes and charter types throughout the United States and is dedicated exclusively to representing the interests of the community banking industry and the communities and customers we serve. For more information, visit www.icba.org.

NATIONAL PROTECT YOUR IDENTITY WEEK

Monday, October 18th, 2010

In recognition of National Protect Your Identity week on Oct. 17-22, First Savings is urging customers to pay particular attention to identity theft prevention.

            “First Savings works diligently to protect our customers from identity theft,” said Fred Schea, President and CEO of First Savings. “We use a combination of safeguards to protect customer information, such as employee training, strict privacy policies, and rigorous security standards. But we can’t do it alone. Customers can help us protect them by following a few simple precautions.”

            “We  encourage customers to follow some simple steps to avoid becoming a victim:

  • Shred or tear up statements and other personal information. Criminals may be able to get access to your accounts and personal information by “dumpster diving” (retrieving canceled checks, deposit receipts or bank statements from dumpsters or trash bins). Better yet, utilize online bill pay and electronic statements to eliminate having personal information sent through the mail.
  • Keep an eye out for any missing mail, particularly account statements and bills that do not arrive when expected.
  • Review your monthly accounts regularly for any unauthorized charges through the Internet, phone or ATM statements.
  • Order free copies of your credit report once a year from each of the credit reporting agencies to ensure accuracy. Go to the Federal Trade Commission’s authorized web site www.annualcreditreport.com for your free credit report.
  • Choose to do business with companies you know are reputable, particularly online. When conducting business online, use firewalls, anti-spyware and anti-virus software and do not respond to unsolicited requests for personal information.
  • Protect your PINs and passwords. Use a combination of letters and numbers for your passwords and change them periodically.
  • Report any suspected fraud immediately to your bank and the fraud units of the three credit reporting agencies.”

 

            A special website is available that offers consumer tips, steps for victims and a state-by-state list of Protect Your Identity Week events. There’s also an online ID quiz that can help determine how prone one may be to identity theft. Click here to visit the site: http://www.protectyouridnow.org.

Special Alert from FDIC

Thursday, September 9th, 2010

Suspicious telephone calls claiming to be from FDIC employees are being reported. These calls appear to be illegal schemes to steal money or collect sensitive personal information, such as bank account numbers. For the complete alert, visit: http://www.fdic.gov/news/news/SpecialAlert/2010/sa10131.html

Don’t Be an On-line Victim: How to Guard Against Internet Thieves and Electronic Scams

Monday, May 10th, 2010

Identity theft continues to be one of the fastest growing crimes in the United States, and has ranked as one of the top consumer concerns for the past several years. The Federal Deposit Insurance Corporation (FDIC) has produced a multimedia presentation to help consumers protect themselves from identity theft. The presentation provides information on steps consumers should take to secure their computer and protect themselves from identity theft, as well as actions consumers should take if they become a victim of identity theft. This presentation is hosted by Vodium.

Don’t Be an On-line Victim: How to Guard Against Internet Thieves and Electronic Scams.
(FDIC YouTube Channel)

Fraudsters Take Aim at Mobile Banking

Thursday, February 4th, 2010

Fraudsters Take Aim At Mobile Banking

Originally Posted on www.bankinfosecurity.com

New Phishing Schemes Target Mobile Customers with Bogus Apps

Symptomatic of a new fraud trend targeting mobile banking, at least two banking institutions have posted messages on their websites, alerting members to be wary of a bogus application distributed on mobile phone platforms.

Bayport Credit Union of Newport News, VA, and First Technology Credit Union of Portland, OR, warned members about a mobile banking application that had appeared on the Android Marketplace, part of the Android mobile phone platform. Android is a subsidiary of Google. More than 50 fraudulent banking apps began appearing in the Android Marketplace in mid-December, industry experts say. The apps didn’t contain malware, but instead attempted to get users to enter their passwords, account numbers or other personal information.

Google says it has removed the malicious applications, which targeted customers of Barclays Bank, Chase, Wells Fargo, Bank of America, Wachovia and Deutsche Bank, among others.

Todd Lindemann, AVP of Electronic and Card Services at Mountain America Credit Union, Salt Lake City, UT, says that the malicious applications first came to his attention when MShift, a vendor providing mobile phone banking services for the credit union, investigated reports of mobile phone banking applications being hosted on an application site for Droid phones. What was more troubling to Lindemann was that his credit union had just launched its own iPhone application in November. The alert that MShift sent to its customers in December states, “This phishing attack has been launched from the Android Marketplace and is impacting over 50 financial institutions worldwide, including those that currently do not offer mobile banking solutions, much less an Android download.”

MShift advised its clients to inform their customers of this potential phishing threat and “direct any of your customers that have downloaded this application from the Android Marketplace that the Android downloadable provided by Droid09 is NOT an authorized or legitimate downloadable application of your institution.”

This attempt to grab bank account numbers and passwords by phishers highlights the security concerns of many institutions that both offer mobile banking to customers and rely on mobile phones, especially smart phones such as the iPhone and the Droid, to be connected to their staff.

Best Practices for Securing Mobile

Beyond phishing concerns, there are some best practices that cell phone users should keep in mind when using their phone, whether for business or for personal use. Simon Bransfield-Garth, CEO of Cellcrypt, a cell phone encryption company based in London, offers these tips for institutions and their customers:

Make No Assumptions- Never assume that voice calls are confidential (like fax or email), especially when calling internationally where some countries’ phone operators have no encryption security in place at all. Check your signal, calls on 3G are more secure than 2G but often falls back to 2G when 3G is unavailable.

Ensure Physical Security- Keep your phone safe and do not leave it lying around. Skilled attackers can take just a few moments to install a malicious program, compromise the security of the SIM card or install a special battery with a bug in it, all of which can later be used to help intercept calls.

Protect PIN- Use and protect your phone and voicemail PINs in the same way as your bankcard PIN. Never leave confidential messages in voicemails or send confidential texts. Texts in particular are easy to read on the phone and mobile phone voicemails can often be accessed from any phone with the PIN.s

Be Mindful of Malware- Be vigilant to prevent malicious software on your phone. Be wary of texts, system messages or events on your phone that you did not ask for, initiate or expect. Turn off Bluetooth if you are not using it.

Take Precautions- Consider installing antivirus/antimalware software. And if you strongly suspect your calls are being listened to, then turn off the phone when you don’t need it and remove the battery as an extreme precaution. Also, use voice call encryption software on your phone to secure your sensitive calls that works worldwide and is as easy to use as making a normal phone call.

Bransfield-Garth says financial institutions are no different to any other organization when it comes to protecting valuable phone calls, and this kind of call interception could also potentially extend to the calls made to the institution by customers inquiring about their accounts. Imagine a high-value customer calls into transfer or wire funds, and the call is intercepted. Who would be responsible for the theft of that customer’s money if a hacker got an account number, password or PIN? “The responsibility angle is very important, as theft of voice call data is not explicitly covered by regulatory, compliance or best practices that already exist for ‘data’ (which means non-voice data),” Bransfield-Garth says.

Linda McGlasson, Managing Editor
January 18, 2010