Online Banking and Mobile Banking use multifactor authentication to verify your identity at login.

Our Online and Mobile Banking platforms do not store any information in the user’s device or the web browser cache. All data is securely transmitted to servers using Transport Layer Security (TLS).

No. The answers to challenge questions can be discovered or guessed easily. Alternatively, we use one-time passcodes (OTPs) sent out via SMS or phone calls.

It’s a good idea to be able to wipe your mobile device remotely in case it gets lost or stolen. This will prevent unauthorized access to your confidential information. You can Install and configure an app that will let you remotely locate and wipe your mobile device (’Find My iPhone’ for iOS devices is an example of such software).

In order to minimize risk, our mobile solutions do not allow risky activities like changing one’s profile information.

No. Once a mobile device or tablet has been authenticated, one will still need their username and password to log in to Mobile Banking.

Going paperless will reduce the chance of mail fraud. You can sign up for paperless statements by logging in to Online Banking.

In order to protect yourself from fraudulent or malicious apps, only download apps from trusted sources such as the Apple App Store, Google Play, and Amazon Stores.

Yes; you can add your Spectrum Credit Union debit or credit card into mobile payment apps that use tokenization – like Apple Pay^®, Android Pay™ or Samsung Pay™. Using mobile payment technology may help to protect your card number from fraud.

Whether on desktop or mobile, there are many things you can do to protect the information on your electronic devices:

• Be sure to log out of your account on Online Banking and Mobile Banking when your transactions are complete.
• Make sure ’Discoverable’ mode is disabled on Bluetooth-capable devices. This prevents your phone from being detected by others scanning for Bluetooth devices in the area.
• You can keep keep your internet browser up-to-date with auto updates, or you can update manually:

1. Internet Explorer: Go to Tools, click Windows Update, and follow instructions to download the latest patches.
2. Firefox: If you have an older version, click Check for Updates in the Help menu. For newer versions, go to Options, and the Update tab allows you to select how you’d like to check for updates.
3. Chrome: Click the Chrome menu, and select About Google Chrome. The current version number is the series of numbers beneath the Google Chrome heading. Chrome will check for updates when you’re on this page. Click Relaunch to apply an available update.
4. Safari: Keep Safari updated by keeping your software system updated.

• You can keep your computer system and anti-virus software up-to-date with auto updates, or you can update manually:

1. Windows: Go to Tools in your browser. Click Windows Update, and follow instructions to download the latest patches.
2. Mac: Choose Software Update from the Apple menu.

• Disconnect from the internet, or shut down your computer when you are not using it.
• Limit the amount of personal information you store on your computer, especially on your laptop computer.
• Run anti-spyware software regularly to check for and remove any spyware from your devices. 
• Use anti-spam filters to prevent malicious emails.
• Install a personal firewall, or use your computer’s firewall, to help prevent unauthorized access.
• If you end up on a suspicious website, do not follow any instructions on them, and navigate away as soon as possible. For Internet Explorer (IE) users, you can adjust your browser security setting to Medium, which makes it more difficult for some malware to attack (select Internet Options from the Tools menu, then choose the Security tab).
• Browse safely — avoid using Online and Mobile Banking on public WiFi networks. 
• Educate yourself on internet fraud with the Federal Trade Commission’s Identity Theft section.
• Monitor your credit report regularly, and conduct an in-depth review once per year.
• Before entering confidential information into a website, check to see that there’s a locked padlock symbol in the url bar.
• Make sure your passwords are strong by following these tips: 

1. Change your Online Banking password regularly.
2. Misspell a word or change a letter to a symbol.
3. Do not keep a list of passwords near your computer. 
4. If you believe your password has been compromised, change it immediately. 
5. Never share your passwords with other people.
6. Avoid using the same password on multiple sites.

• Email

1. Most emails are not encrypted or secure, which means they are not safe from hackers. Be sure to use our secure email options in Online Banking and Mobile Banking if you need to email confidential personal information.
2. When using email:
   • Do not reply to emails that ask for or request you update: passwords, Personal Identification Number (PIN), credit or debit card numbers, Social Security number, or other personal information. 
   • Delete spam (do not unsubscribe from it or click on any other links).
   • Avoid get-rich-quick offers.
   • If you do not recognize the sender of an email, do not open any attachments and avoid opening the email if possible.
   • Spectrum Credit Union will never send emails requesting personal information.

• Fraud - If you think someone is trying to get your personal information, or if you are worried you gave out too much information:

1. Report the incident to Spectrum Credit Union immediately by calling 800-782-8782 (those outside the U.S. can call 510-251-6000).
2. Change your passwords.
3. Monitor your account online to verify account transactions are valid.

• Balance your account(s) at least once per month. Report any discrepancies in a timely manner.

 

An unauthorized user may attempt to infiltrate or exploit online or mobile systems through: 

• Identity theft — A successful social engineering attack in which a person deliberately assumes the identity of another person for financial gain.
• Phishing — a form of social engineering designed to gain access or personal information through impersonating a legitimate organization or individual via email, instant message, or a website.
• Pharming — the exploitation of vulnerabilities in the DNS servers that allows a hacker to acquire the Domain Name (e.g. “mycompany.com”) for a site and to redirect traffic from that company’s legitimate site to the hacker’s website.
• Viruses / Trojans — this malicious software aims to intercept or take control of a computer’s operation without the user’s consent. Viruses can be used to harm the computer, destroy data, and/or capture personal information and transmit it back to the hacker’s website.
• Spyware / Keystroke loggers — this malicious software is used for capturing personal information without the user’s knowledge. Although similar to viruses and trojans, spyware and keystroke loggers are not usually self-replicating.