Online Banking Security: Everyday, everywhere!

How We Protect You

Keeping your online financial and personal information secure and confidential remains one of our top priorities.

We ensure your privacy and security by offering technology and services designed by the brightest minds in the online banking industry.

• Encryption: The privacy of communications between you (your browser) and our servers is ensured by encryption. Encryption scrambles messages exchanged between your browser and our online banking server.
• Password Complexity: It is important to verify that only authorized persons log into online banking. This is achieved by verifying your password. When you submit your password, it is compared with the password we have stored in our secure data center.

We allow you to enter your password incorrectly a limited number of times; too many incorrect passwords will result in the locking of your online banking account until you call us to reinitialize the account. We monitor and record "bad-login" attempts to detect any suspicious activity (i.e. someone trying to guess your password.)

You play a crucial role in preventing others from logging on to your account. Never use easy-to-guess passwords. Examples:

• Birth dates
• First names
• Pet names
• Addresses
• Phone numbers
• Social security numbers

Never reveal your password to another person. You should periodically change your password in the User Option section of Internet Banking.

Secure Architecture

The computers storing your actual account information are not linked directly to the Internet.

• Transactions initiated through the Internet are received by online banking Web servers.
• These servers route your transaction through firewall servers.
• Firewall servers act as a traffic cop between segments of our online banking network used to store information and the public Internet.
• This configuration isolates the publicly accessible Web servers from data stored on our online banking servers and ensures only authorized requests are processed.

Various access control mechanisms, including intrusion detection and anti-virus, monitor for and protect our systems from potential malicious activity. Additionally, our online banking servers are fault-tolerant, and provide for uninterruptible access, even in the event of various types of failures.

 

Validating your Identity Screen

Should you logon to your computer and see a screen with the following message, "Please validate your identity. Sorry, we don't recognize the computer you are using," you are seeing this message because you are using Enhanced Login Security for extra online security protection, and we don't recognize this computer as one you have added.

In order to gain access to the system, please answer each question below. If this computer is one you use frequently, avoid this page in the future by adding extra security protection to this computer. This can be done by clicking the "User Options" link in Internet banking and selecting "Enhanced Login Security."

Sample questions:

• What are the colors of your eyes?
• Where do you work?
• What is your favorite color?

Once the answers are entered, please click the "Continue" button. If you would like to avoid this page in the future you will need to enroll this computer for Enhanced Login Security. This can be done by going to Users Options and then click on the Enhanced Login Security Options page and selecting the Enroll this computer option.

 

Questions & Answers

What is Multifactor Authentication?

Multifactor Authentication is superior security technology that protects your accounts from unauthorized access by strengthening the security of your online banking session. When you login to your internet banking session you can have peace of mind. Powered by the best-of-breed technology, Multifactor Authentication protects against online fraud by providing an additional authentication factor beyond your username and password used today.

Multifactor Authentication will:

• Defend against identity theft and fraud
• Provide added security from any computer, wherever you are
• Make easy for you with one-time sign-up and convenient

When will I know that Multifactor Authentication/Enhanced Login Security is set for my accounts?

Soon you will be prompted to sign up when you login to your online banking session. Sign up once at your computer, set up your challenge questions, and you're all set.

How will it affect my online banking experience?

One you set up your account, the next time you login it will be business as usual. The rest of your online banking experience will remain exactly the same.

Can I access my account from other computers at my home, my office, or on the road?

Multifactor Authentication identifies you as the true owner of your accounts by recognizing not only your password but your computer as well. If we don’t recognize your computer you’ve logged in from a public computer or one you haven’t used before, for example, we’ll ask you challenge questions as an additional line of defense to prevent unauthorized access. With Enhanced Login Security, you’ll be protected from whatever computer you’re using, whether you’re at home or on the go.

For more information on Multifactor Authentication/Enhanced Login Security please contact a branch representative today.

 

What Is 'Phishing'?

Most likely you've seen them: e-mail messages asking you to verify personal information over the Internet.

The scam, popularly called 'phishing,' involves the use of replicas of existing Web pages to try and deceive you into entering personal, financial, or password data. Often suspects use urgency or scare tactics, such as threats to close accounts.

We here at The Bank of Fincastle will never ask you via e-mail to verify account information. We will never use e-mail to threaten account closure. Please know this, as one defense against phishing. Other safeguards to help protect you from phishing scams:

• Be suspicious of any e-mail messages that claim to be from us that use an urgent or scare-tactic alone.
• Do not respond to e-mail messages asking you to verify personal information.
• Delete suspicious e-mail messages without opening them. If you do open a suspicious e-mail message, do not open any attachments or click any links.
• Install and regularly update virus protection software.
• Keep your computer operating system and Web browser current.

If you see a suspicious looking e-mail message claiming to be from The Bank of Fincastle please let us know. We continually monitor such reports and act on them promptly. Additionally, also consider contacting the FBI's Internet Fraud Complaint Center at www.ic3.gov.