Security Alert: E-mail Scams May Prompt Fraud Attempt

Please be aware that individuals have reported receiving e-mails from the FDIC or Digital Insight (our Online Banking provider) coming from either "FDIC", "CustomerCare" or "Administration". The e-mail is a phishing attempt, and is designed to tricking the recipient into clicking a link in the e-mail for the purpose of acquiring sensitive data, such as passwords or financial information. If you receive such an e-mail, do not provide any information. Please do not follow any of the instructions in the message. Please call the Online Banking Center (weekdays between 8:00 am and 4:30 pm) if you have any questions.

Please be aware that individuals have reported receiving an e-mail from Central Bank, with the website address of "centralbank.net", which warns of recent "irregular activity on your debit/credit card", and mentions that your online banking has been locked. The e-mail may contain a phone number to call to reactivate your debit card. The number connects to a automated system, asking for your card number, PIN and expiration date. You should not follow the instructions provided.

If you receive such an e-mail, do not provide any information. If you have any questions, please contact Customer Service
at 617-629-4353.

Computer Virus May Prompt Online Fraud Attempt

Please be aware that a computer virus may try to infect your computer. This virus may cause a fraudulent screen to appear in websites you browse, such as your online Bill Pay window. The screen posts messages that attempt to trick you into providing sensitive information such as your account numbers and passwords -- information that the Bill Pay system already knows, and you should not provide again.

If you are using Online Bill Pay and a new screen, which appears out of context, asks you to provide sensitive information, do not provide this information. Please call the Online Banking Center at 617-629-4351 or 617-629-4383 (weekdays between 8:00 AM and 4:30 PM) if you have any questions.

Important Debit MasterCard® Alert - January 2009

Important Debit MasterCard® Alert - January 2007

PROTECT YOUR PRIVACY

You can take several steps to protect yourself against online fraud. Learn about the various types of fraud, how to report fraudulent sites, how to be protect yourself online, and about Enhanced Login Security for Online Banking.

PASSWORD SECURITY

When choosing a password for a website, such as Online Banking, it is important to choose a strong password - one that you will remember, but can not be easily guessed by someone else.

Password tips:

Choose a strong password that includes a combination of both uppercase and lowercase letters, numbers, and special characters such as # ! § ¤ @ * & %.
Choose a longer password. A 12-character password is more difficult to guess than a 4-character one.
Do not use your name or date of birth as your password.
Change your password occasionally.
Never share your password - even with friends or family.
If you're using a shared computer, such as a computer in a school or library, whenever you log in to a website, make sure there is not a checkmark next to "Remember me on this computer" or "Remember my password".

PHISHING

Don't get hooked by scammers out phishing.

Internet scammers casting about for people's financial information have a new way to lure unsuspecting victims: They go "phishing."

Phishing, also called "carding," is a high-tech scam that uses spam to deceive consumers into disclosing their credit card numbers, bank account information, Social Security numbers, passwords, and other sensitive information.

If you receive an e-mail which appears to be from Central Bank, which you believe may be suspect, please contact the Online Banking Center before responding.

Central Bank will never ask you to send personal or financial information by, in response to, or via a link in an email. Please do not disclose your social security number, your account numbers, your access codes, or personal identification number (PIN) to your accounts to anyone with whom you are not familiar. If you suspect someone had made an unauthorized transaction on your Central Bank accounts or if you believe that any information about you is not accurate, please call us at 877-628-4440.

How "Phishing" Works

According to the Federal Trade Commission (FTC), the e-mails pretend to be from businesses the potential victims deal with - for example, their Internet service provider (ISP), online payment service or bank - or even from government agencies (including the FDIC). The perpetrators tell recipients that they need to "update" or "validate" their billing information to keep their accounts active, and direct them to a "look-alike" website of the legitimate business, further tricking consumers into thinking they are responding to a bona fide request. Unknowingly, consumers submit their financial information - not to the businesses - but the scammers, who use it to order goods and services and obtain credit.

Be alert

To avoid getting caught by one of these scams, the Federal Trade Commission offers this guidance:

If you get an e-mail that warns you, with little or no notice, that an account of yours will be shut down unless you reconfirm your billing information, do not reply or click on the link in the e-mail. Instead, contact the company cited in the e-mail using a telephone number or website address you know to be genuine.
Avoid e-mailing personal and financial information. Before submitting financial information through a website, look for the "lock" icon on the browser's status bar. It signals that your information is secure during transmission.
Review credit card and bank account statements as soon as you receive them to determine whether there are any unauthorized charges. If your statement is late by more than a couple of days, call your credit card company or bank to confirm your billing address and account balances.
Report suspicious activity to the FTC. Send the actual spam to spam@uce.gov. If you believe you've been scammed, file your complaint at www.ftc.gov, and then visit the FTC's Identity Theft website (www.ftc.gov/idtheft/) to learn how to minimize your risk of damage from identity theft.
Visit the FDIC's consumer alerts website at www.fdic.gov/consumers/consumer/alerts/index.html.
For additional information about phishing, and how to avoid phishing scams, you may check the Anti-Phishing Working Group's website at www.apwg.org/resources.htm#consumer
What to do if you've given out your personal financial information

Visit the US Department of Justice website to learn more about identity theft and identity fraud, how to avoid becoming a victim, and steps to take if you have become an identity theft or identity fraud victim.

Visit fakechecks.org to learn about different types of fake check scams and how you can avoid becoming a victim.

Visit www.federalreserve.gov/pubs/checkingaccount/default.htm to view the Federal Reserve's 5 tips for protecting your checking account.

Visit www.ftc.gov/spam to learn other ways to avoid e-mail scams and deal with deceptive spam.

Visit the FTC's Identity Theft site to learn more about identity theft and how you may help protect yourself.

Visit http://edgecastcdn.net/00003F/anon.vodium/fdic/identitytheft/index.html to view a presentation produced by the Federal Deposit Insurance Corporation (FDIC) to help protect yourself from electronic scams and identity theft.
The Adobe Flash Player is required to view this presentation. The latest version of Adobe Flash Player can be downloaded at http://get.adobe.com/flashplayer/.
Installation questions or troubleshooting help can be found at www.adobe.com/support/flash/.

Visit OnGuardOnline.gov - this site provides practical tips from the federal government and the technology industry to help you be on guard against Internet fraud, secure your computer, and protect your personal information.

Sub Navigation

Main Navigation