Fraud & Security Center

We encourage our members to use strong passwords. Digital banking passwords must meet the following requirements:

• Must be between 12 and 20 characters in length
• Must contain at least one letter, number, and special character
• Must contain both uppercase and lowercase letters
• Cannot contain the following special characters: . @ : ~ (Period, At, Colon & Tilde)
• Cannot be one of your last 3 passwords

Passwords should never be personal names, birth dates, or words found in a dictionary. Passwords should be kept secret and they should also be changed occasionally. The same password should not be used for multiple sites.

Be mindful that your email address is the most important digital account you have since it often is used as a way to reset passwords for all sorts of other accounts. It is very important to have a strong & unique password in place on your email account to prevent fraudsters from resetting your other passwords that have access to your email account.

Card Security

Manage your cards through digital banking and temporarily disable them if your card(s) have been lost or stolen. Then call 1-877-599-5617 to report your card as lost or stolen.

Add a Travel Notice

Contact us via digital banking if you are going to be traveling to help prevent declined transactions.

Visa Fraud Prevention Services

In the case of unusual activity on your debit or credit card, you will receive a text or phone call from Visa Fraud Prevention Services to verify the transaction(s). Please be aware that they will never ask for your entire card number, expiration date, or CVV (security) code. They may ask:

• Your zip code
• The last four digits of your Social Security Number
• The phone number of the primary member
• Your date of birth
• The amount of your last transaction or payment

• Don’t reveal personal information via email, text message, or social media messaging. Phishing scams are becoming more sophisticated and can be masked to look like they are coming from a trusted sender or a legitimate company. Be cautious of requests for passwords, social security numbers, or financial information, regardless of the platform. Always verify the sender’s identity through a separate, trusted channel before providing any information.
• Be cautious with attachments and links. Never open files or click links from an email, text, or message from someone you don’t know. Malicious attachments can download harmful malware or viruses, and links can lead to phishing sites. Even if you recognize the sender, be suspicious of unexpected attachments or links, and verify with them through a separate communication channel before proceeding. This includes links to cloud documents (e.g., Google Docs, Dropbox) that may contain malicious content.
• Never log in from a link that is embedded in an email or text message. Criminals can create fake email addresses and deceptive websites that mimic legitimate login pages. To avoid their trap, always go to the site directly by typing the official URL into your browser. Better yet, use a password manager, which can auto-fill your credentials only on the legitimate site, providing an extra layer of protection. Always enable multi-factor authentication (MFA) whenever it’s available for your accounts.
• Always verify the URL. If you click on a link, take a moment to double-check the URL in your browser’s address bar. Malicious websites often use subtle misspellings (e.g., ‘amaz0n.com’ instead of ‘amazon.com’) or different domain endings. Make sure the Web page you’re visiting matches exactly with the official URL you expect, and look for the padlock icon indicating a secure connection (HTTPS).
• Use strong, unique passwords for every account. Don’t reuse the same password across multiple sites. A single data breach could compromise all your accounts if you do. The best way to manage this is to use a password manager, which can generate and securely store complex, unique passwords for you, and automatically fill them in only on the legitimate website.
• Always enable multi-factor authentication (MFA) whenever it’s available. MFA requires a second form of verification—like a code sent to your phone or an authentication app—in addition to your password. Even if a criminal steals your password, they can’t access your account without that second factor, making it one of the most effective security measures you can use.
• Be wary of anything that seems too good to be true. This includes emails, texts, or social media messages that promise free prizes, large sums of money, or incredible deals on products. These are classic bait to get you to click a malicious link, download a file, or provide personal information. If an offer sounds unrealistic, it’s almost always a scam.
• Keep Software and Apps Updated. Software updates aren’t just for new features; they often contain critical security patches that fix vulnerabilities. Make sure your operating system, web browser, and all your apps are set to update automatically to protect your devices from known security flaws.
• Regularly check and adjust your privacy settings on social media and other apps. Take a few minutes to review who can see your profile, posts, and personal information. Limiting what you share publicly can reduce the amount of information that scammers and identity thieves can use against you.