• Monitor accounts frequently (daily is recommended).
• Immediately review Wire and ACH transaction confirmations (if you are a business user, and if your business is enrolled for ACH or Wire services).
• Become educated regarding security threats and understand your responsibility and liability as a personal or business user.
• Enable alerts for large withdrawals and deposits for all accounts.
• Keep your computer up-to-date with all operating systems and application patches.
• Never share user IDs, passwords, PIN numbers, dynamic tokens, etc. with anyone. Do not leave them in an area that is not locked or secured.
• Do not use the same login or password on any other website or software.
• Obtain and install protection (antivirus, anti-malware, and anti-spyware and firewall software) and make sure it is active and automatically updated by your vendor, or take necessary steps to keep it updated.
• Limit or eliminate (recommended) unnecessary web-surfing on computers used for online banking. In other words, consider a dedicated computer for online banking that is rarely used for general internet browsing/surfing.
• For business administrators:  educate all employees on good cyber security practices.  For example:

• Disable browser extensions by using the privacy mode in the web browser (e.g., Chrome’s “Incognito” mode).   Note:  Private or Incognito browsing will require the user to complete the multi-factor authentication process on each login.
• If a media player needs to be updated, go to the official media player website to install the update. Clicking on a fake update installation link could just mask a hacker downloading malware onto the computer.

• Verify use of a secure session (“https://” and not “http://”). Ensure no error messages are displayed and the address bar turns green.
• Avoid saving passwords in clear text to a computer.
• Never leave a computer unattended when using any banking service and always lock your computer when away.
• Never access your online banking (or any privileged or sensitive financial system) from a public computer at a hotel, library, coffee house or other public kiosk.
• Be suspicious of any employment offers that require use of a personal account for business purposes. Such offers for employment as a mystery shopper, payment processor etc., where you are required to use your personal account for someone else’s business purposes, are not legitimate.  No legitimate business will attempt to move business funds through anyone’s personal account.  If you are approached to participate in such schemes, immediately contact local law enforcement and let them know.