While identity theft can happen to anyone, there are some things you can do to reduce your risk.

• Secure your information. Whether it is paper documents or electronic files always keep your information protected.
• Use a strong password with 8 or more characters with a combination of upper and lower-case letters and special characters.
• Don’t share your password with anyone. If you must write it down, make sure that it is secured away from your computer.
• Make sure you have active and updated security software on your computer that includes antivirus/malware and firewall protection.
• Read your credit card and bank statements carefully and often.
• Know your payment due dates. If a bill doesn’t show up when you expect it, look into it.
• Read the statements from your health insurance plan. Make sure the claims paid match the care you received.
• Shred any documents with personal and financial information.
• Review each of your three credit reports at least once a year. Visit annualcreditreport.com to get your free reports.

Everyone needs to follow information security best practices, especially businesses.

• Train employees in security principles
  Establish basic security practices and policies for employees, such as requiring strong passwords, and establish appropriate Internet use guidelines that detail penalties for violating company cybersecurity policies. Establish rules of behavior describing how to handle and protect customer information and other vital data.
• Protect information, computers, and networks from cyber attacks
  Keep clean machines: having the latest security software, web browser, and operating system are the best defenses against viruses, malware, and other online threats. Set antivirus software to run a scan after each update. Install other key software updates as soon as they are available.
• Provide firewall security for your Internet connection
  A firewall is a set of related programs that prevent outsiders from accessing data on a private network. Make sure the operating system’s firewall is enabled or install free firewall software available online. If employees work from home, ensure that their home system(s) are protected by a firewall.
• Create a mobile device action plan
  Mobile devices can create significant security and management challenges, especially if they hold confidential information or can access the corporate network. Require users to password-protect their devices, encrypt their data, and install security apps to prevent criminals from stealing information while the phone is on public networks. Be sure to set reporting procedures for lost or stolen equipment.
• Make backup copies of important business data and information
  Regularly backup the data on all computers. Critical data includes word processing documents, electronic spreadsheets, databases, financial files, human resources files, and accounts receivable/payable files. Backup data automatically if possible, or at least weekly and store the copies either offsite or in the cloud.
• Control physical access to your computers and create user accounts for each employee
  Prevent access or use of business computers by unauthorized individuals. Laptops can be particularly easy targets for theft or can be lost, so lock them up when unattended. Make sure a separate user account is created for each employee and require strong passwords. Administrative privileges should only be given to trusted IT staff and key personnel.
• Secure your Wi-Fi networks
  If you have a Wi-Fi network for your workplace, make sure it is secure, encrypted, and hidden. To hide your Wi-Fi network, set up your wireless access point or router, so it does not broadcast the network name, known as the Service Set Identifier (SSID). Password protect access to the router.
• Employ best practices on payment cards
  Work with banks or processors to ensure the most trusted and validated tools and anti-fraud services are being used. You may also have additional security obligations pursuant to agreements with your bank or processor. Isolate payment systems from other, less secure programs and don’t use the same computer to process payments and surf the Internet.
• Limit employee access to data and information, limit authority to install software
  Do not provide any one employee with access to all data systems. Employees should only be given access to the specific data systems that they need for their jobs, and should not be able to install any software without permission.
• Passwords and authentication
  Require employees to use unique passwords and change passwords every three months. Consider implementing multi-factor authentication that requires additional information beyond a password to gain entry. Check with your vendors that handle sensitive data, especially financial institutions, to see if they offer multi-factor authentication for your account.

First Federal uses multiple solutions and security procedures to safeguard your accounts, detect, and prevent fraudulent transactions 24/7.

• Monitor your account on a regular basis and watch for suspicious activity using Digital and Mobile Banking.
• Enroll in Fraud Alerts to protect your debit card(s). If enrolled into this service, Fraud Alerts notifies you by two‐way texting that suspicious transactions, or transactions outside your normal spending pattern have been noticed on your First Federal Bank debit card. If you think the transaction is fraudulent, reply NO immediately and your card will be blocked from further fraudulent activity. If the purchase is legitimate, reply YES.
• Receive alerts through our Card Management feature within our mobile banking app to receive real-time alerts anytime your debit card is used
• If you notice any suspicious activity, please call us right away at 1-833-601-0464

First Federal uses Debit Card Fraud Monitoring to provide greater protection against fraudulent use of your card. It reviews spending patterns, detects unusual card activity, tracks risk patterns and contacts you via a text alert or call center representative to quickly identify and help stop fraud. There is no application process–you are automatically covered.

First Federal also provides Chip Enabled Visa® Debit Cards. A microchip embedded in every card adds a new layer of protection against fraud for purchases made at the point of sale. Information programmed into the chip is personalized for your account and each transaction generates a unique code, adding an extra safeguard against unauthorized use and counterfeiting.

3D Secure Authentication for Visa® is an innovative service designed to ensure enhanced security and strong authentication for you when you use your debit card for online purchases. It combines historical cardholder behavior, device and location information, along with merchant and transaction data, to authenticate cardholders in real time reducing the potential for fraud. Once your debit card is activated you are automatically enrolled.

The privacy and safety of your financial information is First Federal Bank’s utmost concern. First Federal Bank works with cutting edge technology partners to ensure that the most secure environment is made possible for our valued customers. We offer you worry free Internet banking. You can be completely confident of the following security measures:

Secure Communications
Our system ensures that data exchanged between your PC or mobile device and our computers is encrypted with industry leading encryption technology. Encryption is accomplished through Secure Sockets Layers (SSL) which utilize mathematical formulas to “encrypt” or hide information from prying eyes on the Internet. Additionally, if SSL detects that data was added or deleted after you sent it to the bank, the connection will be severed in order to guard against any tampering. The most popular browsers have the SSL security feature built in.
Secure Environment
Our computer system does not connect directly to the Internet. It is isolated from the network via a “firewall”. A firewall is a combination of software and hardware products that designate parameters, control and limit the access that outside computers have to the banks internal network and databases. You can feel secure knowing that our firewall protects your personal information from unauthorized access.
Secure Login
Username’s and passwords are isolated from the Internet by being stored on a secure computer to prevent passwords and IDs from being accessed or downloaded by anyone on the Internet. User passwords can vary from nine to seventeen characters and should include letters, numbers, & symbols, to reduce the likelihood of your password being guessed. In addition, our powerful multi-factor authentication security uses your log in credentials, device identification, and geographic location to quickly and easily authenticate you to the online banking system. If we do not recognize the device or area your log in originates from we may ask additional security questions to you at log in. In addition, when appropriate Business Online Banking users will use a one-time password generated by a token in combination with a user-defined PIN to access certain transaction types. The system also checks for invalid logins and automatically disallows a user after three invalid attempts. This prohibits the “hacker” from gaining access to our system thus protecting your accounts.
Your Password
You will be responsible for maintaining one of the most important security measures, your password. When you enroll in Online Banking you will create a personally selected Username and password known only to you. When you enroll in Business Online Banking you will be assigned a Username; however you will create a password known only to you. Be sure to keep your password a secret. Memorize it and do not write down your password. It is not recommended you carry your password in your purse or wallet. Make sure no one watches you enter your password and always close your browser when leaving the computer or mobile device. Ensure you have antivirus and/or spyware protection on your computer or mobile device. Make sure you regularly scan for viruses or spyware that could be used to capture password keystrokes. Ensure you change your password periodically (i.e., monthly or quarterly) as an additional means to protect your account. You ultimately hold the key to your password security. Do not share your password with anyone. Not even a bank employee knows your password.