Online Banking Security

Centrix Bank utilizes some of the most advanced security available today. We understand the security of your personal and account information is important to you, and it is equally important to us! All sensitive information is encrypted and online access requires a personal ID and password known only by you. These measures allow us to properly authenticate your identity and prevent anyone other than yourself from accessing your sensitive account information.


 Email Encryption Service (link)

 

The Small Business Guide to Corporate Account Takeover

Corporate account takeover is a type of fraud where thieves gain access to a business' finances to make unauthorized transactions, including transferring funds from the company, creating and adding new fake employees to payroll, and stealing sensitive customer information that may not be recoverable.

Corporate account takeover is a growing threat for small businesses. It is important that businesses understand and prepare for this risk.

Cyber thieves target employees through phishing, phone calls, and even social networks. It is common for thieves to send emails posing as a bank, delivery company, court or the Better Business Bureau. Once the email is opened, malware is loaded on the computer which then records login credentials and passcodes and reports them back to the perpetrators.

To learn more on how you can protect your business from being a victim of corporate account takeover, please visit the American Bankers Association's website and the Centrix Bank Information Security Best Practices document.

  

Social Networking Security

Social networking websites, such as Facebook and MySpace, allow you to reconnect with old friends and make new ones. They allow you to share ideas and the events of your life with the people in your network. However, the ease with which people can obtain the personal information you make available can be cause for security concerns. If you use social networking sites, you can protect yourself by following a few simple guidelines.

Limit your available personal information
Be wary of making too much personal information available online. Online banking and e-commerce websites frequently use 'challenge questions' to help you recover a forgotten password or for other security purposes. Often, your online profile will contain enough information to answer these questions. If a hacker has access to this information, s/he may be able to break into your online banking account. In fact, some online quizzes are nothing more than veiled attempts to gather answers to challenge questions.

Use privacy settings to restrict who can access your information...
Most social networking websites provide a way to limit what information is available and who can see it. Familiarize yourself with how the privacy settings work and set them to limit your exposure as much as possible. If your social networking website has no privacy settings, consider taking your online socializing elsewhere.

…But don’t rely on them
E-commerce websites are held to a higher security standard than most other websites. Social networking sites have a spotty track record when it comes to protecting personal information. Even if your favorite website provides privacy settings, it may not enforce them as well as advertised.

Vary your password
Use a password for social networking websites that is different from the ones for your e-mail, e-commerce and financial websites. Ideally, you should use a different password on each website.

Know who you are 'friending'
Consider refusing friend requests from people you don’t know. They may be interested in more than your friendship.

Beware of links
Links sent in messages sometimes lead to websites that distribute malware. Consider the source of the message; is it from someone who never sends you messages? Does the message sound like something your friend would send? If it looks suspicious, do not click on it and ask your friend if they really sent it. If they didn’t, their computer may be infected with malware, which actually sent the message to you.

Talk to your kids about security
If you have children, talk to them frequently about how to remain safe online. Help your kids understand what information should be private and the importance of online security.
 

  • Explain that kids should post only information that you – and they – are comfortable with others seeing.
  • Use privacy settings to restrict who can access and post on your child's social networking website.
  • Remind your kids that once they post information online, they can't take it back.
  • Tell your kids to 'trust their gut' if they have suspicions. If they ever feel uncomfortable or threatened by anything online, encourage them to tell you right away.
  • Consider using the social networking website your kids do and become part of their network.


Source: Online Security Information from Jack Henry and Associates.
 

Cookies

CentriNet, Centrix Bank’s online banking service, requires all browsers be set to "Accept All Cookies" before accessing account information. If you choose not to accept a cookie, then you will be required to answer security questions during every log-in attempt. This measure is an increased security enhancement. All cookies used by CentriNet are encrypted to ensure that data cannot be captured from the cookie in the event a computer should become compromised. Accepting a cookie from CentriNet will enable Centrix Bank’s computer system to recognize both the user and computer, allowing quicker access to account information.
 

Processing System Security Software

Centrix Bank's online banking service, CentriNet, is a secure area. We take every measure to ensure that no one can view, obtain, or intercept information from this secure area. Additionally, no one can access your account information without a proper online banking ID and password. Never give your online login information to anyone (refer to Protecting Online Information below).
 

SSL and Firewalls

The CentriNet Online Banking Service is accessed through a Secure Socket Layer (SSL). This means all data transmitted to and from Centrix Bank’s computer system is encrypted using some of the most sophisticated security available to protect your money and privacy. Additionally, several firewalls prevent unauthorized access to the system and ensure your information is accessible only by using your correct online banking ID and password. A series of firewalls and security appliances verify the source and destination of all traffic to the servers and limits the access that 'outside' computers have to Centrix Bank’s servers.
 

E-mail Solicitation

Centrix Bank will never solicit information (social security numbers, account numbers, credit card numbers, passwords, etc.) by means of e-mail. If you receive an e-mail requesting confidential information from someone claiming to represent Centrix Bank (despite the use of an official looking e-mail including our logo) DO NOT respond to the 
e-mail. Please call (603) 647-4446 to report any solicitation of this nature.
 

Protecting Online Information

It is very important that only you know your online banking ID and password. This is the only way your account may be accessed online. Three unsuccessful attempts to log-in will lock the user out from accessing the account. If you accidentally activate this security feature by unintentionally miskeying a password, you will need to contact Centrix Bank to reset the password for the account.

A time-out feature is used to further protect your account and information. Your current financial session will automatically log out after a 10–minute period of inactivity on our site.
 

FFIEC Customer Guidance

The Federal Financial Institutions Examination Council (FFIEC) recently issued new supervisory guidance designated to assist with the security of online banking transactions. This guidance is in response to an ever-changing, more dangerous online threat environment. Scams and hacking techniques have become more sophisticated, new threats are continually evolving, and organized crime groups, both in the U.S. and internationally, have become a major force in expanding fraud and threat.

The new guidance means you may begin to see enhanced security features on websites you visit. Each of Centrix Bank’s online products has inherent security features, which are routinely enhanced in response to changing threats. Some of these enhancements are visible to you, the user, however others occur behind the scenes.

To assist you with this guidance and enhance security, we have two brochures available containing information about how you, as the user of online banking services, can take action to keep your identity, financial information, and funds secure. Click on the link below to view either the business or consumer version of the FFIEC brochure.

Centrix Bank will never call, e-mail, or otherwise contact you to request your access ID, password, or other log-in credentials for the online services we offer. If you receive such a request, do not provide any information. Contact our Customer Response Center at the number below to report the incident.

Should you have any questions regarding our online banking security or require a printed copy of either of these brochures, please contact our Customer Response Center at 
647-4446 or 1-800-483-0220. If you suspect that you have been a victim of fraud or suspicious account activity, please contact us immediately and ask for either the Electronic Banking Department or our Information Security Manager.

 

                    

FFIEC Business Account Guidance FFIEC Consumer Guidance

 

Account Numbers Not Visible

Centrix Bank does not display account numbers over the Internet. Instead, we ask you to choose a 'pseudo' name for each of your accounts. Examples of pseudo names would be: checking account, vacation account and savings account. You can change your 'pseudo' account name at any time.
 

Internet Security Best Practices

If you subscribe to an online banking service, here are a few security measures to help safeguard your computer.
 

  • Maintain a current subscription to anti-virus, anti-spyware, anti-malware, and firewall software.
  • Make sure your operating system and other applications are regularly (weekly, monthly, yearly) updated with the latest security patches. Automatic updates work best, as minimal user interaction is required.
  • Avoid using any financial websites while on a public wireless access network.


Passwords

  • Create a strong password with at least 10 characters that include a combination of mixed-case letters, numbers, and special characters.
  • Use a different password for each website you use.
  • Change your password a few times each year.
  • Do not store and/or write down your password where others can see it.
  • Do not share your password with anyone. Each user should have his/her own user name and password.


Bank Statements

  • Make it a practice to log-in regularly to check and balance your bank statement(s).
  • Immediately report any unauthorized transactions to your financial institution.


Positive Pay

Positive Pay helps reduce the risk of fraudulent activity on commercial checking accounts.  This service allows customers to identify unauthorized transactions before final payment.  As checks are posted, Positive Pay will verify them against the information provided by the customer via a check issued file.  The check issued file is created by the customer and consists of a check number and dollar amount.  If the information does not match the check issued file, then checks will be forwarded to the customer for review and approval through CentriNet, our online banking service.


If you have any questions regarding our Internet Security Best Practices, please contact our Customer Response Center at (603) 647-4446 or (toll free) 800-483-0220.

If you notice suspicious or unusual activity on your CentriNet online banking account, call Centrix Bank immediately.