Enhanced Security for Online Banking

Transcription

1 Enhanced Security for Online Banking MidSouth Bank is focused on protecting your personal and account information at all times. As instances of internet fraud increase, it is no longer sufficient to use only a Login ID and Password to access Online Banking. We have implemented additional security features which allow us to better protect your information online. These additional security features will serve to better safeguard your privacy and security. Enhanced Security Features Multifactor Authentication Challenge Code option Enhanced Password Requirements Change your Login ID and Password Site Key option MidSouth Bank Multifactor Authentication What to Expect The upgrade of MidSouth Bank Online Banking requires users to provide additional proof of identification when logging in from an unregistered computer. The ID verification used is the ability to receive messages by phone number or address that is on file at the Bank. This process takes only a few seconds to complete. With multifactor authentication, you will be asked to receive and enter a secure access code before gaining access to our Online Banking system if: You are a first-time user You log in from an unregistered computer You delete the cookies from your internet browser You select the Forgot Password link to login Multifactor Authentication Process Important Note for Requesting an Access Code: You will be directed to a page displaying the secure contact information we have on file for your account. Select one contact from the list that you can immediately access and our system will deliver a temporary secure access code to you within minutes. NOTE: If all of the contact information we have on file is inaccurate or out-of-date, you cannot proceed any further. Please contact us to provide updated information. Phone Delivery: If you select phone delivery for your temporary access code, you will receive an automated phone call that prompts you to make a selection to hear your code. The system will give you the option to repeat the code, if necessary. Our system will not leave a code on voice mail, so if you miss the call, just repeat the process. Delivery: If you select an account, you will receive a very simple containing only the requested code. If you do not receive this , please check your Junk Mail box. Be sure to configure your Junk Mail settings to allow future s from our address. Text Delivery: If you select a text message delivery of your temporary access code, the code will be delivered as a text message. Text message fees may be charged by your phone carrier. MidSouth Bank will not charge you for this service.

2 *IMPORTANT NOTICE: A secure access token is placed on the computer in the form of a cookie if the cookie is deleted, this registration process must be repeated. Challenge Code Option If you are unable to register a computer that you will be regularly using to gain access to your profile, you may create a Challenge Code to enter for one-time use of a computer. You must be logged in using a registered computer in order to set up a challenge code for later use. After accessing the main overview screen, go to the Preferences menu and choose the Security option. Choose the Challenge Code tab. Using the Challenge Code Requirements noted on the page, create a Challenge Code that will allow you to access your online profile from any computer regardless of the ability to receive a Secure Access Code. The next time that you access Online Banking from a location at which you cannot receive a Secure Access Code, you may select I have a challenge code instead of selecting a method of secure access code delivery. Enter the Challenge Code that you have created. Enhanced Password Requirements A simple password may be convenient and easy to remember, but it is convenient for fraudsters, as well. MidSouth Bank Online Banking requires a minimum of seven characters with at least one capital letter and one number included in all passwords. You may increase the complexity of your password further by adding special characters such as punctuation marks. By combining these elements, you can transform a simple password into a secure but memorable one. (Example: a simple name like Julianna can become ju1!anna). Change Your Login ID and Password The Online Banking Login ID and password are for your security purposes. These are confidential and should not be shared with anyone, or recorded or saved on a computer or other online system. You are responsible for safekeeping your Login ID, password, and challenge code. Others you wish to have access to your designated accounts may be issued their own Login ID and password. As a security feature, you may reset your Login ID and/or password any time by logging on to Online Banking. This can be done on a regular basis or in the case that they have been lost or stolen. Site Key option The Phishing Phrase feature protects you from providing personal information to others trying to emulate our website using internet Phishing or Pharming tactics. If you click to the direct Online Banking login page when this feature is being utilized and your personal phrase does not appear, you may be the target of a phishing attack! Note this feature only works for the Online Banking direct login page and will not show the site tag on the MidSouth Bank home page or if cookies have been deleted from your computer. Looking for more information? Security Definitions Frequently Asked Questions Internet Banking Security Tips

3 Security Definitions Multifactor Authentication (MFA) - a method of true multifactor authentication using a combination of User ID/Login and password (something the user knows) and the one-time registration of the end user s computer to access electronic financial services. The registration of the computer is achieved via out-ofband delivery of a Secure Access Code by telephone or (something the user has immediate access to.) Password Free Migration - a method of converting your users login credentials from your previous Online Banking solution. With Password Free Migration, you are able to log in securely to the new Online Banking system without carrying over your old password. This method increases security and reduces exposure to fraud. Challenge Code - the Challenge Code feature allows an authenticated user who is unable to receive the Secure Access Code to gain a one-time access to Online Banking on an unregistered computer. To use this feature, the user must log in through the standard MFA process at least once. During a multi-factor authenticated session, the user may create a challenge code found in the Preferences menu under Security and choosing the Challenge Code tab. Multifactor Authentication: Frequently Asked Questions Do I need to use multifactor authentication to access Online Banking? Yes. Recent Federal guidelines require that we obtain two forms of identification before allowing customers to view account information on our website. It is no longer sufficient to use only a Login ID and password. This additional feature will serve to better safeguard your privacy and security. I cannot log in to Online Banking. What should I do? If you are unable to Login to Online Banking, please contact us at (800) 213-BANK or (337) and we will verify your identity and enter the necessary information into our computer system. After signing in to Online Banking, you may change your security settings at any time from the Security page under the Preferences menu. When will I be asked to register my computer? You may be required to register your computer at various times based upon your typical online banking activity. For example, you may be register your computer when accessing the system from a different computer or after deleting the cookies in your web browser. I registered my computer in the past. Why must I do it again? The Online Banking system validates your identity when you select the Forgot password link. Reregistering your computer will update the system for both multifactor authentication and the forgotten password link. Why am I required to re-register my computer every time I sign on to Online Banking? The Online Banking system has been designed to use cookies as part of the authentication process. Deleting the cookies from your web browser will prevent the system from recognizing your computer and result in the MFA process being presented. What if I delete the cookies from my Web browser? The Online Banking system has been designed to use cookies as part of the authentication process. Deleting the cookies from your web browser will prevent the system from recognizing your computer and result computer re-registration. If you regularly delete your web browser cookies, you may be required to register your computer each time you log in. You may set up a challenge code to use in place of receiving a secure access code each time you log in. What are cookies? Cookies are small text files on your computer, used for keeping track of settings or data for a particular

4 web site. The servers that receive your requests for web pages have no way of knowing specifically who is making a request. They have no way of storing settings for specific users or changing the page they send based on choices a user has made on another page. Cookies solve this problem by saving settings on your computer. When your browser requests a page, it sends the settings that apply to that page along with the request. Your browser will send back only the settings to the server that originally created them. Cookies are a very secure way of maintaining data that is specific to a particular user. Who do I call if I have technical difficulties logging in to my account? If you have any trouble getting logged into your Online Banking please call us at For more information on protecting your information, call our customer care center service at Monday-Friday 7:30 a.m. to 7:00 p.m. or Saturday 8:00 a.m. to 5:00 p.m., or send us a secure message from within your Online Banking register. Internet Banking Security Tips 1) Protect your Login ID and Password Avoid writing your Login ID or password down Avoid predictable passwords that could be guessed by others Do not share your password with anyone else Include both letters and numbers in your password Change your password regularly Avoid software which stores your password Use extra caution when using a public or network computer (do not register it) Be certain you are only entering your Login ID and password on valid MidSouth Bank login pages always begin at 2) Check the security of your computer Install antivirus software and keep it up to date Use a firewall. This can protect against potential hackers and prevent access to questionable connections Use antispyware. Often bundled with antivirus software, this can prevent your activities from being monitored and keep your browser from improperly directing you to an unintended site If using a wireless connection, follow the manufacturers security instructions to be sure you are secured against intruders. 3) Be alert to common internet scams Phishing is an internet scam involving an that appears to be from a legitimate company, bank, or government agency. The s typically warn of a potential problem with your account and request that you follow a link and provide personal or account information. You should not reply to these s, open any attachments, or follow any of the links provided. If you believe an to be legitimate, you should contact the company using the contact information or URL provided in a printed statement. Pharming is a type of fraud that involves redirection from a legitimate site to a site that appears to be legitimate, but has been created by fraudsters in an attempt to gain your personal or account information. 4) Promptly open mail from MidSouth Bank Promptly review your bank statements to ensure your account activity is correct

5 Notify the bank immediately if any errors are detected on your statement Securely store or destroy bank statements, receipts, and unused credit card offers Be alert to missing mail (credit card bills, utility bills, statements, etc.) Do not mail bills from a location where your mail could be easily removed 5) Use the Secure Message feature within your Online Banking Contact MidSouth Bank using secure messages rather than Standard is not secure. Avoid including any personal or account information when using standard . 6) More on MidSouth Bank may send an notice or alert; however We will never request you to provide any personal or account information via We will never ask for your Login ID or Password in an You should never send personal or account information via 7) Review your credit report Checking your credit report regularly can alert you to any unauthorized activity. You can obtain one credit report each year from each of the three credit reporting agencies