5 Tips for Secure Use of Business Online and Mobile Banking for the Holidays

5 Tips for Secure Use of Business Online and Mobile Banking for the Holidays

We can never overstate the importance of protecting your online security, especially during the busy holiday shopping season for businesses and their customers.

Follow these top tips from our Electronic Banking Specialists to help reduce security threats:

  1. Never share log in IDs and passwords. Each individual user under the business should have a separate log in and password, even seasonal or temporary employees.
  1. Delete inactive/dormant profiles. Remove inactive users, whether former employees or accountants. In Merchants Bank Online Banking, you can make these kinds of updates through the Preferences tab. Set a reminder on your calendar to review this access at least once a quarter.
  2. Never have your browser or phone remember passwords. Always type in your password. While it may seem a bit inconvenient at times, it greatly increases the security of your account information.

    Think about where you’ll be doing business online this holiday season: buying inventory, packing supplies, postage and shipping; processing your employee’s payroll or holiday bonuses or paying for seasonal marketing materials and campaigns. You’ll want to minimize the risk to your account and business information if any of these companies are compromised during the holidays season.

  3. If logging in on a mobile device, be sure your phone or tablet is password protected. In case your device is lost or stolen – which could happen at one of those holiday parties or events you’ll be attending – you don’t want the fraudster to have access to information you have on your device.
  4. Be sure to keep contact information up to date for yourself and other users. It’s very frustrating to request a password reset and not receive it due to a bad email address. To update your information with Merchants Bank, give us a call.

Bonus Tip for Business Online Banking Supervisors and Business Owners: Before the end of the year, review your company users, checking what access they have to which accounts. Also, review debit cards the account may have opened and close any cards that are no longer used. Both of these quick reviews will help reduce fraud on business accounts.

Once you’ve taken this steps to secure your business account, rest assured that you have one less thing to worry about during the holidays. Wishing you a successful fourth quarter!

To learn more about our Online and Mobile business banking options, click on the appropriate link below:

Protect Your Identity During the Holidays or Any Time of Year

CardProtectionApps-Blog

It’s important to take steps to protect your personal identity, especially during the holiday shopping season. Let’s work together to help keep your information safe.

Use Our Free Fraud Tools

Your security is top of mind at Merchants Bank. We have a number of ways to help you protect yourself with our SecurLock Equip app for your Merchants Bank credit card and My Mobile Money app for our debit card. These apps are very similar.

With SecurLock or My Mobile Money you can:

  • Turn your Merchants Bank credit card or debit card on and off.
  • Control where your credit card or debit card can be used.
  • Receive automatic notifications about possible fraud and take action.

More on SecurLock and My Mobile Money can be found on our website.

Plus, if you use Merchants Online Banking, consider using the “Alerts” functions to monitor activity. To set up automatic alerts, follow the steps outlined in our video tutorial. Alerts can be sent to an email address or via text message.

Best Practices to Use When Shopping Online During the Holidays:

  • Change your passwords often. Use a mixture of numbers, letters and special characters. Don’t use the same passwords for multiple accounts.
  • Be suspicious. Thieves will use calls or emails to trick you into sharing passwords, social security numbers, etc. If you don’t recognize the caller or email, don’t reply.
  • Don’t click on links in emails from your credit card companies, investment companies or banks that would have you update account information. Remember, Merchants Bank will never ask you to update your personal information via a link in an email. When suspicious, call the company at a number you confirmed in a separate source, like a phone book or prior statement.
  • Make a fraud kit. Keep a list of your credit and debit cards, account numbers, expiration dates and customer service of fraud department telephone numbers in a secure place.
  • Read through your credit card bills. If you see a charge you don’t recognize, call and get the charge reversed.
  • Don’t use the “remember password” option. It makes it easier for someone to access your accounts.
  • Do NOT keep a list of passwords in an unprotected document on your devices or written down in an unsecure place.
  • Never save your credit card number online. If that site gets breached, you are at risk. Enter your information each time you make a purchase.

If you’re traveling or spending the winter somewhere else, let us know by contacting your local Customer Service Representative so we can make sure you have the best service.

If you make purchases in a state or country where you don’t normally use your Merchants Bank debit or credit card, we may think these transactions are fraudulent unless we know otherwise. Let us know the dates of your trip, your travel locations and how we may be able to contact you.

If you have additional questions, please contact us. We’re happy to help.

 

 

 

 

Card Security at Your Fingertips: Are You – Your Student – Your Business – Using our Fraud Prevention Apps?

SecurityFraudApps-Blog

Controlling and monitoring your personal or business debit or credit card usage anywhere, anytime has never been easier with our FREE mobile apps My Mobile Money and SecurLOCK Equip.*

With these apps – My Mobile Money for your debit card and SecurLOCK Equip for your credit card – you can protect yourself or your business from fraud by setting custom alerts and controls per card to determine how it can be used. You can even add your child’s Merchants Bank card to monitor their spending and security with alerts as they start the school year.

 3 of Our Favorite Features

Merchants Bank staff uses the apps every day and want to share some of their favorite security features with you. Here are three features you can use to ensure you’re getting the most out of these apps.

Featured Staff

Tina Bechtel Tina Bechtel, Customer Service Representative and Lead Teller in Spring Grove.
Phone: Samsung Galaxy
Michelle Schroeder Michelle Schroeder, Customer Service Manager in Cannon Falls
Phone: Apple iPhone
Mike Swanson Mike Swanson, Commercial Banking Officer in Hastings
Phone: Apple iPhone
Marcus Krings Marcus Krings, Credit Card Manager in Winona
Phone: Apple iPhone

See Every Transaction with Alerts

What if every time your card was used your phone would buzz? You would be able to see how much you were spending on a regular basis. You’d also know immediately if your card was used without your authorization, and then be able to stop any other fraudulent transactions from going through. With our security apps, it’s easy to set up these alerts.

Or maybe that sounds like too many notifications. If you prefer, you can set up alerts for specific types of transactions, including:

  • When you are approaching spending limits you may have set
  • Transactions where your card is not present – such as when you shop online
  • International transactions
  • Purchases at specific kinds of stores, such as gas stations, grocery stores, etc

Our staff loves seeing alerts each time their cards are used and being reassured that the only activity on their cards is their own.

Tina: I’ve been able to detect and stop fraud right through the app. I have notifications turned on for all my debit card transactions and one day I got a notification for a charge that I didn’t recognize. I went into the app and turned my card off and called the Bank right away. Turns out the transaction was fraudulent and because I caught it and turned off my card, I was able to stop other fraudulent transactions that were being attempted.

Michelle: I can’t say enough about the notifications for all transactions. You could set this up to only notify you for transactions over a certain dollar amount, but I love seeing everything that goes through my debit card. For example, I really like seeing the notification for online automatic transactions, like Netflix. Sometimes I forget about automatic payments I have set up through my card, and now I get a little notification when the charge goes through. It’s perfect.

Marcus: I get the transaction alerts from SecurLOCK Equip within seconds of my credit card being used. Since the usage alerts are pretty much in real time, it allows me to react quickly if I see a charge that isn’t familiar. We had a customer contact the Credit Card Department about a fraudulent transaction he saw on his app, and our team was able to take care of it immediately.

Shut it Down – Turn your card off to prevent further transactions

Experience the immediate relief that comes with being able to control the use of your card. With these apps, you can turn your card off to stop any transactions going through. And once you’re ready to use your card again, you can turn it back on and it will be ready to use almost instantly.

Mike: My wife and I have used the on/off for our debit card more than once. If one of us misplaces our card…leaves it in the car, forgets it on the counter or something else, we can just turn it off on the app until we find it. If our cards really were lost, it would prevent anyone else from using them. It’s just nice peace of mind.

Michelle: I’ve had great experience with the on/off function too. I went on a trip to Florida and didn’t want my debit card on. I just went into the My Mobile Money app, slid the on/off setting to off and that it was it. It was that easy.

Marcus: Being able to turn your card off if you know you aren’t going to be using it or if a transaction is unfamiliar is such an asset. It’s all about continuing to minimize your risk of fraud. Limiting the opportunity for fraudsters to act is a crucial part of personal security.

Set Perimeters for Card Use

While transaction alerts and the on/off function give you significant control over your card’s security, the apps have other capabilities that can help minimize the risk of fraud.

Marcus: If you’re looking to shut down access to your card as much as you can to prevent fraud, try using location or types of merchant controls. If you know you never use ATMs, go ahead and turn off ATM functionality for your card. Of course, you’ll have to remember to turn that functionality on if you suddenly need to use an ATM.

Tina: I’ve used the location feature and that’s really handy. You just set up if you only want to allow transactions based on a city, region or state. Transactions attempted from outside that area are then automatically denied. Although, online purchases might be processed elsewhere, so that feature may block an online purchase.

Bonus Tip: Manage Your (Or Someone Else’s) Spending

With customizable controls, alerts for spending limits, and easy-to-find account balances, you can make sure you’re always on track with your budget.

You can also add your child’s bank cards, and receive alerts to see how they’re using them or set spending limits. For many students, going off to college is the first time they will be managing an entire budget. Help them learn about managing their finances and taking their security seriously by equipping them with the right tools.

This feature is also useful when a partner runs into a roadblock on a regular transaction. After all, two heads are better than one:

Mike: If you have more than one person on an account, like my wife and I have a joint checking account, you can have the My Mobile Money app track both of your debit cards on one phone. One time my wife was trying to buy groceries and I got a notification at work that her transaction was denied. I realized that I hadn’t moved our budgeted grocery money over to the right account and was able to use Merchants Mobile Banking to transfer funds so she could finish checking out at the grocery store. That was really handy.

You can download My Mobile Money Access for your debit card here for**:

And you can dounload SecurLOCK Equip for your credit card here for**:

Or you can download the apps anytime from the Google Play or Apple App stores. Or you can visit our website.

If you have questions about downloading the app or would like additional recommendations on its use for you or your business, contact your local Merchants Bank and ask to speak to a Customer Service Representative. Or stop in to see us, we’re happy to help however we can.

*Mobile fraud apps are free, however, text or data charges may be imposed by your mobile provider. Check your plan for details. Your carrier may limit access outside the U.S.

**You will be linking to another website not owned or operated by Merchants Bank, NA. Merchants Bank, NA is not responsible for the availability or content of this website and does not represent either the linked website or you, should you enter into a transaction. We encourage you to review their privacy and security policies which may differ from Merchants Bank, NA. 

3 Essential Small Business Security Practices

SecurityPracticesWithKerriBronk-Blog

Keeping your business protected from fraud and security threats can feel like an overwhelming job. One place to start is by focusing on internal controls that help keep your business’s financial information more secure. Our Security Officer, Kerri Bronk, recommends putting the following three internal controls into practice and reviewing them regularly.

“The idea is to have a combination of different types of security checks and balances in place – and to make sure you keep them up-to-date,” said Kerri. “These simple internal controls can really have an impact on how secure your business information can be.”

Authorized Account Signers

A small business may want to have a few people listed on a financial account as an authorized signer. This can vary by business but may include the owners, an office manager or bookkeeper.

Kerri advises, “[a]uthorized account signers have access to some of the essential functions of your financial account, so you want to make sure this type of access is only granted when necessary.”

 FAQs about Authorized Signers

  • What can an authorized account signer do? An authorized signer is different from an account owner (who has complete control over a financial account). In regards to a checking or saving account, for example, a signer can make withdrawals, sign checks and access some account information.
  • How many authorized account signers can I have? There is no limit. However, the more individuals who have access, the more risk you’re taking.
  • How often should I review this access? On an annual basis or when you’ve had an employment change in your executive management team or accounting/payroll staff.
  • How do I make changes to authorized account signers? Changes to authorized signer need to be done in person at a Merchants Bank location. Contact your Customer Service Representative to make an appointment.

Authorized Cardholders

You might like to have the option for several people to make business purchases with a debit or credit card. This is where authorized cardholders come in.

FAQs about Authorized Cardholders

  • What can an authorized cardholder do? An authorized cardholder can use a debit or credit card tied to your business account to make purchases and get cash from an ATM. You can set spending limits per card user to help keep spending in check.
  • Does the authorized cardholder need to be a signer on the account? No, you can give a person access to a card without having other signing abilities.
  • How many authorized cardholders can I have? There is not a set limit to the number, but again the more access, the harder it will be to track spending.
  • How often should I review this access? Who has access to business debit and credit cards should be reviewed more frequently. We’d recommend making updates to your authorized cardholders each quarter or when you have staffing changes.
  • How do I make changes to authorized card holders? For both your Merchants Bank debit or credit cards, stop into your local Merchants Bank location for assistance.

Access to Account Information

Knowing who has access to your business account information and keeping the number of people to a minimum is one of the best ways to avoid a security or fraud threat.

Considering that small or mid-sized businesses lost a median amount of $289,864 to employee funds theft in 2017, it’s critical to thoughtfully review who should have access to this information.*

FAQs about Account Access

  • What kind of information can I give employees access to? You can select the level of information you want an employee to receive from paper statements to viewing accounts in Online & Mobile Banking or credit card transactions through mycardstatement.com. You can also use our mobile card controls – My Mobile Money for debit cards and SecurLock Equip for credit cards – to have alerts on card spending.
  • How many people can have this access? This varies by solution, please ask at your local Merchants Bank location.
  • How often should I review this access? It’s extremely important to stay current with account access. This should be updated immediately when staff join or leave your business.
  • How do I make changes to who has access to my account information?
    • Statements: Contact your local Merchants Bank location for assistance.
    • Business Online & Mobile Banking: Once you have set up your Business Online Banking account with you as the owner, you can add or remove secondary users and define account access or transactions limits per user at your convenience. If you have any questions or need help with user setup, just contact our Electronic Banking Department (ibsupport@merchantsbank.com or (866) 496-0522).
    • mycardstatement.com: Contact your local Merchants Bank location for assistance.

“My last tip regarding internal controls is to ensure that no single employee has access to all the financial aspects of your business,” said Kerri. “For example, you want to make sure that employees who can pay business expenses with a business credit card are not the same employees who pay the credit card bill.”

Just remember that Merchants Bank is always here to help. If you think your business bank account information has been compromised or have a security concern, contact your local Merchants Bank location and ask to speak to your Cash Management Specialist or a Customer Service Representative.

 

*https://www.hiscox.com/documents/2017-Hiscox-Embezzlement-Study.pdf

Top Business Fraud Updates – April 2018

FraudPrevention-Blog

Please review our most recent fraud alerts and security reminders to help protect your business.

Email Spoofing On the Rise

Our business customers have reported an increase in email spoofing scams. Fraudsters are posing as a customer or employee of the business and sending an email to the business asking for a wire transfer or ACH payment. Only after completing the wire transfer have businesses found out that they were dealing with fraudsters and not their actual customers or employees.

Before you complete transactions to your customers, make sure to verify who you are speaking with over the phone or through an email through a secondary source. Call your customer directly through a phone number you have verified. When working with customers via email, remember to look at both names and email addresses for consistency. If you notice anything suspicious, take the extra time to make sure both your business and your customer’s information is safe. When in doubt – check it out and verify.

Directory Listings Scam

Have you been contacted by someone wanting to verify or confirm your business information for a directory listing? Be cautious. Scammers have been calling business claiming to be able to help them with their online directory listings for a fee. In the end, the business is out the money and their information was verified for a directory listing that doesn’t exist. To avoid falling for this scam, make sure to verify who you are speaking to and confirm the phone number through a third party, like the phone book or Yellow pages. Read more details about this scam here.*

Steps to Take Now to Prevent Fraud

Here are three simple things you can do now to prevent fraud on your business accounts. We recommend:

  • Checking your business bank accounts daily for fraudulent transactions. If you are suspicious of a transaction, contact the Bank immediately.
  • Using a fraud transaction detection service, such as Positive Pay, to help you prevent fraudulent checks and transactions from hitting your account.
  • Using our free debit and credit card security apps to track and review all of your transactions immediately. Learn more about My Mobile Money for your business debit card and SecurLock Equip for your business credit card.

Protect Your Business from Cyber Attacks

This tip is part of the FCC’s top ten cyber security tips for small businesses. Protecting and cleaning any computer that handles business information or touches your network is a must. One of the best defenses against online threats is making sure you have the latest security software, web browser and operating system in place too. You can set each of these to automatically install when a new software update is available. In addition, your antivirus software can run a scan after each update to ensure your machines are adequately protected. Take half an hour to check your settings and update your software now. Get more tips here.*

Consider Security First

Use this guide from the FTC to create a security first approach to your business. This in-depth article gives you-step-by-step best practices for protecting sensitive information your business may handle. Read the FTC’s Start with Security Guide now.*

Next Steps If You Have a Security Concern

If you think your business bank account information has been compromised or have a security concern, contact your local Merchants Bank and ask to speak to your Cash Management Specialist or a Customer Service Representative.

 

*You will be linking to another website not owned or operated by Merchants Bank, NA. Merchants Bank, NA is not responsible for the availability or content of this website and does not represent either the linked website or you, should you enter into a transaction. We encourage you to review their privacy and security policies which may differ from Merchants Bank, NA.

Cell Phone Porting Fraud: Check Your Phone

Shot of a businesswoman using technology at work

Fraudsters are getting names, phone numbers and other personal identifiable information of real people and transferring their phone number to a different cell phone service provider. They pose as the victim and report the phone lost to the current provider and request the number be transferred (or “ported”) to a device with a different cellular service provider. Once they do this they can find where the victim may have bank accounts, click a “forgot password” link and request a password change code be sent to the stolen phone number via text message, now directed to their device. Then they can change their account’s password and can then access and manipulate those accounts.

What to watch for:

If your phone suddenly loses service, switches to “Emergency Calls Only,” receives any alert messages or unexpected text messages in regards to authenticating an action you did not request, notify your cellular service provider and financial institution immediately.

Take action to protect yourself:

You can take action against cell phone porting (or “port-out”) fraud by contacting your cell phone service provider. Ask them about their porting/port-out security and request they ask for security verification (that you would set up) when action is requested for your account.

Important Tax Fraud Alert

Tax Fraud

Just days into the start of the 2018 filing season, the IRS identified a new scam in which cybercriminals have stolen client data from tax professionals and filed fraudulent refunds using real taxpayer information, including bank account and routing information for direct deposit.

The fraudster then contacts the taxpayer posing as an employee of a debt collection agency working on behalf of the IRS. They ask the taxpayer to take certain steps to return the refund, but actually, the refund goes to the criminals.

If you have been the victim of this tax fraud scam, please contact a Merchants Bank Customer Service Representative for assistance. The IRS also asks the taxpayers to call the IRS toll-free at (800) 829-1040 (individual) or (800) 829-4933 (business) to explain why the direct deposit is being returned.

There is more information for taxpayers at Tax Topic Number: 161 – Returning an Erroneous Refund

Information reposted at the request of the Federal Reserve Banks on behalf of the Department of the Treasury’s Bureau of the Fiscal Service.