Your Online Security Is Important To Us

EverTrust Bank is committed to protecting your personal information.  With our secure mobile apps, customers can feel more at ease that our services offer the following:

• secure technology: our fraud prevention and security systems help protect you with the latest encryption technology.
• Secure access to your accounts:
  • the mobile banking service utilizes best practices such as https, 128-bit ssl encryption, device profiling, password access and application time-out when your mobile device is not in use.
  • Only mobile devices that are personally enrolled in the service can access their accounts.
  • no account data is ever stored on your mobile device.

  to learn about our online security practices, please refer to the online security for details:

https://www.evertrustbank.com/en-us/privacy/security-awareness/your-online-security-is-important-to-us

what if my device is lost or stolen?

 

if you are concerned about any misuse of your mobile device, contact your mobile service provider immediately to stop all wireless service. in addition, sign on to online banking, navigate to the mobile banking center, and disable or remove your device.  you may also call 1-866-985-0616 (customer service: 9:00 am - 5:30 pm pacific time, mon. - fri.)

if you think your identity may have been compromised, or you believe your accounts may be in jeopardy, please call our service center 626-656-1109 or contact your account branch immediately.

ways to avoid online security threats

personal identifying information

• check your bank accounts regularly.
• do not give any of your personal identifying information over the telephone, through the mail or online unless you have initiated the contact or know and trust the person or company to whom it is given.

usernames and passwords

• memorize your usernames and passwords and keep them confidential.
• create difficult passwords to include numbers, uppercase letters and special characters.
• change your passwords periodically.
• avoid selecting usernames and passwords that will be easy for an identity thief to figure out.
• do not carry usernames and passwords in your wallet or purse or keep them near your online access devices such as pcs or smartphones.

online access devices

• be careful when downloading applications or programs to your online access devices. if it looks like spam, if it's free, or if it comes preloaded with advertisement, it may not worth downloading as it may collect personal information.
• lock your computer when you walk away.
• know who is around when you access your account.
• dedicate one computer for online banking business.
• encrypt all data stored on your portable devices and laptops.
• install/update firewalls and anti-virus software. ensure all computer software is up-to-date and contains the most recent patches.
• when setting up a wireless network, make sure the default password is changed and make sure you encrypt your wireless network.

online security threats

clickjacking: these attacks use maliciously created pages where the true function of a button is concealed beneath an opaque layer showing something entirely different. typical to facebook users, often sharing or "liking" the content in question sends the attack out to contacts through news feeds and status updates, propagating the scam.

phishing: the act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft. the e-mail directs the user to visit a web site where they are asked to update personal information, such as passwords and credit card, social security, and bank account numbers, that the legitimate organization already has. the website, however, is bogus and set up only to steal the user's information.

spearphishing: this is more likely to occur via regular e-mail; but you may also be hit by a spear through a facebook or twitter message. spearphishing (or spear phishing) works through an e-mail or message that seems quite personal, it may appear to be from a person or company with whom you normally communicate; however, it will lead you to a poisoned site. it is similar to "phishing" scams but rather than just getting a message from your e-mail provider saying your inbox is full or you have to verify your identity and so on it takes it a step further by adding personalized information to lull your suspicions.

pharming: in this latest version of online id theft, a virus or malicious program is secretly planted in your computer and hijacks your web browser. when you type in the address of a legitimate website, you're taken to a fake copy of the site without realizing it. any personal information you provide at the phony site, such as your password or account number, can be stolen and fraudulently used.

ways to avoid these threats

• look at who is sending the email. if it seems odd, delete it.
• keep your browsers up to date; updated browsers are doing a better job screening out dangerous stuff.
• do not click on links that ask for your personal information. if it is from a company or bank call the company or bank directly to ask about the issue stated in the email.
• do not click on links if you do not know who the sender is.
• make sure you know who you are accepting as a friend on social networking sites.
• be cautious when typing in web addresses to ensure you are directed to the site intended.

what the bank is doing to help protect our customers

• the bank has added extra security layers with more layered controls to our online banking (multi-factor authentication) and cash management products (dual control).
• the bank monitors our customer account activity for any unusual or suspicious transactions.

ways the bank may contact you

• evertrust bank never requests a customer's account number, social security number, or password through email. if you should receive an email requesting such information that appears to be evertrust bank, do not respond to the email and contact your account branch immediately.
• if we need to contact you we will contact you by phone, email, or mail. we will never ask for personal information if we contact you; this includes emails sent from the bank.

security measures for commercial customers

• the bank strongly suggests that commercial customers perform a related risk assessment and controls evaluation periodically. this is done to ensure that all risks to the company have mitigation facts lowering the risk to the company.
• available resources from nacha corporate account takeover resource center.

a summary of your rights under regulation e

• regulation e is applicable to all consumer deposit accounts.
• regulation e provides a basic framework that establishes the rights, liabilities, and responsibilities of participants in electronic fund transfer systems. "electronic fund transfer" general refers to a transaction initiated through an electronic terminal, telephone, computer, or magnetic tape that instructs an institution to either credit or debit a consumer account.

error resolution summary

in case of errors or questions about your electronic transfers, call us immediately. if you think your statement or receipt is wrong or if you need more information about a transfer on the statement or receipt. we must hear from you no later than 60 days after we sent you the first statement on which the error or problem appeared.

• tell us your name and account number (if any).
• describe the error or the transfer you are unsure about, and explain as clearly as you can why you believe it is an error or why you need more information.
• tell us the dollar amount of the suspected error.

we will investigate your complaint and will correct any error promptly. if we take more than 10 business days to do this, we will credit your account for the amount you think is in error, so that you will have the use of the money during the time it takes us to complete our investigation.

here is what the federal rules require: if you report the losses within 2 days of receiving your statement, you can be liable for the first $50. after 2 days, the amount increases to $500. after 60 days, you could be legally liable for the full amount.

business accounts are not subject to the same protections as consumer accounts under regulation e. however, if you have any questions or notice a fraudulent activity please contact us immediately.

see our electronic funds transfer disclosure for more information.

>