To protect your personal information, use unique usernames and strong passwords. A strong password should be at least 10 characters long and include a mix of uppercase and lowercase letters, numbers, and special characters.

Avoid using easily discoverable information such as your pet's name, child's name, address, phone number, or birthdate. For extra security, change your password regularly and don’t reuse passwords across different sites.

Want a long password but aren’t sure you’ll remember it? Create a passphrase that you will easily remember, but only you will know.

Using multi-factor authentication (MFA) is crucial because it adds an extra layer of security beyond just a password. It helps increase security, mitigates password risk, protects your information, and enhances account security.

When you set up MFA, it will text or email you a code based on the information on file to ensure that the person trying to log in to your account is you.

Remember, don't share your MFA information with anyone!

Biometrics use physical characteristics to verify a person's identity. Common forms include fingerprints and facial recognition. While biometrics aren’t “secret” like passwords, they offer robust security because they can’t be easily duplicated or entered by a fraudster.

To enable biometrics on Mobile Banking, click the Face ID button on the bottom of the login page, then type in your login credentials.

Protect your card by always keeping it in a safe place. If your card is lost or stolen, contact us right away. Make sure to review your account statements monthly and report any fraudulent transactions immediately.

Make sure to select a PIN (Personal Identification Number) that you know by heart. Never write your PIN on your card, keep it in your wallet, or give it to anyone. Avoid using numbers that are easily identifiable (for example, birthdates, telephone numbers, a string of consecutive numbers, or addresses) for your PIN.

Never give your PIN to anyone or provide information about your card over the phone, email, or the internet unless it is to a trusted business in a call or transaction you initiated. If someone asks for this information, refuse. Remember, Arbor will not ask for any passwords. When in doubt, hang up and call us directly at (269) 375-6702.

Keep a close eye on your surroundings at ATMs. Make sure that you shield the keypad with your hand or body when you type in your PIN. Put your card, cash, and receipt away immediately after finishing your transaction. While it may seem like a good idea, don’t count your cash at the ATM, and never throw away your receipt. It may contain information about your account balance and partial account numbers. This information could be used for fraud, so make sure to shred all your ATM receipts.

If you need to use an ATM early in the morning or late at night, take someone with you. Keep a close eye on your surroundings, and remember, you can always stop the transaction by hitting Cancel and go to another ATM if you feel unsafe. Always listen to your gut if it is telling you something is off. If you notice anything suspicious, notify us immediately. Most ATMs are monitored and have cameras.

Make sure to always protect your technology by having a passcode or using biometrics. It is essential to do this on all devices to help protect yourself and your information.

Make sure that you only access financial and personal information on secure Wi-Fi networks. Never login or access personal information on free Wi-Fi networks. Wi-Fi hotspots are a prime target for hackers, who can then get direct access to your device. To help protect yourself further, make sure all of your devices are using the latest security software and operating system. Keeping your device’s software up to date is key to protecting yourself. Make sure to only download items from reputable sources.

Never respond to emails or text messages from unknown sources that ask for personal information such as account numbers, social security numbers, passwords, etc. Arbor will never contact you to request any personal information. When in doubt, hang up and call us directly at (269) 375-6702.

At least once a year, read through your credit report carefully. You can request a free annual credit report from each of the 3 national credit reporting agencies. Reviewing your report, even if you don’t suspect suspicious activity, is a good idea. ID Protect makes it easy to review your credit report if you have it, or follow the steps below.

Go to AnnualCreditReport.com or call 877-FACTACT (1 (877) 322-8228). Or, request the reports directly from each agency:
Equifax: (800) 525-6285
Experian: (888) 397-3742
TransUnion: (800) 680-7289

Arbor also offers a free credit review once a year to help you reach your financial goals.

Never open unexpected attachments or links in emails and texts, and always make sure the link is legitimate. You can hover over the links to see the full link. Make sure that the link is directing you to the correct place. Look out for sneaky differences like 0 instead of o.

If you misplace your debit or credit cards or suspect fraudulent activity on your accounts, you can freeze it to prevent new purchases or any ATM transactions. It is easy to do through our Card Control App. While your card is frozen all other account activity will continue, but you will not be able to use your card, even if you have it connected via digital wallet.

With real-time alerts, you can be in the know of all account activity and stop fraud fast. Simply set up alerts in Online & Mobile Banking. Learn more about how to set up Alerts.

Protect Yourself Against ATM Skimmers

A skimming device is a small, covert electronic device designed to capture data from the magnetic stripe of a credit or debit card when it is swiped or inserted into a card reader. Skimming devices are typically used by criminals to steal card information and, in some cases, PINs. Here's how skimming devices work:

1. Attachment: Criminals often attach skimming devices over or inside legitimate card readers, such as those found on ATMs, gas station pumps, point-of-sale terminals, or even handheld card readers used by cashiers. The skimming device is designed to blend in with the genuine card reader, making it difficult for users to detect.

2. Data Capture: When a card is swiped or inserted into the compromised card reader, the skimming device captures the card's data from the magnetic stripe. This data typically includes the card number, expiration date, and sometimes the cardholder's name.

3. PIN Capture: In some cases, criminals may also install hidden cameras or PIN-capturing overlays on the ATM or keypad to record the user entering their PIN. This allows them to pair the stolen card data with the associated PIN for unauthorized access to the victim's account.

4. Data Retrieval: Criminals periodically return to the compromised machine to retrieve the skimming device and collect the stolen card data. They may use Bluetooth or other wireless technologies to transmit the data remotely, reducing the risk of being caught during retrieval.

5. Fraudulent Activity: With the stolen card data and potentially the associated PIN, criminals can create counterfeit cards or make unauthorized transactions, leading to financial losses for the cardholder.

To protect yourself from skimming devices, it's essential to be vigilant when using card readers, such as inspecting card readers for signs of tampering, using secure ATMs, and regularly monitoring your accounts for unauthorized transactions. These measures can help you detect and prevent skimmer fraud.

Fraudsters may attempt to impersonate Arbor Financial employees through text messages, phone calls, or emails requesting personal information from you. This information includes but is not limited to: 

• Account number

• Date of birth

• Social Security Number

Please note that Arbor Financial employees will NEVER contact you to request sensitive or personal identifying information from you. 

If you or someone you know encounters a suspicious call, text, or email, please do not click any links and contact us directly at 269) 375-6702.

We have received reports that mail theft is on the rise in the Kalamazoo area. Here are a few tips to ensure your mail stays secure: 

• Avoid paper checks. When possible, use person-to-person payment methods like Zelle or Venmo, and easily transfer money through mobile and online banking.
• Sign Up for Informed Delivery. Informed Delivery is a free service provided through the United States Postal Service that provides you with email images of postal mail prior to its delivery.
• Secure Your Mailbox. Whether it's through security camera doorbells, renting a locking mailbox at your local post office, or simply utilizing the Postal Service's Hold Mail feature when traveling, these are just a few tips on how to ensure your mail is secure.  

To learn more ways to protect yourself against mail theft, click here for a helpful resource from Experian. 

Phishing scams can come in the form of emails, while smishing scams are sent via text message. Both often appear to be from a company or individual you know or trust and can tell a false story to convince you to open a link or attachment. These types of scams can be used to steal personal information, like credit card numbers, PINs, or passwords. They may include claims of suspicious activity, a problem with your payment information, or eligibility for a government refund.

Stay informed on the most recent scams through the Federal Trade Commission. If you suspect that you have received a phishing attempt:

• Do not open any attachments, click on any links, or reply
• Report and delete it

Often, fraudsters will use regular mail, telephone, or email for various scams related to the IRS, taxes, and unemployment benefits. Remember, the IRS does not initiate contact with taxpayers by email, text, or social media channels to request personal or financial information. Stay up-to-date on the latest scams by reading the IRS’ Tax Scams/Consumer Alerts.

Some scams targeting taxpayers include:

• Social security number scams with claims of being able to suspend or cancel the victim's SSN
• Identity theft and unemployment benefits
• IRS-Impersonation telephone scams

5 WAYS TO AVOID TAX SCAMS

Fake checks are used in many different scams. Some include:

• Secret/mystery shopping: Scammers will pretend to hire someone as a mystery shopper, telling them that their first assignment is to evaluate a retailer that sells gift cards or money orders. The mystery shopper receives a check with instructions to deposit it, and then wire the money to someone else, or purchase gift cards. Once a transaction of this kind happens, the scammer stops communicating.
•  Car wrap decals: Scammers promise easy money if you shrink-wrap your car with ads for brands, such as Pepsi or Red Bull, and send a fake check to be deposited for decal installation through a non-existent company.
•  Claiming prizes: Scammers send "winners" fake checks and are told to send money back to cover taxes, shipping & handling expenses, or other fees. Legitimate sweepstakes do not work like this.
•  Overpayment claims: Scammers may purchase something from you online, claim to have accidentally sent a check for too much, and ask you to refund the balance.

If you receive a message that urges you to deposit a check and then wire money in return, it's a scam.

Fraudsters are now using a deceptive tactic involving QR codes to hack your phone. Here’s how it works: you receive an unexpected package from a known retailer with a QR code with it. When you scan the code, it appears legitimate but actually installs malicious software on your device. This malware can steal personal information, track your activities, or compromise your phone’s security. To protect yourself, avoid scanning QR codes from unknown or unexpected sources, and always verify the authenticity of any package or communication you receive.

Be cautious of scams where you receive a text claiming that a UPS package could not be delivered and urging you to click a link to reschedule or provide information. These messages are designed to deceive you into revealing personal details or downloading malware. UPS will typically communicate delivery issues through official channels and not through unsolicited texts or emails. To protect yourself, verify the authenticity of any such messages by contacting UPS directly through their official website or customer service number. Avoid clicking on links or providing any personal information unless you are certain the request is legitimate.

View our Mortgage Help Center for a list of mortgage-specific fraud and scams. Remember, it will never cost money to get help and assistance with foreclosure prevention options. 

When you sign in on a new device, we will send a text or email to you to make sure the person signing in is you. If you clear your cookies or 90 days have passed, we will prompt you to authenticate yourself again.

We monitor your account for potential fraud. If a transaction doesn’t match your typical spending patterns, it will be flagged, and we will contact you to make sure you made the purchase. If we can’t reach you, a temporary hold may be placed on your account and cards for your protection. This is why it’s important to let us know when you are traveling. If you aren’t sure a phone call is us, feel free to hang up and call us back at (269) 375-6702. 

When you are inactive on your account for over 15 minutes, we will automatically log you out for your safety.

Our secure message center within Online & Mobile Banking helps you get account-related questions answered safely and quickly.

You can also send secure documents through our secure file upload.

Make sure not to send secure information through email unless you have encryption software installed.

The National Credit Union Administration (NCUA) provides insurance on funds up to $250,000 per qualifying account.

We are constantly improving our technology to keep your information safe and secure.

Our Card Control App allows you to turn your card on and off, report fraudulent activity, set alerts, and more. Make sure to register your cards today!