Fraud & Security Center

• Remember that someone cannot discern a computer issue remotely. Even a warning pop-up that appears on your computer itself is not an authentic diagnosis.
• Decline the offer of help. If you’re concerned that you actually might have a problem, take your computer to a real IT person.
• Never grant anyone remote access to your devices unless you know exactly who they are and what they’re doing.

• Don’t answer the phone if you don’t recognize the caller. Let it go to voicemail and then evaluate the message.
• If you do pick up, do not provide any information. Hang up and contact the company or the credit union directly to find out if there’s an actual problem.

• Hang up immediately.
• If you’re too frightened to do that, ask for the name of the jail/hospital/store, hang up, and verify the information directly.
• Call your grandchild/spouse/friend and check on their well-being.

• Don’t click on any links in a text. They’ll invariably take you someplace you don’t want to go.
• Don’t offer up any personal or financial information to an unknown source.

• Hang up the phone or ignore the text.
• If you’re intrigued, check out the charity on your own. If it’s legitimate, make your donation directly on the real website.

• Don't click on a link unless you're 100% sure it's legitimate.
• Look for "https://" to determine if a website is secure.
• Carefully read the name of a website, since subtle misspelling are common on bogus sites.
• To increase your online safety: if a website prompts you to save your card information for future purchases, click no.

• Check to see if the card reader is securely attached and if the graphics line up.
• If the numbers on the keypad are hard to press, that may be a sign of a false keypad.
• Think twice before using privately owned ATMs, since that’s where most skimming occurs.

• Use an antivirus program to scan downloads before opening them.
• Don't click on random links.
• Be wary of opening email attachments or images.
• Don't click on pop-up windows.

• Consider creating a passphrase that incorporates special characters and numerals, such as MyL1feisH@ppy.
• Use a password manager app.
• Don't use the same passwords for different online activity. 
• Don't share your passwords.
• Change passwords often.

• Carefully guard your wallet or handbag when you're in a public place.
• Don't leave credit or debit cards unattended. 
• As soon as your card is returned to you by a merchant or server, put it back in its designated safe spot. 

• Toss letters and ads offering jobs of this nature.
• Never wire money to strangers.
• Thoroughly research a company before engaging in business.

• Be suspicious of jobs that don’t verify your work experience.
• Think twice if the potential employer has an email domain from a popular provider instead of a professional address.
• Don’t trust job offers that promise quick money or huge earning potential.

• Do not attempt to deposit an emailed check. It is not a negotiable item and cannot be deposited or cashed.

• Independently confirm a buyer’s name, address, and phone number.
• Don’t ever accept a check for more than your asking price.
• With buyers you don’t know, use an online payment service instead of a check.

• Ignore all offers that ask you to pay for a prize or gift.

• Never accept a money order from someone you don’t know.

• Choose strict privacy settings.
• Use a strong password.
• Don’t accept every random friend request you receive.
• Limit what you share on social media.
• If your account is hacked:
  • Reset your password.
  • Report the hack to the social media site.
  • Alert your friends and family that you’ve been hacked and warn them not to click on any attachments that appear to be from you.

• Never click on a link or download an attachment unless you are absolutely certain it’s from a trusted source.
• Look for grammatical errors and other glitches in the email or text. Cyber criminals tend to be bad at spelling, grammar, syntax, and punctuation.

• Hang up or delete the text. Monterra will never call or text you to request passwords, credit or debit card numbers, login credentials, or any other personal information.

• Ignore popup ads and never click on links in them.

• Always avoid the temptation to click on an unfamiliar link. It’s simply not worth the risk.

• Never download anything from an unofficial app store.
• Never click on a link or attachment in an unknown email.

• Do not use the same username and password on different websites.

• Keep your personal information personal. For a criminal to successfully impersonate you when reaching out to your carrier, they’ll need to know details that aren’t—or shouldn’t be—public.

• Think before you click. You can safely download the Monterra mobile banking app directly from our website.

• Always use multi-factor authentication (MFA), which requires two forms of verification to log into your account.
•  Avoid using the same username and password for online banking and email.

• Never click on a link in an email unless you know for certain that it’s legitimate.
• Never provide any sensitive information on an unknown website.

• Immediately delete the text. Monterra will never contact you and ask for any personal financial information.

• Don’t click on strange links or pop-ups.
• Avoid random downloads from unknown sources. If you accidentally download something, run an antivirus program to scan it before opening.

• Even if you recognize a display name, it’s a good idea to get in the habit of double-checking the email address. It takes just few seconds, and it can save you a lot of trouble in the long run. 
• Do not respond to any 10-digit texts that appear to be from Monterra and report them to us immediately. 
• Configure your email to show both the display name and the full email address. 
• Read domain names carefully. The smallest difference can cause a huge problem. 
• Look for https:// to make sure a website is secure. 
• Avoid clicking on links or opening attachments in unknown or unexpected emails.
• Hover your mouse over links to see the actual URL before clicking.
• Be wary of common phishing signs, such as urgent language and requests for personal information.
• Employ antivirus software and keep it up to date.
• Consider investing in a secure email gateway that filters your incoming emails for threats and blocks known malicious senders.

How to Identify Spoof Sites

• Before clicking on any link, hover over it to see the URL and determine if it’s legitimate.
•  Look for misspelled words, accent marks, or extra characters.
•  Make sure the URL begins with https://. The “s” means secure.
• Be wary of websites that have poor grammar, typos, or an unprofessional look.

How to Protect Yourself from Spoof Sites 

• Keep your browser and security software updated.
• Be password savvy. Create hard-to-crack passwords, change them often, and use different ones for different accounts.
• Enable two-factor authentication to add an extra layer of security.
• Be skeptical of unsolicited emails. Never click on links or download attachments from unknown sources.
• Don’t respond to emails claiming that urgent action is required.
• Don’t respond to promises of business opportunities that seem unrealistic.

• Don’t be tempted by get-rich-quick schemes. They simply don’t exist.

• Never provide this type of information prior to getting the job.
• Once you’re hired, a legitimate employer will need your Social Security Number for tax purposes and your bank account information if you’re being paid via direct deposit.

• Don’t ever pay for the promise of a job. Keep in mind that real head hunters are paid by the companies that hire them—not by the job candidates.
• Always do independent research of a prospective employer.
• Be wary of unsolicited jobs.

• Just say no. In addition to losing money, you’ll likely lose friends when you start trying to recruit them.

• Never respond to an ad of this nature.
• Real job opportunities with the federal government and U.S. Postal Service are free and available online at USAJobs.gov and usps.com/employment respectively.

• Never send money to, or accept money from, a person you don’t know.
• Don’t agree to transfer money for someone else.
• Be mindful of what you post online. The details you share can give a scammer a clear picture of your life.
• Research the person who has reached out to you to see if they have an online presence beyond the dating site.
• Do not agree too quickly to communicate directly.
• Take things slowly and ask lots of questions. Listen carefully to see if the answers make sense.
• Never reveal financial information to someone you’ve met online.
• Never send inappropriate photos.
• Be wary if someone keeps promising to meet in person but keeps making excuses about why the timing isn’t right.
• Learn how to recognize a fake profile. Some tips:
  • The photo looks too staged and professional.
  • Personal information is sparse.
  • The person cannot be found anywhere else online.
  • There are very few comments or likes from others on their social media.