Member Security
How We Protect Our Members
and What You Can Do to Protect Yourself

At First Atlantic, we want our members to bank with the peace of mind they deserve. We continually work to ensure that you enjoy the utmost in security and privacy. We strive to keep you informed and up-to-date. And we want you to understand not only how we protect your information but also what steps you can take to protect yourself against crimes such as identity theft and account fraud.

Protecting Your Identity

Be informed to better protect yourself from this type of fraud

Monitoring Your Credit Report

How to request a copy and what to look for

Phishing and Vishing

Don't be fooled by e-mail messages disguised to look legitimate

Online Banking Security

At First Atlantic, online security is a top priority

OnGuard Online

First Atlantic has partnered with OnGuard Online, a Web site that provides practical information from the federal government and technology industry on how to protect yourself from fraud

Privacy Policy

Be confident that protecting your personal information is our top priority

Check Fraud
Protect yourself against the high price of Cashier's Check and Money Order fraud

---

Protecting Your Identity

According to the FBI, identity theft is the fastest-growing white-collar crime in the nation. Identity theft occurs when an individual uses another person's name, address, bank or credit card numbers or Social Security number to apply for credit in that person's name. The identity thief can then use the credit in any way they please, running up huge credit card balances and creating havoc with the victim's good name and credit rating.

Here are some steps you can take to help avoid becoming a victim.

• Do not reveal personal information unless you know how it will be used or shared.
• Carry only the identification and bank/credit cards you actually need.
• Do not give out personal data over the phone, through the mail or on the Internet unless you have initiated the contact.
• Shred or tear up your charge receipts, credit cards solicitations, expired cards, statements, checks or other sensitive personal information.
• Give your Social Security number only when absolutely necessary. Ask to use other identifying information.

Here's what to do if you suspect your personal information has been misused:

• Immediately contact First Atlantic, any other banks and your credit card issuers. They can review your accounts for fraudulent activity and if necessary, stop payments on checks, change personal identification numbers and passwords and open new accounts.
• File your complaint at ftc.gov, and then visit the FTC's Identity Theft website at www.consumer.gov/idtheft.
• File a report with your local police department. The report will be helpful in explaining to creditors that you are a victim of identity theft.
• Contact the fraud departments of each of the major credit bureaus:

Credit Bureau	Address	Report Fraud
Equifax	Equifax Credit Information Services, Inc. P.O. Box 740241 Atlanta, GA 30374	1-888-766-0008
Experian	Experian P.O. Box 9556 Allen, TX 75013	1-888-397-3742
TransUnion	TransUnion P.O. Box 2000 Chester, PA 19022	1-800-680-7289

Monitoring Your Credit Report

Your credit report gives you a single snapshot of your past credit activity and includes four basic types of information:

1. Identification and employment information. Personal information, such as name, birth date, Social Security Number, and employer.
2. Payment history. A list of the accounts you have with different creditors, showing how much credit they extended to you and whether or not you have paid on time.
3. Inquiries. A record of the lenders and creditors that have requested your credit history.
4. Public Record Information. Events that are a matter of public record, such as bankruptcies, foreclosures, or tax liens.

There are three credit reporting agencies in the United States that gather and document this information—Equifax, Experian and TransUnion. Credit card companies, mortgage lenders and others purchase this information from these companies to help them evaluate your ability to repay debt and decide whether they should approve your credit card or loan application. A potential landlord or employer may also request this information.

As a result, checking your credit report regularly—at least once a year—is a good idea. That way when you're ready to buy something like a house or a new car, you'll know how good your credit is. You'll also want to be sure that the information is correct and free of any fraudulent activity. Your credit report will show if anyone else has tried to apply for credit using your name and personal information.

Requesting a copy of your credit report

According to a new federal law, you are entitled to request a copy of your credit report—free once every 12 months—from each of the nationwide consumer credit reporting companies: Equifax, Experian and TransUnion.

A central, authorized site has been established for consumers to make their requests. To obtain your free annual credit report, visit www.annualcreditreport.com. You'll be able view, download and print your credit report almost immediately. You can also call 877-322-8228 to make your request.

In addition, a credit report can be ordered from each of the credit bureaus listed below. The reports are usually less than $10, but they are free if you've been turned down for credit, employment or housing in the past 60 days.

Credit Bureau	Address	Credit Report Request
Equifax	Equifax Credit Information Services, Inc. P.O. Box 740241 Atlanta, GA 30374	www.equifax.com
Experian	Experian P.O. Box 9556 Allen, TX 75013	www.experian.com
TransUnion	TransUnion P.O. Box 2000 Chester, PA 19022	www.TransUnion.com

Be sure to review your report carefully. Check to be sure all information is accurate. Look for evidence of fraud—any accounts you didn't open or charges you didn't make. If you find any information you believe is in error, contact the reporting agency immediately to request that the errors be corrected.

Phishing

Phishing attacks on credit unions are on the rise, and First Atlantic wants to make sure that our members know how to identify a scam when they see one. Typically, phishers send an e-mail or pop-up message that claims to be from a business or organization that you may deal with such as First Atlantic, an Internet service provider, online payment service, or even a government agency. The message may ask you to "update," "validate," or "confirm" your account information. Some phishing e-mails threaten a dire consequence if you don't respond, and some e-mails promise payment for participating in a survey. The messages direct you to a website that looks just like a legitimate organization's site. But it isn't. It's a bogus site whose sole purpose is to trick you into divulging your personal information so the operators can steal your identity and run up bills or commit crimes in your name.

Now a new form of online scamming called "Vishing" is becoming more common. It is similar to phishing, but unlike a phishing message, instead of asking you to click on a link to provide financial information, the e-mail asks you to call a phone number.

We suggest these tips to help you avoid getting hooked by a phishing or vishing scam:

• If you get an e-mail or pop-up message that asks for personal or financial information, do not reply. And don't click on the link in the message, either.
• Under no circumstances should you ever enter your account number, PIN or social security number in any form on any Web site that you have accessed via e-mail. 
• Under no circumstances should you ever send any money, either cash, check or by credit card  to anyone promising you that you have won a sweepstakes or inherited money.
• Use anti-virus and anti-spyware software, as well as a firewall, and update them all regularly.
• Don't e-mail personal or financial information.
• Don't give out personal or financial information over the phone unless you are positive that you know who you're dealing with.
• Review credit card and bank account statements as soon as you receive them to check for unauthorized charges
• Be cautious about opening any attachment or downloading any files from e-mails you receive, regardless of who sent them. These files can contain viruses or other software that can weaken your computer's security.
• Forward spam that is phishing for information to spam@uce.gov and to the company, bank, or organization impersonated in the phishing e-mail. If the Web site is impersonating First Atlantic, you should forward the e-mail to phishing@fafcu.com. You also may report phishing e-mail to reportphishing@antiphishing.org.
• If you believe you've been scammed, file your complaint at ftc.gov, and then visit the FTC's Identity Theft website at www.consumer.gov/idtheft. Victims of phishing can become victims of identity theft. While you can't entirely control whether you will become a victim of identity theft, you can take some steps to minimize your risk. If an identity thief is opening credit accounts in your name, these new accounts are likely to show up on your credit report. You may catch an incident early if you order a free copy of your credit report periodically from any of the three major credit bureaus. See www.annualcreditreport.com for details on ordering a free annual credit report.

If you have any questions, or are suspicious of any e-mail claiming to be from First Atlantic, please send an e-mail phishing@fafcu.com or call Member Services at 732-380-3600. Don’t let yourself get hooked!

Online Banking Security

At First Atlantic, online security is a top priority. We are committed to providing safe, secure access to your accounts through our free 24-hour Online Banking and have taken all of the precautions necessary to ensure the highest level of protection. You can rest assured that access to your account and your account information is private, secure and confidential.

Secure login to your account

As soon as you sign-on to Online Banking, a secure connection is established, ensuring that no one else can read your information. This secure connection is established using Secure Sockets Layer (SSL) encryption technology.

Beginning with your User ID and PIN, SSL protects all information sent between your browser and our server, by scrambling the information into a secret code that is unreadable to anyone who does not have the key that deciphers it. Only your browser and our server have the key to unlock the code, so that messages can be scrambled (encrypted) and descrambled (decrypted) only by First Atlantic and your browser. The SSL encryption ensures privacy and also ensures that no other Web site can impersonate the First Atlantic Web site or alter any information sent.

Enhanced Login Security

The FFIEC (Federal Financial Institutions Examination Council) is now requiring all Online Banking users to add an extra layer of security to their online accounts. Enhanced Login Security goes beyond password recognition, and is able to actually identify the computer that you normally use. If you are using a different computer (i.e. you are at a friend's house or an Internet cafe), you will be presented with a challenge question that only you will know the answer to. To enroll, simply login to Online Banking, select "User Options", and then "Enhanced Login Security".

Expanded Password Options

Online Banking allows for a password that is up to 16 characters in length, and can accommodate capital and lowercase letters, numbers, and special characters.A secure password is one that is easy for you to remember, but difficult for others to guess. You shouldn't use plain words, birth dates, names of children or pets; these could be discovered by others.A good password should contain at least eight characters to make the probability of the password being guessed unlikely. It helps to vary the types of characters in your passwords, making them even more difficult to guess i.e. using a combination of numbers, capital letters, and special characters like ~!@#$%^& and *

Ensuring a secure session

Once you have logged in to Online Banking, you can determine that encryption is being used and that you are connected to a secure server by looking for two things:

1. Look for the secured lock symbol at the bottom of your browser window.
2. Check for https:// in the URL rather than the normal http://. The "s" following the http means your session is secure.

Encryption Level/Browser Check

With Online Banking, all your account information is protected by 128-bit encryption to maintain the privacy and confidentiality of your data. The strength of encryption is based on the number of possible combinations a lock can have, making 128-bit encryption more secure than 40-bit encryption.

To take advantage of strong encryption technology, you will need to have a secure browser, one that supports 128-bit encryption. If you are not currently using Microsoft Internet Explorer or Netscape Navigator, we urge you to upgrade now. When choosing a browser, please see that you download and install a 128-bit version, the description provided by Netscape or Microsoft will ensure that you get the right one.

Cashier's Check and Money Order Fraud
Due to the increasing capabilities of new technologies and the Internet, counterfeit personal and  business checks, cashier's checks and money orders have become more common in the past few years. The individuals accepting these fraudulent forms of payment are the ones who bear the financial loss.

Here are a few tips to help you stay protected:

• Know who you're accepting the check from. If you receive a check from a stranger, discuss it with us before depositing the check or transferring anything of value. If you're doing business online, try to avoid accepting checks and money orders as payment for an online purchase
• Never take part in a transaction that doesn't seem right. For example, if you receive a check for more than the amount due and are asked to wire the difference to a specific account, most likely the check is a fake.
• Watch out for any "red flags"- if you are asked to send money out of the country, pressured to ask quickly, instructed to keep quiet about the transaction, or if it just seems downright suspicious, do not accept or deposit the check.