Digital Banking Security

Be wary of anyone asking for your Login ID or passwords. If you give out your NBT Digital Banking Login ID or password, you could be putting your NBT Bank accounts at risk.

Always be careful when choosing a password for online or mobile banking practices. You should avoid using the same password for multiple accounts. Never use easily guessable passwords that can be found through open source or social networking sites (e.g. your pet's name, your child's name). The most secure passwords include a combination of letters, numbers and special characters. You should change your passwords on a regular basis.

Be sure to keep your anti-virus and firewall software up to date on your computer. Make sure that you are cautious of offers for "free" anti-virus software. Always choose your software from a reputable company that will update regularly.

Make sure you use secure online websites for transactions and shopping. Always shop with merchants where the websites show signs that look like a lock symbol and "https" in the address bar.

Trojans and spyware are viruses and software that, when installed on your computer or mobile phone, are used by fraudsters to steal personal details.

Just like your computer, mobile phones are vulnerable to viruses, some of which can give fraudsters access to your personal information. Make sure your device has the latest security protection. This may require synching your devices with a computer.

Download and install software updates for your phone from your mobile phone manufacturer.

If you have to send it off for repairs, take steps to ensure your information remains secure.

While storing login information helps you access your account more quickly, it could also allow fraudsters the same advantage. Protect your account information and personal information by logging out of your mobile banking application each and every time and not allowing your device to store the information for your future use. Using Touch ID or other fingerprint authentication-based technology is a secure way to manage and access your account, but as your login ID is still visible it is encouraged to closely guard your screen when logging in.

Before you download or install an application (app) on your mobile device, be sure to review the privacy policy to make sure you understand what data the app may access, store or even share.

Before making a purchase or conducting a transaction on a mobile device, make sure the site is secure. Websites that contain "https:" in the web address mean the sites have taken the extra step to secure your personal information.

Fraudsters and criminals may create fake mobile banking applications that look like NBT Bank or other financial institution's apps but in reality are designed to steal your Online Banker credentials or personal information. Here are a few tips to help you recognize an unofficial NBT Bank Mobile Banking app:

• The developer or author of the application is not NBT Bank.
• The app is being promoted on a third-party web site-somewhere other than the official app store for your mobile device.
• There is a charge for downloading the app. NBT Bank does not currently charge a fee for its Mobile Banking application.

**Do not download or install a NBT Bank Mobile Banking app if you spot any of these warning signs.**

SMiShing is a form of criminal activity using social engineering techniques similar to phishing. The name is derived from "SMS Phishing." SMS (Short Message Service) is the technology used for text messages on cell phones.

Similar to phishing, SMiShing prompts users to share personal information through cell phone text messages. The fraudsters may use a web site URL to capture your information once you click on it, but the use of a phone number that connects to an automated voice response system is also popular.

Do not respond to a text message that requests personal, business or financial information. NBT Bank will never ask you to provide personal or account information this way.

Just like your PC, mobile devices (such as phones and tablets) can be infected by viruses, malware and other programs intended to steal your personal, business or financial information. Protect yourself from these threats:

• Back up your device regularly. Back up your device regularly to ensure your records are stored in a secure location.
• Install anti-virus software. If your device supports traditional anti-virus software, consider installing it and even syncing it with your PC.

These steps will help you restore data in the event you need to wipe the device clean in order to remove a virus or other threat.

If your device is lost or stolen, your personal information could be at risk. Taking steps now to protect yourself will help you act quickly and confidently if the need arises.

• Secure your phone by setting up a password or PIN. Most mobile phones let you set up a password or PIN, requiring that it's entered into your phone prior to use.
• Enable screen-locking. Enable a screen-locking mechanism to lock the device when it's not actively being used.
• Obtain a remote wipe program. Consider a remote wipe program that gives you the ability to send a command to your device to delete any and all data from harm's way.
• Keep good records. Maintain a record of your device's make, model and serial number so that it may be reported if your device is stolen.