Fraud & Security

• Always protect personal identifying information, such as your date of birth, Social Security number, credit and debit card numbers, bank account numbers, Personal Identification Numbers (PINs) and passwords.
• Never give any of your personal identifying information to any person who is not permitted to have access to your accounts.
• Never give any of your personal identifying information over the phone, through standard email or online unless you have initiated the contact or know and trust the person or company to whom it is given.
• Do you have an account with OKCU? Please only send account questions that contain your personal identifying information via a Secure Message within Digital Banking. Unlike a standard email, you can safely include confidential information related to your accounts when sending a Secure Message. Send a Secure Message in Digital Banking by navigating to the Contact Us tab and clicking Secure Inbox.
• Learn how to send a secure message

A Corporate Account Takeover is the business equivalent of personal identity theft. Hackers, backed by professional criminal organizations, are targeting small and medium-sized businesses to obtain access to their Digital Banking credentials or remote control of their computers. These hackers will then drain the deposit and credit lines of the compromised bank accounts, funneling the funds through mules that quickly redirect the monies overseas into hackers’ accounts.
How to protect yourself against a Corporate Account Takeover (aka Business Identity Theft):

• As a business owner, you need an understanding of how to take proactive steps and avoid, or at least minimize, most threats.
• Apply operating system and application updates (patches) regularly
• Ensure that anti-virus/spyware software is installed, functional and is updated with the most current version
• Have host-based firewall software installed on computers
• Use latest versions of Internet browsers and keep patches up to date
• Do not batch approve transactions; be sure to review and approve each one individually
• Review your banking transactions and your credit report regularly
• Contact your Information Technology provider to determine the best way to safeguard the security of your computers and networks

• Shred any unused checks or checks from closed accounts. Even checks from closed accounts can be an instrument of fraud. Criminals will use them to make purchases, which can affect you. Criminals will even order more checks off closed accounts to continue their fraud scheme.
• Use a Sanford® Uniball® Signo Gel 207 ink pen to write and sign checks. When checks are “washed” by counterfeiters to remove the writing, it is impossible to completely remove this type of ink because the ink is specially formulated to absorb into the fibers of the paper. (This ink pen is recommended by the FBI.)
• Use first initial, last name for preprinted payer information on checks (for example, “J. Doe” instead of “John Doe”).
• Consider substituting your work address and phone number for personal on your checks.
• Request check orders be sent directly to your financial institution to prevent check information stolen from your mailbox.

• Limit the number of credit and debit cards that you carry.
• Cancel all cards that you do not use.
• Review card transactions in Digital Banking frequently and immediately report any discrepancies or unauthorized activity.
• Report lost or stolen cards immediately.
• Notify OKCU prior to traveling.

• Consider investing in a locking mailbox or Post Office Box.
• Promptly remove mail from your mailbox.
• Shred all financial documents and other documents showing personal information.
• Delete all personal information and remove data cards from electronics before discarding.
• Deposit outgoing mail in a post office collection box or take it to a post office instead of leaving it in your doorway or home mailbox, where it can be stolen.

• Memorize your PINs and always keep your passwords protected.
• Change your passwords periodically. Use strong, unique passwords and consider a password manager.
• Do not carry PINs and passwords in your wallet or purse or keep them near your checkbook, credit cards or debit cards.
• If you receive a "Password Expiring" email, do not click the link in the email; go directly to the trusted login page.

• Use antivirus and firewall software that updates and detects automatically. 
• Apply operating system and application updates (patches) regularly
• Only install PC applications from reputable sources such as Microsoft, Filepuma, APK, etc.
• Avoid public wifi and public computers when accessing personal information.
• Don’t open attachments from unknown email sources and delete emails from unknown sources without opening them.
• Block pop-ups.
• Lock your computer or use “standby” mode during breaks and turn off the computer when not in use.
• Use the "HTTPS" version of a website whenever possible. Also be wary of any certificate/security warning prompts displayed when navigating to an HTTPS website, as these could indicate an attempted impersonation of the HTTPS website in question.

• Require a passcode PIN to unlock your smartphone.
• Only install applications from known sources such as the App Store, Google Play, Microsoft, etc.
• Avoid "rooting/jailbreaking" mobile devices. In addition to potentially compromising device security, this can also disable mobile payment services such as Android Pay, Apple Pay and Samsung Pay.
• Review manufacturer and carrier performance history regarding device updates when purchasing a new mobile device such as a phone or tablet. Poor device support can lead to poor device security due to unfixed vulnerabilities.
• Keep your operating system (OS) updated for important security updates.

• Update your privacy settings and make your account private.
• Be cautious of each friend request. Criminals will often create fake accounts or create a duplicate account under the same name as one of your friends.

• Be suspicious of any offer made by telephone, on a website or in an email that seems too good to be true. Beware if you are asked to deposit a check, wire funds, purchase gift cards or invest in an opportunity.
• Before responding to a telephone or online offer, determine if the person or business making the offer is legitimate.
• Think before you click! Do not respond to an unsolicited email or text containing urgent messages, links, or posing as a trusted source such as a financial institution, government agency or major business.
• OKCU will never request your credit card or account information if we have to contact you. The only time we will ask for your information is when you contact us, and we only request information that will identify you or assist us in addressing a problem with your account. If you should receive an email or phone call requesting such information that appears to be OKCU, do not respond and contact us immediately at 405.606.6528 or 877.677.6328.

Always protect your Digital Banking username or password. Never give your login credentials to anyone. OKCU will never request any of your login credentials. These include your username, password or temporary access codes (TACs). If someone is requesting this information from you, call us immediately at 405.606.6528, as it is most likely fraudulent communication.
Follow these additional steps to ensure your Digital Banking information remains secure:

• Frequently review transactions in Digital Banking and immediately report any discrepancies or unauthorized activity.
• Never use public wifi to log on to Digital Banking or any program that has personal information. Criminals are able to collect your personal information when you connect to an open wifi network.
• Use Zelle® as a secure way to send money to friends and family.  Be careful with other person-to-person cash sending apps.
• Enroll in eStatements to avoid financial documents being stolen or lost in the mail. 
• Use Pay a Bill feature to securely pay bills. Most payments are processed electronically. For those that are not, payments are paid from a master account which means a crook will not have access to your account and routing numbers.
• Stop a Payment allows you to request a stop payment on a check or group of checks.
• Keep your profile and contact information up to date.
• Security Preferences allows you to change your password or username, add a passcode and set up Face / Touch ID.
• Set up account, transaction, and security alerts to notify you via text or email when certain activity occurs.
• Use the Secure Inbox to safely message OKCU directly.

Alerts can be set up in Digital Banking to monitor everything from when transactions are processed to when your password is entered incorrectly so that there are never any surprises when it comes to your money.

How to set up an alert:

Once logged into Digital Banking, navigate to the Settings tab. Click Manage Alerts, then Security Alerts. You can choose which alerts to receive and how you’d like to receive them. 

• Log into Digital Banking

All financial institutions collect and share personal information to conduct everyday business. Find out what OKCU does with your information and reasons why we may share your information.

OKCU is committed to online security and privacy through our website and online banking services. We follow strict state and federal guidelines to ensure the confidentiality and security of your data.

OKCU uses the following services: 

• Cisco Secure Email - learn how to open a secure email from OKCU
• DocuSign and DocMagic
• ShareFile

OKCU will never ask for passwords, passcodes or other sensitive account information.

If you’ve sent money to a scammer, act quickly by contacting the company or service you used to make the payment and reporting the transaction as fraudulent. You may still be able to recover your funds.

If you shared sensitive information like your Social Security number, login credentials or other personal details with a scammer, you can still reduce the risk of identity theft by securing your accounts and updating any compromised passwords.