General Online Safety
Take precautions to safeguard your financial information online
In today's high tech world, we are able to do things more quickly and conveniently electronically. With this increase in speed and convenience also comes increased risk. Every day, unscrupulous individuals are developing new scams targeting the unsuspecting public.
At Dupaco, the security of our members' information is a priority. We are strongly committed to the safety and confidentiality of your personal financial information. We also want you to take measures to protect yourself from fraud. Ultimately, if you notice suspicious account activity or experience security-related events, please contact the credit union immediately at (563) 557-7600 / 800-373-7600.
Following the guidelines below can help keep your account information safe in cyberspace
Follow these general guidelines for staying safe online. And make sure you share them with children in your household as well. What may seem like harmless online activity can in fact be quite dangerous.
- Monitor account activity. Regularly check your accounts online and report any unauthorized transactions to Dupaco right away. Sign up for free text and e-mail alerts on your accounts through Shine Online Banking to alert you of large purchase transactions, credit card transactions, or other account activity that may warrant your attention.
- Set good passwords. A good password is a combination of upper and lower case letters, numbers and symbols that do not contain sequences or repeated characters. Don’t use information that can be guessed, like your birth date or Social Security number. Change your password frequently. Don't write it down or share it with others.
- Don't reveal personal information via electronic communication. Emails and text messages can be masked to look like they are coming from a trusted sender when they are actually from someone else. E-mails and text messages are not secure. Information sent via these channels can be intercepted and used by fraudsters. Do not send your personal information such as account numbers, social security numbers, passwords etc. via e-mail or text message.
- Don't download that file! Especially when they are sent by someone whom you do not know, opening files attached to e-mails can be dangerous. They can allow harmful malware or viruses to be downloaded onto your computer. Make sure you have a good antivirus program on your computer that is up-to-date.
- Links aren't always what they seem. Never click on or log in from a link that is embedded in an e-mail message. Criminals can use fake e-mail addresses and make fake web pages that mimic the page you would expect. Rather than clicking on a link in an e-mail, open your internet browser and type the destination web address you know to be valid, such as www.dupaco.com or www.amazon.com, for example.
- Websites aren't always what they seem. Be aware that if you navigate to a website from a link you don't type, you may end up at a site that looks like the legitimate site, when in fact it's not. This is called phishing. Take time to verify that the Web page you're visiting matches exactly with the URL that you'd expect. Cybercriminals have also been known to use web addresses that resemble the names of well-known companies but are slightly altered.
- Log off from sites when you are finished. When you are ready to leave a site you have logged in to, log off rather than just closing the browser window.
Protecting Commercial Accounts
Particularly for members with commercial/business accounts, we strongly recommend periodically evaluating your online risk and security controls, and enhancing security controls where weaknesses are found. Areas to assess may include:
- Online access to business accounts. Who has access to accounts online? Are there dual controls in place as a system of checks and balances?
- Strength of online login credentials. Are usernames and passwords easily guessed? How often are they changed and where are they stored?
- Protection of data. Do you have a firewall in place to help protect against outside intrusion or hackers?
- Termination of access for former employees. Is online account access terminated immediately for former employees?
Dupaco's Practices for Electronic Communication
Dupaco will NEVER solicit you and ask for your member or account numbers, or online banking credentials such as user name or password.
Dupaco will NEVER utilize internet browser pop-ups or advertisements that request you to enter financial information or login credentials.
Dupaco will NEVER contact you and ask for your credit or debit card number, personal identification number (PIN), or 3-digit security code. Please read below for important information about how our credit and debit card fraud monitoring partner, The Members Group, approach customer service calls.
Dupaco’s Fraud Monitoring System
Dupaco utilizes a third-party to help monitor and detect potentially fraudulent activity on Dupaco credit and debit cards. This service is provided by CO-OP Financial Services (CO-OP).
In the case there is suspicious activity on your account, you may receive a call from CO-OP to determine whether transactions on your account are fraudulent. Representatives from CO-OP will identify themselves by saying: "I'm calling on behalf of Dupaco Community Credit Union from the Fraud Department." They will tell you they are calling in reference to your VISA or MasterCard ending in (the last 4 digits of the card). They may ask you to verify the amount of your last transaction or payment. They will NEVER ask for your card number, expiration date, or CVC (security) code.
If you are uncomfortable providing any of the requested information, please hang up and call Dupaco or the number on the back of your card.
Rights and Responsibilities
It is important that you know your rights and responsibilities regarding unauthorized activity of your account(s). With respect to electronic fund transfers, the Federal government has put in place rights and responsibilities for consumers and financial institutions regarding the investigation and resolution of disputes of charges. These rights and responsibilities are described in the Account Information Disclosures you received when you opened your account with Dupaco. This information is also available by calling Dupaco at (563) 557-7600 / 800-373-7600.