Security Information

1. Install Security Software – An important tool is an effective virus scanner that is continuously updated online and thus able to detect new viruses. A personal firewall is a program that monitors all incoming and outgoing traffic from your PC and can help protect you against malicious software that may be hiding in suspicious emails or suspicious attachments.
2. Protect Sensitive Data When Sending it Over the Internet – As a general rule, never send sensitive information over open networks unless it is encrypted.
3. Be Sure You Know WHO You Are Dealing With – You should divulge information only if you are certain who is receiving it and what will happen to it. Be suspicious of any departure from the usual routine, such as a request to enter your PIN or password at a time you don’t expect.
4. Be Careful with Sensitive Data and Access Media – Protect your passwords and PIN’s from unauthorized use and never disclose them to anyone. Keep your Social Security card in a safe place instead of carrying it in your wallet.
5. Choose a Secure Password – One way to help safeguard your identity and personal information is through advanced password protection. Here are some suggestions for safer passwords:
   • A good password is at least eight (8) characters long and contains a combination of upper and lower case letters, numbers and special characters
   • Change your passwords regularly
   • DON’T – use your birth date or that of anyone you know, your Social Security Number, account number or names of family members
   • Avoid – Proper names, familiar terms (i.e. terms which can be found in a dictionary) and the repetition of single characters (e.g. AAAAAA, 111111)
6. Only Use Programs From A Trustworthy Source – Don’t download programs from the Internet onto your hard drive unless you can be sure the source is reliable.
7. Use Up-To-Date Program Versions – Use only an up-to-date version of your preferred internet browser and PC operating system. Only in the most recent versions will all known security holes have been filled. Also, you should install these bug fixes or patches as soon as possible to protect your PC from known vulnerabilities.
8. Run A Security Check On Your PC – Before you use your PC to bank online, take a few minutes to run a personal security check. Activate the security features that protect your computer from unauthorized access.
9. Activate The Browser’s Security Settings – Activate the security settings of your Internet browser. You can enhance your security on the Internet considerably just by making intelligent use of your browser’s security options. It is especially important for you to block ActiveX Controls and allow Java applets to run only after confirmation.
10. If It Sounds Too Good To Be True, It Probably Is – Be cautious of unsolicited emails from overseas – it is much harder to prove legitimacy of the organizations behind the emails.

1. Keep security software current. Having the latest mobile security software, web browser, and operating system are the best defenses against viruses, malware, and other online threats.
2. Mobile devices can contain tremendous amounts of personal information. Lost or stolen devices can be used to gather information about you and, potentially, others.
3. Secure your mobile device: Use an auto-lock and a strong passcode to lock your phone.
4. Think before you app: Review the privacy policy and understand what data on your device an app can access before you download it (such as location, social networks etc.).
5. Only give your mobile number out to people you know and trust and never give anyone else’s number out without their permission.
6. If you’re online through an unsecured or unprotected network, be cautious about the sites you visit and the information you release.
7. Limit the type of business you conduct at Wi-Fi hotspots and adjust the security settings on your device to limit who can access your phone.
8. Look for web addresses with “https://”, which means the site takes extra measures to help secure your information. “Http://” is not secure.
9. When in doubt, don’t respond. Fraudulent texting, calling and voicemails are on the rise. Just like email, requests for personal information or immediate action are almost always a scam.

As consumer use of mobile devices continues to climb, cyber criminals are targeting those gadgets more frequently.  According to a report by the Federal Reserve, 52 percent of smartphone users say they have used mobile banking in the past 12 months.

We use industry leading safeguards to protect customer information.  It’s even more important for users to keep safety measures in place on their end to prevent sensitive data from being compromised.  It’s easy to forget your mobile device can be vulnerable, but any device used to connect to the Internet is at risk.

The following steps will help protect your mobile device:

• Use the passcode lock on your smartphone and other devices.  This will make it more difficult for thieves to access your information if your device is lost or stolen.  Considering using find my device functionality to remotely wipe your device.
• If you lose your device contact Highpoint Community Bank to immediately to lock your mobile banking account.  Visit the Customer Support page for available options.
• If you change your phone number, contact Highpoint Community Bank immediately to update your records.  Having your current information is important for us to contact you in the event of a security concern.  Visit the Customer Support page for available options.
• Log out completely when you finish a mobile banking session.
• Use caution when downloading apps.  Apps can contain malicious software and viruses.  Beware of apps that ask for unnecessary permissions.  Download apps only from reputable app stores (Apple App Store, Google play).
• Download the latest updates for your phone’s operating system and mobile apps.
• Avoid storing sensitive information like passwords or a social security number on your mobile device in insecure locations (accessible without a strong password/passcode).
• Be aware of shoulder surfers.  The most basic form of information theft is observation.  Be aware of your surroundings especially when you’re inputting and viewing sensitive information.
• Wipe your mobile device before you donate, sell or trade it using specialized software or using the manufacturer’s recommended technique.
• Beware of mobile phishing.  Avoid opening links and attachments in emails and texts from senders you don’t know.  Also, be wary of ads (not from your security provider) claiming that your device is infected.  These are common attacks used to trick you into granting hackers access to your device.  If you receive account alerts or use text by phone, review and delete them promptly.  As a reminder, we never ask for your identifying information through text, email, or by phone unless you contact us.
• Watch out for public Wi-Fi.  Public connections are not secure.  Consider doing your banking transactions over a private network or using your cellular network.

At Highpoint Community Bank, we work to ensure that all financial transactions, data transmissions, and communications are completed in a secure online environment. Bank with the comfort of knowing you are fully protected all day, every day.

To safeguard all financial and personal information, Highpoint Community Bank:

• Requires both a user ID and a password
• Uses encrypted pages for password sign-on
• Retains all account data in secure Bank systems
• Protects email the Bank receives and guards against non-Bank employees seeing it
• Uses systems of record that protect all financial and personal information and utilize leading security features

Learn more about online security for our personal and business banking.

• Why Do We Ask Questions?

Highpoint Community Bank’s Online Banking security is enhanced with Internet Banking Authentication procedures as recommended by the Federal Financial Institutions Examination Council (FFIEC); this implementation adds an additional layer of user verification for higher risk transactions and activities, such as updating user settings or creating higher risk transfers and bill payments. As you log into your Online Banking account, you will be required to select one of the following identity validation challenges for any higher risk activity or transaction.

• Ask me questions: the system will ask questions based on information listed in public databases
• Call my phone: you will receive an automated phone call and a confirmation code
• Send me a text message: your mobile device will receive an SMS text message with a confirmation code

Please note: the call and text message authentication options will appear only if the system has your phone numbers on file. You can access your contact information by selecting the ‘My Settings’ link and clicking on “Update” under the Login & Security section; you can also contact the Customer Care Center at (888) 422-2280 for assistance in updating your contact information.

Highpoint Community Bank will never send emails requesting customers to disclose or “verify” personal information about their accounts. If you receive a suspicious email, please send it to contactus@us.com. If you need to include sensitive information please use our Secure Email. If you receive a suspicious phone call, or suspect that fraudulent activity is affecting your account, please contact customer support at (888)422-2280 or visit your nearest Highpoint Community Bank branch location

If you become a victim of identity theft, Highpoint Community Bank suggests taking these steps to report it:

Protect Your Credit:

1. If you think you are a victim of identity theft, or that someone may have access to your log-in credentials, immediately notify Highpoint Community Bank at (888)422-2280 . We will help guide you through the necessary steps to protect your accounts and personal information.
2. File a report of identity theft with your local police.
3. You should also contact one of the following credit bureaus below to report the incident, and ask to have a fraud alert placed on your file:
   • Equifax: equifax.com To order a report, call 1-800-685-1111
     To report fraud, call 1-800-525-6285
     TDD 1-800-255-0056
     and write to P.O. Box 740241, Atlanta, GA 30374-0241
   • Experian: experian.com
     To order a report, call 1-888-EXPERIAN, 1-888-397-3742
     To report fraud, call 1-888-EXPERIAN, 1-888-397-3742
     TDD 1-800-972-0322
     and write to P.O. Box 9532, Allen, TX 75013
   • TransUnion: transunion.com
     To order a report, call 1-800-888-4213
     To report fraud, call 1-800-680-7289
     TDD 1-877-553-7803
     fax 1-714-447-6034
     and write to Fraud Victim Assistance Department,
     P.O. Box 6790, Fullerton, CA 92634-6790

Highpoint Community Bank will never send emails requesting customers to disclose or “verify” personal information about their accounts. If you receive a suspicious email, please send it to contactus@us.com. If you need to include sensitive information please use our Secure Email. If you receive a suspicious phone call, or suspect that fraudulent activity is affecting your account, please contact customer support at (888)422-2280 or visit your nearest Highpoint Community Bank branch location

A tax return gives criminals more information than a W2. These completed documents contain personal information, such as social security numbers for both the filers and their dependents. And they list financial data, such as the bank account numbers of those who use direct deposit for their tax refunds.

• Ensure your employer and financial institutions have your current address on file.
• If you don´t receive a tax document, and the sender notes that it was mailed, be on the lookout for the signs of identity theft.
• If it appears that the envelope containing a tax document is already open, increase your identity theft awareness –check your credit reports for unauthorized accounts and other activity.
• Use certified mail if you’re mailing your tax documents to your tax preparer or mailing your tax return.
• Don´t leave a completed tax return unattended at home, especially if you have visitors, roommates or employees working in your home. Also, don’t leave it unattended in your car, briefcase or desk after picking it up from your tax preparer.
• If the IRS rejects your return because it has already accepted one in your name, act quickly. You may be a victim of tax identity theft. Contact the IRS Identity Protection Specialized Unit at 1-800-908-4490.
• Keep all of your old tax returns in a locked safe at home that only trustworthy adults can access.
• Always keep your computer and your protection software up to date. Check for updates to your firewall, virus protection and anti-spyware software.
• Use your own computer to e-file rather than a filing publicly. If your tax preparer is e-filing for you, ask about the computer security measures that are used within the office.
• Create strong passwords for files relating to your taxes and personal information.

Remember to be extra careful around tax time when compiling and circulating a significant amount of your personal information. Also, remember that the IRS will only contact you by mail with issues regarding your tax return. Don´t respond to a phone call or email claiming to come from the IRS–this is likely a phishing attempt to steal your personal information.