Account Security

Anti-Phishing Tips

Phishing is the illegal practice of tricking someone on the Web in
order to retrieve their sensitive personal information: passwords,
banking information, etc. Most often, phishing takes the form of
fraudulent emails that ask you to "confirm your password",
"verify your account", or "confirm your identity."

1. Be aware of phising scams. Be skeptical about any email that asks you to login through a link in an email. MidWest America will never ask you to login this way . Phishers will often send emails with urgent requests for personal financial information and will include upsetting or exciting (but false) statements in their emails to get people to react immediately. MidWest America will never ask you for personal information of any kind through email and you should notify us immediately if you receive an email of this sort.
2. Regularly log into MidWest Internet Banking or call MidWest Phone Banking for account information and balances. Don't leave it for as long as a month before you check your account. Regularly check your account so that you can ensure that all transactions are legitimate and if anything is suspicious or you don't recognize the transaction, contact MidWest America immediately.
3. Always report "phishing" or “spoofed” e-mails to MidWest America immediately. You can forward the email to callcenter@mwafcu.org. There are many other places that you can report phishing emails to such as:
   • The Internet Crime Complaint Center of the FBI by filing a complaint on their website at http://www.ic3.gov/default.aspx
   • The Federal Trade Commission at spam@uce.gov
   • And remember that when forwarding spoofed messages, always include the entire original email with its original header information intact.
     
     

ATM Safety

1. Don't hesistate to take action if you realize you have lost your debit card. Contact the credit union right away at 800-348-4738, so the number can be blocked and a new card with a different number can be ordered. If you have lost your card during a time when MidWest America is not open, you can have your card blocked to avoid any future usage by calling our MidWest Phone Banking at 260-423-8278 or toll free at 800-847-2278. Follow the prompts to block your card. You can also leave a message on our after hours voice mail; however, any action would not take place until we are once again open for business.
2. Never approach an ATM if anyone is lingering nearby. Never engage in conversations with others around an ATM. Remain in your automobile until other ATM users have left the ATM. Never use an ATM if you see loose or wobbly parts attached to the face of the ATM or a dramatic change in the appearance of the ATM since your last visit. If you feel uneasy, do not use the ATM. Go to another ATM location where you feel safer.
3. Ask us for a new card number if you suspect that your debit card my have been compromised at a merchant, restaurant, or ATM. It's important to change both your card number and your PIN whenever you experience a potential theft of your personal information.

Securely Manage Your MWA Accounts Online

MIDWEST AMERICA FCU HOMEPAGE:
Make sure it says http://www.mwafcu.org/ in the address line.


One trick phishers use is called “spoofing”. The phisher will set up a website that looks exactly like a legitimate one but has a different address. They then trick us into giving them information like account numbers, passwords, social security numbers or logon IDs. Once they have this information, they can go to the real website and use it to steal.

A fraudulent email or link may direct you to a website that looks like ours at first glance, but the address is different. Sometimes the difference is very subtle and hard to catch like http://www.mwafcu.com or http://www.mwfcu.org/ which are only slightly different, but take you to the wrong site.

HOME BANKING:

1. Make sure the address line starts with https://hb.mwafcu.org/
   
   
   There will be more following this in the address line, but this is the most important part and the easiest to look for. If the address does not start with this, you may be at a spoofed site. Notice that the first part of the address “https” is different from the start of the regular website address, “http”. The extra “s” stands for “secure” and means that the information is sent over a “secure socket layer” connection.
2. Make sure there is a closed padlock in the frame surrounding the web page. This is also an indicator that the information is being transmitted with a “secure socket layer” connection. Sometimes phishers will put a picture of a closed padlock in the web page to trick you into thinking it is secure. Remember that it must be in the frame around the web page to mean, “secure socket layer”.
3. You can check the digital certificate. A Digital Certificate is issued by a Certificate Authority that certifies that a business and a particular website are connected, just like a photo on your driver's license connects your identity with your personal details. The Certificate Authority called VeriSign attests that the website hb.mwafcu.org belongs to Midwest America FCU and Midwest America FCU is a real business. To view the digital certificate, you can either click on the VeriSign logo on the left of the home banking log in screen, or click on the closed padlock on the website frame.
4. When logging in to home banking, make sure the picture and phrase you selected during set up are correct. If they are not correct, you may be at a spoofed site because phishers do not know what you chose.