About Online Banking

Phishing - Internet and Email Scams

Definition - Phishing is an e-mail fraud method in which the perpetrator sends out legitimate looking e-mail in an attempt to gather personal and financial information from recipients. Typically, the messages appear to come from well known and trustworthy Web sites. Phishing, like the fishing expedition it's named for, is a speculative venture: the phisher casts a lure hoping to fool at least a few of the prey that encounter the bait.

For example, a list of people received e-mails supposedly from eBay claiming that the user’s account was about to be suspended unless they clicked on the provided link and updated the credit card information the genuine eBay already had. Because it is relatively simple to make a web site look like a legitimate organizations site by mimicking the html code, the scam counted on people being tricked into thinking they were actually being contacted by eBay to update their account information. By emailing large groups of people, the phisher counted on the e-mail being read by a percentage of people who actually had listed credit card numbers with eBay legitimately, and would reply, thus providing the phisher with personal credit card information.

Sophisticated anti-phishing technologies are now built into all major web browsers (Google Chrome, Internet Explorer, Safari, Opera, and Firefox among others), providing users better protection in a more intuitive way.

Google Chrome, for example, has built-in tools such as phishing and malware alerts that immediately and clearly alert the user attempting to connect to a site that is not legitimate. This tool is more difficult for an attacker to circumvent and does not require any action from the user.

The following tips can also assist you in avoiding a Phishing scam:

  • Coastal Community will never send you an email asking you to verify your PIN/PAC or to confirm your identity. You can confirm with your branch if you receive such an email. Do not reply to any email or pop-up message that asks for personal or financial information; simply delete it.
  • Do not click on a link in the message. You can usually identify a phishing email because the website address shown will re-direct you to another site.
  • Respond to emails from Coastal Community or staff only if you have already established a relationship with them. Never provide account or personal information in an email.
  • Protect your computer with anti-virus software and a firewall, and keep it up to date.
  • Do not email personal or financial information, as email is not a secure method of transmitting personal information.
  • Review credit card and bank account statements as soon as you receive them to check for unauthorized charges.
  • Do be cautious about opening any attachment or downloading any files from emails you receive, regardless of who sent them, as they can contain viruses or other software that can weaken your computer's security.
  • Forward Phishing spam to the organization impersonated in the Phishing email. At Coastal Community, we recommend you contact your branch.

Your PAC for Online & Mobile Banking can be reset online

Members can reset forgotten Personal Access Codes (PACs) or Challenge Question Answers by responding to a series of security questions online--eliminating the need to contact the branch or the Relationship Centre in such an event.

If you have forgotten your PAC or the answers to your Challenge Questions:

•    Click the Forgot your PAC hyperlink on your online banking PAC entry page or the Forgot your answer(s) hyperlink on the Increased Authentication page
•    Verify your identity by providing the security information being asked as well as selecting the correct answers to the multiple choice questions
•    Input a new PAC or Challenge Question answers when prompted

It is of utmost importance that the security questions being asked can only be answered by the intended member. Therefore, security questions are pulled from the member's credit report in a way that does not affect the credit score.

Members continue to have the option of visiting the branch or calling the Relationship Centre (1.888.741.1010) to reset their PAC or challenge questions.

An important reminder from Coastal Community: Changing your PAC on a regular basis and using a numeric code that is difficult to guess are highly recommended security best practices.