Security Center

How We Keep Your Money Safe

1. How We Protect YouDiscover how the security of your information is managed on the MontereyCU computer network and during HomeBanking online sessions.

   Firewalls
   Your account information rests behind a secure firewall, which is monitored 24x7x365 by our security experts to prevent any and all intrusions on the credit union's network.

   Encryption
   We encrypt any sensitive information that you transmit on our web site.  We also encrypt all data that we transmit to any of our 3rd party vendors.  We take these steps to ensure your information remains confidential.

   E-mail
   Secure e-mail is available once you log in to the montereycu.com web site.  You will find the secure e-mail form on the Contact Us link.  Do not use your e-mail program to send us any confidential information, as that method is not secure.  REMEMBER - MontereyCU does not send e-mails requesting personal information.

   Anti-Virus
   Every computer and all e-mail on the MontereyCU network is protected by anti-virus software. Our systems are updated nightly and our e-mail system checks for updates every 15 minutes.

   Multiple-Factor Internet Banking Authentication
   MontereyCU's Internet Banking utilizes multiple factors to authenticate a person who is trying to establish an Internet Banking session.  What exactly does multiple-factor mean?  It means that we use something that a person knows, has, or is when authenticating that that person is a real member and not a fraudster trying to gain unauthorized access to an account.  The use of multiple factors is an integral part of a secure online banking environment.

   Passwords (Personal Identification Number)
   Just because we use a multi-factor authentication system, it doesn't mean that you can be lax in creating a strong password / PIN.  PIN and password refer to the same thing...it is a secret code that you know and use as part of your access to your account information.  Generally a "PIN" is all numeric...our system allows you to make it a "password" by adding alpha characters.  See What steps can I take to maximize security? for more information on passwords and how to create a strong one.

   Anti-Phishing Tools
   Another important part of our HomeBanking authentication process is the establishment of a personalized security image.  This image is created by a member during the HomeBanking security enrollment process.  Each time a member logs onto MontereyCU's HomeBanking server, their personal security image will be displayed...if the member does not see their image, they should not enter any more information and contact the credit union immediately as they may be on a phishing website.

   Timeout
   You are automatically logged off if you are inactive for 10 minutes.  In order to ensure you are the only one looking at your information, you must log in again.

2. Internet Security and Privacy PracticesMontereyCU is committed to providing you with a secure Internet environment.

   World-class security on our site
   MontereyCU is committed to providing a secure Internet environment. Our web site offers 128-bit encryption that protects your information as it is sent across the Internet. We strongly urge you to use a browser that supports this level of security.

   Multiple-Factor HomeBanking Authentication
   MontereyCU's HomeBanking utilizes multiple factors to authenticate a person who is trying to establish a HomeBanking session.  What exactly does multiple-factor mean?  It means that we use something that a person knows, has, or is when authenticating that that person is a real member and not a fraudster trying to gain unauthorized access to an account.  The use of multiple factors is an integral part of a secure online banking environment.

   Anti-Phishing Tools
   Another important part of our HomeBanking authentication process is the establishment of a personalized security image.  This image is created by a member during the HomeBanking security enrollment process.  Each time a member logs onto MontereyCU's HomeBanking server, their personal security image will be displayed...if the member does not see their image, they should not enter any more information and contact the credit union immediately as they may be on a phishing website.

   Why we use cookies
   Cookies are small files deposited on your computer that allow MontereyCU to recognize you while you are on montereycu.com. Cookies are required to maintain a secure Internet session between your computer and montereycu.com.

   Unlike many other companies, MontereyCU does not use cookies to track your Internet use after you log off of montereycu.com. MontereyCU provides links to some third-party sites that may place additional cookies on your computer to ensure you are recognized as a MontereyCU member and to help the companies abide by their contractual agreements with MontereyCU. We recommend you check the privacy policy of any web site you visit before you provide any personally identifiable information.

   How we use your submitted information
   When you submit information as part of an application or transaction on montereycu.com, we will use that information as described in the Online Privacy Policy.

   Updates and effective date
   Any material changes to the Online Privacy Policy, including our Internet Security and Privacy Practices, will be posted on this web site. The effective date of the Online Privacy Policy is August 2009.

3. Privacy NoticeLearn how MontereyCU diligently safeguards your personal information.

   Monterey Credit Union (MontereyCU) recognizes the importance of protecting the privacy of our members and visitors to our website. In general, MontereyCU continues to be committed to protecting the privacy of every member's financial information consistent with State and Federal laws. Specifically, this document describes our policy regarding the treatment of information received about you during visits to this site.

   Click on this link to review MontereyCU's Privacy Notice.

Frequently Asked Questions

1. What steps can I take to maximize security?
   1. Choose your HomeBanking Password / PIN carefully. The ideal password is easy for you to remember and impossible for others to guess. Some tips:
      • Your password must be 6 - 10 characters in length.
      • You may use any combination of letters and numbers — using a mixture is best.
      • Avoid words that can be found in a dictionary.
      • Don't use anything someone else could guess easily, such as your own or a family member's name, birth dates, address, social security number, or phone number.
   2. Memorize your Password / PIN. We ask you to choose a unique PIN. Don't write it down or give it to anyone else. A MontereyCU member service representative should never ask you for your password.
   3. Change your Password / PIN frequently — at least every six months.
   4. Log off when you've finished with a session. You'll be logged off automatically if your connection remains inactive for several minutes, but it's even safer to end the session yourself. This prevents someone from using the browser's "Back" button to view your personal information in your absence.
   5. Protect yourself against identity theft. For more information on this subject, see the other information concerning online security and identity protection that we have posted on this web site or the U.S. Department of Commerce's Identity Theft information site.
2. Is it safe to access my account information over the Internet?

   MontereyCU is extremely conscious of the sensitivity of your data. Our server checks each incoming connection carefully to ensure security before transmitting sensitive data.

3. Which browser should I use for the highest security and best performance on montereycu.com?

   MontereyCU strongly urges our members to use the latest version of any browser that supports 128–bit encryption or higher. While there are numerous browsers available, we will reference only a few of the most popular browsers. The following browsers support 128–bit encryption or higher:

   • Google Chrome
   • Microsoft Internet Explorer
   • Firefox for Windows or Macintosh
   • Safari for Macintosh

   We can't over-emphasize how important it is to stay current with the latest version of any browser that you decide to use.  The latest version will always have the most up-to-date security features

4. What happens if my browser doesn't meet these requirements?

   Our server detects your browser type and version when you log on. If your browser doesn't support the level of security required, you'll see a notice asking you to obtain a new version of the browser, with links to the appropriate download locations. The server won't transmit sensitive data over a connection that's not secure, so until you upgrade, you won't be able to access the members-only section of montereycu.com.

5. How does MontereyCU keep my account information confidential and secure?

   We rely on three lines of defense: your computer, the transmission of information over the Internet, and our own computer systems.

   On your computer we require:

   • Use of a browser that supports not less than 128-bit encryption to be able to gain access to account information or perform transactions.
   • Use of a Personal Identification Number (PIN) before being able to access account information or perform transactions.

   Our HomeBanking system automatically logs you off when there is no browser activity for 10 minutes.  If your secure session is interrupted for any reason, we require you to log on again to make sure it's really you.

   During transmission. Sensitive information is encrypted before transfer between our system and yours.

   On our systems. Your account information does not reside on our web server and is never directly accessible to the Internet. Our web server and databases reside behind a secure firewall. Our firewall is monitored 24 hours per day, 7 days per week, 365 days per year for unauthorized activity by our world-class network security vendor.

6. How can I tell when security is active in a session?

   In most browsers, a symbol appears in the lower right corner of your screen to indicate a secure session. This might be a skeleton key-like symbol or a padlock symbol. If the key symbol is "broken" or if the padlock symbol is "unlocked" or if either symbol is absent, the site is not secure. Also, check the URL address field on the browser — a secure website will usually begin with "https".

7. What is a cookie?

   A cookie is a small text file placed on your hard drive by some web sites as you view them in your browser.

8. Why does MontereyCU use cookies?

   MontereyCU uses cookies to establish and maintain a secure session between our servers and your browser. Our cookie is not used to track your activity after leaving montereycu.com. It doesn't tell us who you are, your e-mail address, any other sites you have visited, or anything else personal. The cookie is only valid during a single session. Each time you log on to the site, we send a new cookie. See our Internet Security and Privacy Practices for more information.

9. What happens if I choose not to accept cookies?

   Since cookies are used to establish and maintain a secure session, you won't be able to access secure areas on montereycu.com.

Tips For Keeping Your Money Safe

1. Guard Your Personal InformationJust taking a few safety steps can greatly increase the security of your personal information.
   • Guard your MontereyCU HomeBanking PIN, and change it regularly. Never select the option to store passwords in your browser as malicious programs can find and transmit them to thieves.
   • Reduce paper bills and statements. Paper-based identity fraud incidents occur at a significantly higher rate than do online-based incidents. When you cut that paper by using HomeBanking, Bill Pay and eStatements - you cut that risk.
   • Review ALL of your accounts regularly. Call the phone number on your bill if you see any unfamiliar transactions.
   • Check your credit report at least once a year for any accounts for which you did not sign up.  By law, you are entitled to receive one free credit report per year from each of the three national credit bureaus: Experian, Trans Union, and Equifax.  We recommend that you stagger your requests or your free credit reports throughout the year.  Make your request from Experian in April, Trans Union in August, and Equifax in December.  This way you won't go an entire year not knowing if someone is applying for credit in your name.  Go to www.freecreditreport.com
   • Protect your computer with a personal firewall. Frequently update anti-virus and anti-spyware software.
   • Verify any suspicious e-mail or Web site with the company by calling a phone number you know to be legitimate, such as one that appears on your bill.
   • Do not reply to e-mail requests for financial information or click on a link within an e-mail message if you suspect the message might not be legitimate.
   • If you are suspicious about any e-mails or web sites claiming to be from Monterey Credit Union, please notify us immediately at (831) 647-1000.

   Visit the National Credit Union Administration's (NCUA) YouTube channel to learn more about Frauds, Scams and Cyberthreats. 

2. Prevent Debit & Credit Card FraudProper safety measures can protect you from debit and credit card fraud.

   Credit and charge card fraud costs cardholders and companies hundreds of millions of dollars each year.

   It's not always possible to prevent credit or charge card fraud from happening. But there are a few steps you can take to make it more difficult for a crook to capture card numbers.

   What you can do

   All major credit card companies constantly monitor account activity for anything suspicious. But no one knows your accounts as well as you do, which is why you should keep a close watch as well.

   To report suspicious activity on any of your credit cards, immediately call the customer service telephone number located on the back of the credit card.

   Tips to prevent debit and credit card fraud:

   • Make sure all of your credit card companies have your current phone number so they can call you when they see something suspicious.
   • If you are contacted about suspicious activity, don't give any information over the phone or through e-mail. Take down the representative's name and call the company back at the number listed on your card or your bill.
   • Watch your statements and online transactions for any purchase, no matter how small, that you didn't make.
   • Shred your monthly statements - many people use their credit card statements for tax purposes, if you do, keep them in a safe place and shred them once you are through with them.
   • ALWAYS shred any unwanted credit card solicitations. To opt out of receiving offers of credit in the mail, call: 1-888-5-OPTOUT.
   • Keep a hard copy of your account numbers, the phone number and address of each company in a secure place.
   • Check your credit report once a year. If you are a victim of fraud, alert each of the three national credit card bureaus, Equifax, Experian and TransUnion.   You can request one free credit report from EACH credit bureau per year by going to www.freecreditreport.com
   • Visit Visa's Security Sense site

   Compromised Checkcard FAQ

   Read the fact sheet regarding compromised CheckCards.

3. Beware of Online FraudLearn about the common types of online fraud, such as phishing and pharming, and how you can protect yourself against these scams.

   Phishing

   "Phishing" involves fraudulent e-mails that appear to come from legitimate sources. These ask customers to verify personal information or link to counterfeit web sites that appear real.

   Watch for e-mails that:

   • Urge you to act quickly because your account may be suspended or closed.
   • Don't address you by name, but use a more generic one like "Dear valued customer."
   • Ask for account numbers, passwords, or other personal information.

   MontereyCU will not ask for sensitive information, such as account numbers or passwords, in an e-mail.

   You can see current phishing scams and examples of the different types of phishing e-mails on the Anti-Phishing Work Group web site at antiphishing.org.

   Pharming

   "Pharming" involves redirecting Internet users to a counterfeit Web site, even when they entered the correct address.

   These bogus sites often look real, but secretly collect any personal information and passwords entered. Users end up at fraudulent sites by having spyware or a virus on their computer, or by sophisticated hacking tricks.

   Watch for:
   Any changes to the log in screen. If you are asked for anything out of the ordinary, do not enter any information.

   Look for two things to know you're safe:

   • A Web site address that begins with "https," which indicates it is a secure site.
   • A padlock icon on your browser's status bar means your information is secure during transmission.

   You'll always see these items when transacting business on montereycu.com.

   Trojans and Spyware

   Trojans and spyware are malicious programs that run undetected on personal computers and allow thieves remote access to your system or information.

   Watch for: 
   E-mail attachments or Internet downloads that end with ".exe" or ".dll" can often contain viruses or Trojans. Never open an attachment unless you were expecting it.

   How to Protect Yourself

   1. Keep your operating systems, Internet browser anti-virus and anti-spyware software up to date.
   2. Scan all attachments before opening, and be careful where you click when browsing unfamiliar Web sites.
   3. Do not enter any information on a Web site if you are asked for anything out of the ordinary.
   4. Finally, remain skeptical. Anything that sounds too good to be true usually is.

   E-mail Scams

   One of the most prolific of all scams is the Nigerian Scam.  There are many different variations of this scam.  It has been perpetrated in person, over the telephone, and by fax.  The occurrence of this scam has exploded with the onset of e-mail communications.  With e-mail, these types of  "make money quick" scams are easy and anonymous for the fraudster; thus, you probably receive this type of e-mail quite frequently.   The Nigerian Scam is real and has caught many, many people unaware, but many of these scams are hoaxes - how do you know?  There are a number of authoritative web sites that can help you figure that out.  One such site is www.snopes.com  The best rule of thumb is to remember that old adage, "If it looks too good to be true, it probably is."

4. Dealing with Identity TheftThere are many questions regarding identity theft. We have compiled a few of these questions and their answers from the Federal Trade Commission.

   What should I do if my personal information has been lost or stolen?

   Taking these steps quickly can minimize the potential for identity theft if you've had personal information stolen.

   Financial accounts: Close accounts, like credit cards and bank accounts, immediately. When you open a new account, place a password on it to help avoid unauthorized access to the account.  Avoid using your mother's maiden name, your birth date, the last four digits of your Social Security number, or your phone number.

   Social Security number: Call the toll-free fraud number of any of the three nationwide consumer reporting companies (Equifax, Experian, or TransUnion) and place an initial fraud alert on your credit reports. An alert can help stop someone from opening new credit accounts in your name. See consumer reporting company contact information.

   Driver's license/other government issued identification: Contact the agency that issued the license or other identification document. Follow its procedures to cancel the document and to get a replacement. Ask the agency to flag your file so that no one else can get a license or any other identification document from them in your name.

   Once you have taken these precautions, watch for signs that your information is being misused.

   If your information has been misused, file a report about the theft with the police, and file a complaint with the Federal Trade Commission, as well. If another crime was committed - for example, if your purse or wallet was stolen or your house or car was broken into - report it to the police immediately.

   How can I tell if I'm a victim of identity theft?

   Review your credit report for inquiries from companies you haven't contacted, accounts you didn't open, and debts on your accounts that you can't explain. Check that information, like your Social Security number, address(es), name or initials, and employers are correct.

   Stay alert for other signs of identity theft, like:

   • Failing to receive bills or other mail. Follow up with creditors if your bills don't arrive on time. A missing bill could mean an identity thief has taken over your account and changed your billing address to cover his tracks.
   • Receiving credit cards that you didn't apply for.
   • Being denied credit or being offered less favorable credit terms, like a high interest rate, for no apparent reason.
   • Getting calls or letters from debt collectors or businesses about merchandise or services you didn't buy.

   What are the effects of identity theft?

   Once identity thieves have your personal information, they can use it in a variety of ways.

   • Changing the billing address on your credit card account. The impostor then runs up charges on your account. Because your bills are being sent to a different address, it may be some time before you realize there's a problem.
   • Opening new credit card accounts in your name. When they use the credit cards and don't pay the bills, the delinquent accounts are reported on your credit report.
   • Opening a bank account in your name and then writing bad checks on that account.
   • Counterfeiting checks or credit or debit cards, or authorizing electronic transfers in your name to drain your bank account.
   • Buying a car by taking out an auto loan in your name.
   • Filing fraudulent tax returns in your name.
   • If they get identification such as a driver's license issued in your name with their picture, they can give your name to the police during an arrest. If they don't show up for their court date, a warrant for arrest is issued in your name.

   What do I do if my identity has been stolen?

   If you find fraudulent or inaccurate information, get it resolved! See Recovering from Identity Theft to learn how. Continue to check your credit reports periodically, especially for the first year after you discover the identity theft, to make sure no new fraudulent activity has occurred.

5. Additional ResourcesA list of other affiliated and non-affiliated sites that contain further information.

   Computer Security

   If you own a computer, chances are, you've heard about computer security. Unfortunately, just knowing about security or having anti-virus software doesn't necessarily mean you're safe.  As the Internet changes and computers get more complex, security will also evolve over time. That's why it's important to keep up with the latest issues regarding computer security.  To help you keep up with some of the latest developments, we've listed several websites that may be of interest to you.

   • California Office of Privacy Protection
   • Antiphishing.org
   • FTC: Identity Theft

   Consumer Computer Security Software Solutions:

   • McAfee Computer Security Software
   • Symantec Computer Security Software
   • Ad-aware Anti-Spyware
   • Spybot Search and Destroy Anti-Spyware

   Other Resources:

   • www.snopes.com - Verify the authenticity of any scam or urban legend
   • Experian - National credit bureau
   • Trans Union - National credit bureau
   • Equifax - National credit bureau
   • Free Credit - Get your credit report free of charge
   • The National Cyber Security Alliance

     There are many good resources for computer security and security software solutions available.  In the interest of space, we have listed only a few.  You can find more by going to www.google.com and search for "computer security", "firewall software", "anti-virus software" or "anti-spyware software". Please note that, Monterey Credit Union neither recommends nor endorses the comments, products or services that these individual websites make, but merely makes this information available to you as a service.

6. Fraud PreventionFraud- Don't Get Spoofed

   If you receive a call or text message from 831-647-1000 indicating fraud on your account, do not give the caller any information, hang up, and report the call to us. Monterey Credit Union will never contact you to ask for your CheckCard PIN or Internet Banking Username / Password. You should NEVER give this information to anyone saying they are from MCU. Contact us at 831-647-1000 during business hours. If after hours you can call our fraud service at (833) 933-1681 and follow up with a call to Monterey Credit Union.

7. Tips to Beat the ScammersDon't get scammed

   Scammers are clever and ruthless and will do anything to get ahold of your personal information and or take your money.

   Here are some tips to avoid being scammed

   • Never give Internet Banking login credentials.
   • Don't send money to someone that had access to your computer remotely for repair or other services.
   • Don't give your personal information in response to a request you didn't expect.
   • Don't send money to someone you have never met in person.
   • Don't send money to family/friend who asks via text message or email.
   • Be aware when receiving an overpayment on something you sold or asked to return money that was credited to you in error.
   • Never pay someone who insists you pay with a gift card.
   • Never deposit a check that you received and send the money back to the sender.
   • Block unwanted calls and text messages.
   • Beware of counterfeit checks.
   • Take your time. Don't let anyone rush you into making a purchase.
   • Be wary of all links and attachments.
   • If you've won a prize, remember, you can't win a contest that you didn't enter.
   • Avoid false loan advertisement or credit repair services.
   • Never send money in response to a job advertisement/offer.

   For additional information, visit Federal Trade Commission  or USA Government to report a scam or fraud.