Security & Privacy

Privacy On Our Website

Our Website is designed to provide information to you about how we may serve our customers. Our Website is not designed to collect personally identifying information on our visitors. We may use standard software to collect non-identifiable information about our visitors such as:

• Date and Time our site was accessed
• IP Address (a numeric address given to servers connected to the Internet)
• City, State and Country from which our Website was accessed

This information may be used internally to determine the level of interest created by our site.

If you decide to contact us via email, please keep in mind that email on the Internet is not secure. We cannot guarantee the confidentiality of information sent via email on the Internet. We strongly discourage you from including your social security number, your account number or any other form of personal financial information or identification in your email to us. Your email address and any other information your email header shows about you, such as your name or organization, will be revealed to us in the email. We will use this information only for the specific purpose of responding to your comments or questions. Your email address will not be sold, nor will it be shared with others outside the bank unless we are compelled to do so by law. We reserve the right to change this policy at any time by posting a new privacy policy.

How We Protect You

At Savings Bank, account security is a top priority and we remain as committed as ever by using proven technologies to protect your personal and financial information and privacy. The security of your financial information is one of Savings Bank's most important responsibilities. We maintain our Online Banking platform using stringent information security guidelines and use many lines of defense ensuring that your financial information is always safe and secure.

• Individualized Access ID and Passcode
  You create your own Access ID and Passcode to access your accounts. You are the only one who knows your Passcode. We recommend that you do not use your social security number for your Access ID. You are not allowed to use it as your Passcode. Your Passcode must meet certain requirements to be accepted by our Online Banking.

• Security Questions or Authentication
  We require that you have four Security Questions answered and on file with our Online Banking. You will be asked these questions at various times to verify your identity. The following are some examples of when you might be asked two of your security questions: if you have not logged in to your Online Banking for more than two weeks, if you have made a change or update to your computer, or if you are logging in from a different location or computer than you usually use.

• Timed Log Off
  Our Online Banking automatically logs you off after 15 minutes of inactivity, reducing the possibility of someone accessing your information from an unattended computer.

• High-end Firewalls
  Our Online Banking uses high-end firewalls which protect your information 24 hours a day by blocking unauthorized users.

• Encryption
  All Online sessions are encrypted to ensure your safety and privacy.  Encryption turns your private data into a coded language that becomes unrecognizable before it passes through the Internet.  We employ the strongest forms of cryptography that are commercially available for use Online.  Our 128-bit and 256-bit encryption will read as gibberish to everyone but you and the Savings Bank.

• SSL/TLS
  SSL stands for "Secure Socket Layer." TLS stands for Transport Layer Security and is the successor to SSL.  TLS is still often referred to as SSL certificate security.  All SSL only browsers are no longer supported and TLS 1.1 or 1.2 must be supported to access our secure server. This technology allows users to establish sessions with secure Internet sites, meaning they have minimal risk of external violation. Once inside our Online Banking, our use of TLS technology keeps you and your account information secure.

• Constant Surveillance
  We constantly maintain and monitor security systems to make sure your accounts are secure and safe.

• Additional Security Measures
  Additional security measures may be activated if we are suspicious of any online behavior. We may restrict access to accounts to safeguard your personal and financial information until we speak with you and obtain further identification.

• Technology Updates
  We are constantly updating technology to keep your personal and financial information safe.

From the moment account information leaves your computer to the time it enters our Online Banking, we take numerous steps to ensure that your information is secure in cyberspace. We make sure only authorized people with secure browsers can access our system.

• You must enter your passcode, and we must verify it before you are allowed to access your accounts.
• Only browsers supporting the TLS security protocol with 128 bit or 256 bit encryption can be used to log on to our system.
• Once online, we make sure only you can view any information about your accounts.
• TLS uses a digital signature to make sure that no one can send you false information; your browser will only accept information from our Online Banking.
• TLS also uses the highest level of encryption supported by your browser to encrypt all information before it is sent. This ensures that only the browser that logged on can read any information the system supplies.

Understand Your Responsibilities

At Savings Bank we are committed to helping you keep your financial information safe and secure. This is a shared responsibility so it is important that you understand your role. By following the guidelines as listed below you will not be liable for fraudulent transfers or fraudulent bill payment transactions made via Online and Mobile Banking.

Note: Consumers and businesses have different rights and responsibilities. These differences are outlined below.

CONSUMERS

To preserve your rights you must follow all these guidelines:

• Regularly monitor and reconcile your account transactions to identify any suspicious and/or unauthorized transactions.
• Notify us within 48 hours of discovery if you suspect a fraudulent or unauthorized transaction has occurred. You must provide cooperation and any information regarding the transaction that we request including, but not limited to, a written affidavit. If you do not notify us within the 48 hours, we may only be able to offer partial reimbursement, and if you do not notify us within 60 days, we may be unable to offer any reimbursement.
• Do not disclose your personal account information to others, including your ATM PIN, Online and Mobile Banking access ID or passcode, or any other security credentials used to access your accounts.
• Securely log off from SBMC Online and Mobile Banking by selecting “Log Off” before leaving the computer or mobile device you are banking from.

BUSINESSES

To preserve your rights you must follow all these guidelines:

• Review your account transactions daily to identify any suspicious and/or unauthorized transactions.
• Notify us within one (1) business day of unauthorized or fraudulent transactions posting to your account. You must provide cooperation and any information regarding the transaction that we request including, but not limited to, a written affidavit.
• You and your authorized users must not disclose your Passcode to anyone. If you allow someone to use your Passcode to access your accounts, you are authorizing them to act on your behalf.  You will be responsible for any use of the service by another person if you provide access information to anyone such as a joint account holder, an employee, and/or an aggregation service provider.
• Delete or request that the Bank remove the Online Banking user-names for terminated employees.
• Use a highly secure computer and mobile device for banking. Securely log off from SBMC Online and Mobile Banking by selecting “Log Off” before leaving the computer or mobile device you are banking from. (Tip: Use a dedicated computer for banking)

Online and Mobile Banking Tips

Protecting your personal and financial information is important to us. We have provided a few reminders to keep you protected while using the convenient features of SBMC Online and Mobile Banking.

Use the alert function of Online Banking to help you verify daily account activity
Setting up text and email alerts through online banking can help you frequently track your account activity to make sure nothing suspicious is going on.

Make sure your computer or device is protected with a strong password or passcode
When creating a password or passcode make sure it is not connected to your personal information. Including, but not limited to your name, phone number, birthday, address, or Social Security Number. Change your password or passcode frequently, memorize it and do not share it.

Activate the auto-lock feature on your device
The auto-lock feature will lock your mobile device when it has been inactive for an allotted period of time. Simply put in your passcode to unlock it.

Avoid storing sensitive and personal information on your computer and mobile device
Remember to log off any website or application you are not using and regularly delete text messages and your browser history.

Only download applications from trustworthy sources
Review each application’s privacy policy to see what information the application can access and if they plan to share this information with other parties.

Review social media application settings
Make sure to utilize the privacy settings in social media applications and limit the amount of personal information you post.

Be cautious of using public wireless networks
Because public wireless networks are not always safe, it is best practice to use your personal password protected network especially when making financial transactions and utilizing online banking.

Keep your computer virus protection software and mobile device updated
Updates for your mobile device can help resolve security weaknesses that may be found.

Download Trusteer Rapport to your computer to provide added protection to your online banking sessions
Trusteer Rapport is designed to add another level of security to your online banking session by blocking malicious software (malware) that your anti-virus software might miss. Learn more

Be careful of phishing
Avoid opening links inside emails and text messages and do not open any links from an unknown source. Remember do not give out your personal and financial information over email or text. Savings Bank of Mendocino County will never ask for your personal or financial information via email or text.

Talk to your mobile device provider about additional security features
Some mobile device providers offer remote wiping that will delete all your data if your phone is lost or stolen.

Delete all your data prior to discarding your computer or mobile device
Most mobile device providers have webpages with instructions to properly erase data. Many computers provide a built-in restore process to reset the computer back to the original software it was purchased with. Contact a reputable computer repair company for assistance if needed.

Notify your bank if you suspect that your personal or financial information has been compromised

Trusteer Rapport

Trusteer Rapport is designed to add another level of security to your online banking session by blocking malicious software (malware) that your anti-virus software might miss. Although no anti-fraud software can guarantee 100% protection from fraudsters, we believe that Trusteer Rapport in addition to anti-virus software offers a higher level of protection. Learn more

Fraud and Fraud Prevention

The increased sophistication and rapid growth of fraud continues to be a challenge.

Identify Fraud

• Spyware and Viruses - Spyware and viruses are destructive programs loaded onto your computer without your permission or knowledge. Spyware appears as a legitimate application on your computer but actually monitors your activity and collects sensitive information. Viruses are harmful programs that spread through the Internet and can compromise the security of your computer. Maintaining up-to-date spyware, virus protection software and firewalls help to avoid these risks.
• Pop-Up Advertisements - Pop-ups appear in a separate browser window and when clicked, can download harmful spyware or adware to your computer. While some make legitimate offers, many pop-ups are attempts to obtain your sensitive information. Savings Bank of Mendocino County will never ask you to verify your personal information in a pop-up advertisement.
• Fraudulent Websites - This type of fraud occurs when someone poses as a legitimate company using an imitation website to obtain personal data such as account numbers, and then illegally makes transactions with this information.
• "Phishing Emails" - Phishing or fraudulent emails may contain links to phony websites and may request you share personal or financial information by using clever and compelling language. The email may convey an urgent need to update your information to ensure the security of your accounts. Common types of scams include:
  • Fake online orders/invoices
  • Failed delivery or fake shipment tracking
  • Award Scams
  • Government Grant or Tax Return Scams
  • Online Romance/Dating/Friendship Scams
  • Mystery Shopping Scams
  • Overpayment Scams
  • Service Scams

Report Fraud

Please contact Savings Bank if you feel your accounts with us have been compromised in any way. There are certain precautions we can take to assist you and protect your information. We have Identity Theft packets available for you and will be happy to assist you in any way we can through this process.

• Call us during banking hours – (707) 462-6613.
• Report lost or stolen ATM or MasterCard® Debit Cards during banking hours (707) 462-6613. After hours, please contact (800) 528-2273.
• Stop by your favorite branch.
• If you receive a Phishing email or email scam, do not click on links or respond to the email. Please forward the email to EBD@savingsbank.com.

Prevent Fraud

While Online Banking is safe, as a general rule you should always be careful about giving out your personal financial information over the Internet. Review the following tips to protect your personal information.

• Immediately report lost or stolen credit cards, debit cards and checks.
• Avoid including personal and financial information in any emails.
• Look for the "lock" icon on the browser's status bar before submitting financial information through a website. This sign indicates that your information is secure during transmission.
• Review account statements carefully.
• Never provide payment information on a call that you did not initiate.
• Never give personal information to a stranger who contacts you by telephone, email or other means.
• Be wary of suspicious emails. Savings Bank will NEVER send you an email message requesting confidential information such as your account numbers, social security number, passcodes or PIN.
• Be suspicious if you are asked to deposit or cash a check and immediately give or wire a portion of the funds.
• Always ask for verification or research an individual or company.

Prevent Identity Theft

We take numerous steps to keep your account information secure. However, you must take precautions as well.

• Carry only necessary information with you. Leave your social security card and unused credit cards at home in a safe and secure location.
• Do not provide your social security number to anyone unless absolutely necessary.
• Make photocopies of any vital information that you carry on a regular basis and store them in a secure location.
• Never provide payment information on a call that you did not initiate.
• Never provide personal or financial information in a pop-up online.
• Shred documents containing personal or financial information before throwing away.
• Review your Credit Report annually for suspicious activity or unknown transactions. You can obtain a free credit report directly from Experian, Equifax and Transunion.
• Promptly retrieve incoming mail or have a locking mailbox. Place outgoing mail in a US Postal Service mailbox instead of your home mailbox.
• Go paperless on all billing and financial statements.
• Know your billing and statement cycles and contact the company if you do not receive your normal statement or bill.
• Change your usernames and passwords regularly.
• Keep personal information off of social media.