The North Side Bank is committed to protecting your financial information.  Soon we will be enhancing your online security with the addition of “TWO FACTOR AUTHENTICATION”.  Two Factor Authentication requires the use of a second user ID – in addition to your current logon username and password.  

 You may have recently read or heard something about Two Factor Authentication, because an important deadline is approaching.  Last October, the Federal Financial Institutions Examination Council (FFIEC) issued guidance to banks regarding the need to enhance the level of security required to access their internet banking applications.  The FFIEC also established a mandatory compliance deadline of January 1, 2007.  The North Side Bank will comply with this requirement before year end.

 How will this affect your internet use?  Currently, when you sign on to access your account information, you key in your User ID and a single password (single factor authentication).  Soon, you will be required to add a second identifier (two factor authentication).  This second form of authentication will be the correct identification of a 3-digit number that will change at each sign-on. 

 Each time that you logon to Internet Banking, you will be prompted to provide a new 3-digit number.  This number will be determined by using a unique Matrix card that will be issued and sent to you via e-mail soon. The correct numbers are identified by using the Matrix card and a different set of coordinates at each sign on.  Therefore, you will want to keep your Matrix card handy as it will be necessary to refer to, every time that you plan to logon to Internet Banking.  Also, because your Matrix card contains a unique set of numbers, we recommend that you safeguard this information carefully. 

Soon (BEFORE you receive your Matrix card) you will begin to see the Two Factor box prompt appear on the sign-on screen.  However, you will not be required to provide the new 3-digit number until you receive your Matrix card via e-mail.

We realize that this enhancement will require you to complete an additional step in the process.  However, we also recognize our responsibility to properly safeguard your financial information.  If you have any questions once you review the attached information – or when you receive your Matrix card via e-mail, please call Connie Keel in our Electronic Banking Dept. @ (513) 853-4899.

We appreciate your business.  Thanks for banking with The North Side Bank & Trust Company.

What is two-factor authentication?

The definition of a true two-factor security method requires the use of:

1. Something you know, such as a sign-on ID or password or pin
2. Something you have, such as a digital authentication device, a fingerprint, a swipe cards or a matrix card

Two factor authentication makes theft of your identity more difficult by requiring another layer of proof of your identity. Granted, the added time to input this is a little more inconvenient, but think of it as a seat belt for your bank account. In a little while it will be second nature, creating a great deal more protection for you. 

If at anytime you lose or misplace your matrix you can request a new one by simply clicking the link on the Sign-On page. The link "Request a new matrix. Click HERE:" is located under the "Sign On" button. This will force you back to the e-mail validation form and send you a new randomly generated matrix of code values.

Security Tips

Internet Banking can provide safe and secure delivery of information to you any time of the day. You can improve the security of your accounts by reviewing your account transaction on a frequent basis. Yet, with all the security that we have invested, we cannot control the security of your computer. You have been granted secure access to our site but, if you have malicious software (malware) or spyware installed on your computer, you are at risk. Here are some steps to take improve the security and safety of your internet banking accounts:

Keep your computer up-to-date with the latest security patches. One of the ways hackers and malware authors wreak havoc is through flaws in computer applications and code. That is why Microsoft and others  release dozens of updates each year to shore up holes in their software.

Install a good anti-virus program on your computer. Sometimes, you may receive an email or download a program that is damaging to your computer. A good anti-virus will update itself to the latest threats and halt these programs before they can hurt your computer. 

Install a good anti-spyware program. These days, hackers are not just interested in vandalizing, they want to make money from information they might obtain from your computer. Social Security Numbers and other personally identifiable information have street value and can be useful in identity theft schemes. Programs exist that can steal key strokes, revealing passwords or sites that you visit. A good anti-spyware program can identify this activity and notify you so you can block any information from going out.   

Keep up to date on the latest internet and security threats
http://www.symantec.com

What is Phishing?

The FDIC, in their March 13, 2004 document, "Guidance on Safeguarding Customers Against E-Mail and Internet-Related Fraudulent Schemes" describes Phishing as follows: 

"Phishing involves the use of seemingly legitimate e-mail messages and internet Web sites to deceive consumers into disclosing sensitive information, such as bank account information, Social Security numbers, credit card numbers, passwords, and personal identification numbers (PINS). The perpetrator of the fraudulent e-mail message may use various means to convince the recipient that the message is legitimate and from a trusted source with which the recipient has an established relationship, such as a bank. Techniques such as a false "from" address or the use of seemingly legitimate bank logos, Web links and graphics may be used to mislead e-mail recipients."

In most cases, as in the scheme at hand, a link in the e-mail directs the recipient to a fraudulent site that requests that the recipient "validate" or "update"  their financial or personal information. Often, the fraudulent website looks authentic. However, consumers may notice that the URL is slightly different. 

Please read the current discussions before the House of Representatives Subcommittee on enhancing data security at www.fdic.gov/news/news/speeches/others/spmay1805.html 

NEVER GIVE YOUR ACCOUNT NUMBER OR PIN NUMBER IN RESPONSE TO AN EMAIL.