Security Statement
This Internet Banking System brings together a combination of industry-approved security technologies to protect data for the bank and for you, our customer. It features password-controlled system entry, a VeriSign-issued Digital ID for the bank's server, Secure Sockets Layer (SSL) protocol for data encryption, and a router loaded with a firewall to regulate the inflow and outflow of server traffic.
Secure Access and Verifying User Authenticity
To begin a session with the bank's server the user must key in a Log-in ID and a password. Our system, the Internet Banking System, uses a "3 strikes and you're out" lock-out mechanism to deter users from repeated login attempts. After three unsuccessful login attempts, the system locks the user out, requiring a phone call to the bank to verify the password before re-entry into the system. Upon successful login, the Digital ID from VeriSign, the experts in digital identification certificates, authenticates the user's identity and establishes a secure session with that visitor.
Secure Data Transfer
Once the server session is established, the user and the server are in a secured environment. Because the server has been certified as a 128-bit secure server by VeriSign, data traveling between the user and the server is encrypted with Secure Sockets Layer (SSL) protocol. With SSL, data that travels between the bank and customer is encrypted and can only be decrypted with the public and private key pair. In short, the bank's server issues a public key to the end user's browser and creates a temporary private key. These two keys are the only combination possible for that session. When the session is complete, the keys expire and the whole process starts over when a new end user makes a server session.
Router and Firewall
Requests must filter through a router and firewall before they are permitted to reach the server. A router, a piece of hardware, works in conjunction with the firewall, a piece of software, to block and direct traffic coming to the server. The configuration begins by disallowing ALL traffic and then opens holes only when necessary to process acceptable data requests, such as retrieving web pages or sending customer requests to the bank.
Using the above technologies, your Internet banking transactions are secure.
Security Tips
Anyone can fall prey to fraud and identity theft, but there are ways you can minimize your risk.Keep your private information private.
- Never give out personal financial information online or over the phone unless you have initiated the contact
- Do not include information such as your Social Security Number on your pre-printed checks.
- Keep your Social Security Card, birth certificate and other personal identification in a safe place.
- Do not keep Personal Identification Numbers (such as your ATM card PIN) and online passwords in your wallet or purse.
- Avoid using easily guessed or learned information as your password or PIN.
- Do not provide your PIN or other access codes to anyone.
- Report lost or stolen checks, cards, deposit tickets or statements immediately by calling the Pennstar Bank Call Center at 1-866-478-2772.
- Store new and cancelled checks in a secure place.
- Shred unnecessary financial documents.
- Do not write your account number items that may be thrown away later.
- If you stop receiving bills, statements, or if a bill is not received when expected, contact the issuing company immediately.
- Send outgoing mail from a secured mailbox or a post office; try to avoid leaving outgoing mail in your home mailbox.
- Tear up or shred all unwanted pre-approved offers for credit cards or loans.
- When you're finished with any secure online session (such as Pennstar Online Banker), always remember to log off or close your browser window.
- Review the privacy policies of web sites before you make purchases on them.
- Pay close attention to the URL (web site address) of the site you are visiting to make sure it is actually the site you believe it to be.
- Review your account statements on a regular basis. Balancing your accounts against your monthly statements will help you notice any discrepancies that could indicate fraudulent activity.
- Online or telephone account review features are good ways to watch for fraudulent activity on your accounts.
- Report any suspicious activity and unauthorized charges on your accounts immediately.
- Request and review your credit report at least annually.
If you feel that you may be a victim of identity theft, contact the Federal Trade Commission's Identity Theft Hotline toll-free at 1.877.ID.THEFT (1.877.438.4338), or visit the U.S. Government's central web site for more information about identity theft at http://www.consumer.gov/idtheft
Equal Housing Lender | Copyright 2008 © NBT Bancorp All Right Reserved