Security

We take necessary steps to protect and address our customer’s sensitive information. Our Online Security Policy generally describes how we collect, share, use, and protect your information. The terms “we,” “our,” “Bank,” and “us” in this Policy refer to Citizens Community Federal and/or its affiliates, divisions, or subsidiaries. If you are a customer who has opened an account or obtained a financial product or service from us for personal, family, or household purposes, our Privacy Notice may apply to you as well and further explains how we may use your information.

 By using our site, you are accepting the practices described in this Online Security Policy.

Browsing

For the most part, while browsing our site, we will neither require nor collect personally identifiable information. You can browse our site and review our services without having to submit such information.

Electronic Communication

Forms of communication such as, e-mail, text messaging, social media, online chat, or similar electronic communication are essentially insecure. Try to limit sensitive personal information (such as your Bank account number) via e-mail or similar method.

When you send an e-mail or other electronic communication to us, you are communicating with us electronically and consent to receive reply communications from us or our providers electronically. We may retain the content of the e-mail, or other identifiers and our response in order to better service your needs and for legal or regulatory reasons.

Security

We use security measures that comply with federal and state laws to protect your personal information. These include device safeguards and secured files and oversee our third party vendors to ensure information remains confidential.

If your account information is incomplete or inaccurate, please call or write to us at the telephone numbers or address on your account statements, online or other account materials.

Here are just a few of the safeguards we have in place to help ensure your personal security when visiting us online:

Your Password – We’ll ask you to develop a secret password that only you will know. Only then will you be able to review your personal information about your account. 

Our Privacy Policies – Our entire staff is dedicated to protecting the personal privacy of you, our customer. We have stringent privacy policies in place, and have instituted bank-wide measures to ensure that they are strictly observed.

Encryption Software – “encryption software” makes it possible to scramble a message between two parties (you and your bank), and this “scrambling” protects your account information so it can’t be intercepted and read by a third party.

We will never send electronic communication to you requesting sensitive personal information or account information. We will never ask you to “verify” information. We will never ask you to click on a special site link to do so. While emails of this nature may look like they are from us, and even use our logo, they are most likely a “phishing” scam. Phishing scams are emails in which identity thieves want you to “verify” information or otherwise divulge personal data. If you suspect a fraudulent electronic communication, please contact us at 1-800-590-9920.

For your account protection, please logoff when you have completed your Online Banking session.

Find tips to avoid identity theft.

Updates to Policy

Changes to this Policy are made periodically. Please review this Policy frequently and remain informed about any changes. Your use of our Site constitutes your acceptance of any amendments to and the most recent versions of this Policy. 

Information We Can Collect

When you visit our site, information can be automatically collected from you. This information may include, but is not limited to: Internet Protocol address, type and version of Internet browser software, date time, and duration of your site access.

Cookies are small text files that are placed on your computer to distinguish you from other visitors and are standard practice among websites to collect and track information. You can choose to have your browser warn you every time a cookie is being sent to you and choose not to accept them. You can also delete cookies from your computer at any time.

We may use these technologies on our Site to verify your identity, remember personal settings and offer your additional options to enhance your experience. We may also use them for some types of marketing. Cookies used for tacking advertising effectiveness do not collect personally identifiable information.

Identity Theft is a form of stealing someone’s identity in which someone pretends to be someone else by assuming that person’s identity, typically in order to access resources or obtain credit and other benefits in that person’s name.

Types Of Identity Theft

• Dumpster Diving – Thieves rummage through trash cans for pieces of personal information that they can use or sell.
• Mail Theft – Thieves steal from unattended/unlocked mailboxes to obtain pre-approved credit offers, bank statements, tax forms, and/or convenience checks.
• ATM Theft, Skimming – Thieves secretly attach electronic devices on an ATM to capture numbers when customers swipe their cards. This may include a tiny camera to record the PIN number a customer enters for the transaction.
• Spyware/Malware – Cyber-thieves use a software application that can be remotely installed on your computer without you knowing. This snoopware allows the thief access to everything you do online. Be wary of email attachments and websites you don’t know.
• Online Data – Thieves have purchased sensitive personal information about someone (e.g., name, address, phone numbers, Social Security Number, birth date, etc.) from an online broker.
• Email Fraud and Phishing Scams – Emails in which identity thieves want you to “verify” information or otherwise divulge personal data.

Tips To Avoid Identity Theft

When creating passwords and PINs (personal identification numbers) do not use any part of your Social Security number, birth date, middle name, spouse’s name, child’s name, pet’s name, mother’s maiden name, address, consecutive numbers, or anything that a thief could easily deduce or discover.

Store personal information in a safe place and shred or tear up documents you don’t need. Destroy credit card receipts, copies of credit applications, insurance forms, bank checks and statements, expired credit cards and credit offers you get in the mail before you put them out in the trash.

Order a copy of your credit report from the three credit reporting agencies every year and make sure all the information is correct especially your name, address, and Social Security number. Look for indications of fraud, such as unauthorized applications, unfamiliar credit accounts, credit inquiries and defaults and delinquencies that you did not cause.

Never give your credit card number or personal information over the phone unless you have initiated the call and trust that business.

Shred all old bank and credit statements and “junk mail” credit card offers before trashing them. Use a crosscut shredder. Crosscut shredders cost more than regular shredders but are superior.

Emails requesting personal information, or to verify an account, is usually a scam. Do not open an email that is offering a prize or respond to an email that states your bank needs to verify/re-open a service within a specific time or close your account.

Make sure your computer has virus and spyware protection programs installed, and keep up with software updates. Before entering username and password information, make sure the website’s URL begins with “https” rather than “http”. (It’s okay if a site’s homepage begins with “http”, but “https” should be present on pages where you log on.)

Identity Theft Repair Process

Step 1

A fraud alert lets creditors know to contact you before they open any new accounts or change your existing accounts. Contact any one of the three major credit bureaus using the information listed below; the company you contact is required to notify the other two, which will place an alert on their versions of your credit report as well.

• Equifax – 800-525-6285
• Experian – 888-397-3742
• Transunion – 800-680-7289

Step 2

If you do find suspicious activity on your credit reports, call your local police or sheriff’s office and file a police report of identity theft. Get a copy of the police report. You may need to give copies of the police report to creditors to clear up your records. You may also wish to file a complaint online with the FTC or 1-877-ID-THEFT (438-4338). Your complaint will be added to the FTC’s Identity Theft Data Clearinghouse, where it will be accessible to law enforcers for their investigations.

Step 3

Print and complete the Affidavit found here.

Step 4

Contact other Agencies you may need to advise of your identity theft. Some of these organizations include Insurance Carrier, Postal Inspection Service, Department of Motor Vehicles, Social Security Administration, Utility Service, and U.S. Department of State.

Step 5

Once you have completed the steps above, be attentive in checking your credit reports and monitoring your account statements.

Social Engineering

Social Engineering is the practice of deceiving someone, either in person, over the phone, or using a computer, with the express intent of breaching some level of security either personal or professional. Social engineering techniques are considered con games which are performed by con artists. The targets of social engineering may never realize they have been victimized.

Be suspicious of unsolicited phone calls, visits, or email messages from individuals asking about personal or other internal information. If an unknown individual claims to be from a legitimate organization, try to verify his or her identity directly with the company.

• If you are unsure whether an email request is legitimate, try to verify it by contacting the company directly
• If you need to update your information online, use the normal process you’ve used before, or open a new browser window and type in the website address of the legitimate company’s account maintenance page.
• If you’ve been victimized by a spoofed e-mail or web site, you should contact your local police or sheriff’s department, and file a complaint with the FBI’s Internet Fraud Complaint Center.