Privacy & Security

JUMP TO :

Privacy Statement

• Questions & Answers
• Definitions

Security Awareness

• Unsolicited Customer Contact
• Online Banking Security
• What is Identity Theft?
• How do I Protect Myself?
• Debit Card Protection
• Regulation E: Electronic Fund Transfers
• Business/Commercial Customers are not Covered by Reg-E
• Corporate Account Takeover
• Self-Assessment
• Securing Your Business
• Take Stock
• Scale Down
• Lock It
• Pitch It
• Plan Ahead
• Bank Contacts
• Additional Resources

Terms & Conditions

• Use of Website
• Use of Information and Materials
• Links
• Governing Law
• Limitation of Liability Disclaimer
• Electronic Mail
• Availability

Unsolicited Customer Contact

The First National Bank of Elmer will never contact its customers on an unsolicited basis to request their security logon credentials such as the combination of the customer’s username and password. If you receive a request of this type, do not respond to it. Please call us immediately at 856-358-8141 or e-mail us at to report any activity of this nature.

The First National Bank of Elmer will only contact its customers regarding online banking activity on an unsolicited basis for the following reasons:

• Suspected fraudulent activity on your account;
• Inactive/dormant account;
• To notify you of a change or disruption in service; or
• To confirm changes submitted to your online banking

If you receive an unsolicited contact from The First National Bank of Elmer for any reason not cited above, your identity will be confirmed through a series of security questions and you will always have the option of hanging up and calling The First National Bank of Elmer to confirm that validity of our request.

Remember, The First National Bank of Elmer will NEVER ask for your logon security credentials.

Online Banking Security

The First National Bank of Elmer is committed to protecting your personal information. Our Online Banking uses several different methods to protect your information. All information within our Online Banking uses the Transport Layer Security (TLS) protocol for transferring data. TLS is a cryptosystem that creates a secure environment for the information being transferred between your browser and The First National Bank of Elmer. All information transferred through Online Banking is encrypted with NSA approved cipher suites. In addition to the security features put in place by The First National Bank of Elmer here are some tips on keeping your information secure.

• Never give out any personal information including User Names, Passwords, SSN or Date of Birth
• Create difficult passwords which include letters, numbers, & symbols when possible
• Don’t use personal information for your user names or passwords like Birth Dates & SSN
• Avoid using public computers to access your Online Banking
• Don’t give any of your personal information to any web sites that does not use encryption or other secure methods to protect it

What is Identity Theft?

Identity theft involves the unlawful acquisition and use of someone’s identifying information, such as:

• Name
• Address
• Date of Birth
• Social Security Number
• Mother’s Maiden Name
• Driver’s License
• Bank or Credit Card Account Number

Thieves then use the information to repeatedly commit fraud in an attempt to duplicate your identity which may include opening new accounts, purchasing automobiles, applying for loans, credit cards, and social security benefits, renting apartments and establishing services with utility and telephone companies. It can have a negative effect on your credit and create a serious financial hassle for you.

How do I protect myself?

• Report lost or stolen checks or credit cards immediately
• Never give out any personal information including birth date, SSN or Passwords
• Shred all documents containing personal information, like bank statements, unused checks, deposit slips, credit card statements, pay stubs, medical billings, and invoices
• Don’t give any of your personal information to any web sites that do not use encryption or other secure methods to protect it

For more information about identity theft and other tips on how to protect yourself and your information please visit the following websites.

Caution-By clicking on the links below you will be leaving The First National Bank of Elmer secure website.

• Federal Trade Commission – www.ftc.gov/
• Computer Security – www.onguardonline.gov              
• OCC Types of Consumer Fraud – https://www.occ.gov/topics/consumer-protection/fraud-resources/types-consumer-fraud.html
• United States Department of Justice – www.usdoj.gov/

Debit Card Protection

Debit card usage has increased dramatically in recent years and fraudulent use of debit cards has also increased. We at The First National Bank of Elmer have some suggestions for you for the care and usage of debit cards.

• NEVER give your debit card information when requested by phone, email, or text. We at The First National Bank of Elmer nor any other bank should ever request information from you in this manner. Please contact us if you receive any such a request.
• If available, use the EMV Chip in your card.
• It is a good idea to pay by credit card if your card leaves your sight. An example might be when a waiter takes your card from your table in a restaurant or when ordering. Debit cards are easier to process fraudulent transactions on vs. credit cards.

Regulation E: Electronic Fund Transfers

Regulation E protects individual customers using electronic funds transfers (EFT). Non- consumer accounts are not protected by Regulation E.

What is an EFT?

An EFT is any transfer of funds that is initiated through an electronic terminal, telephone, computer, or magnetic tape for the purpose of ordering, instructing, or authorizing a financial institution to debit or credit a consumer’s account. The term includes but is not limited to:

• Point of sale transfers
• Automated teller machine transfers
• Direct deposits or withdrawals of funds
• Transfers initiated by telephone
• Transfers resulting from debit card transactions, whether or not initiated through an electronic terminal
• Transfers initiated through internet banking and bill

How does Regulation E apply to a consumer using Online Banking and/or Bill Pay?

Regulation E is a consumer protection law for accounts such as checking or savings, established primarily for personal, family, or household purposes. Regulation E provides consumers a means to notify their financial institution that an EFT has been made to their account without their permission. If you are unsure if your account is protected by Regulation E contact us.

Business/Commercial customers are not covered by Regulation E.

As a result, it is critical that business/commercial customers implement sound security practices within their places of business as outlined in this Program to reduce the risk of fraud and unauthorized transactions from occurring.

Good practices can keep business/commercial customer’s information secure.

Corporate Account Takeover

Corporate Account Takeover is a form of identity theft in which criminals steal your valid online banking credentials. The attacks are usually stealthy and quiet. Malware introduced onto your systems may go undetected for weeks or months. Account- draining transfers using stolen credentials may happen at any time and may go unnoticed depending on the frequency of your account monitoring efforts.

The good news is, if you follow sound business practices, you can protect your company:

• Use layered system security measures: Create layers of firewalls, anti-malware software and encryption. One layer of security might not be enough. Install robust anti-malware programs on every workstation and laptop. Keep the programs updated.
• Manage the security of online banking with a single, dedicated computer used exclusively for online banking and cash This computer should not be connected to your business network, should not retrieve any e-mail messages, and should not be used for any online purpose except banking.
• Educate your employees about cybercrimes. Make sure your employees understand that just one infected computer can lead to an account
• Make them very conscious of the risk, and teach them to ask the question: “Does this e-mail or phone call make sense?” before they open attachments or provide information.
• Block access to unnecessary or high-risk websites. Prevent access to any website that features adult entertainment, online gaming, social networking and personal e-mail. Such sites could inject malware into your
• Establish separate user accounts for every employee accessing financial information and limit administrative rights. Many malware programs require administrative rights to the workstation and network in order to steal credentials. If your user permissions for online banking include administrative rights, don’t use those credentials for day-to-day
• Use approval tools in cash management to create dual control on payments. Requiring two people to issue a payment – one to set up the transaction and a second to approve the transaction – doubles the chances of stopping a criminal from draining your
• Review or reconcile accounts online daily. The sooner you find suspicious transactions, the sooner the theft can be

Self-Assessment

Online Banking Business/Commercial customers are strongly encouraged to perform an annual Self-Assessment focusing on their online banking practices and network security. A Self- Assessment will evaluate whether the customer has implemented sound business practices to address the five key principles outlined in the “Securing Your Business” section within this document.

Securing Your Business

Is your company keeping information secure?

Are you taking steps to protect sensitive information? Safeguarding sensitive data in your files and on your computers, is just plain good business. After all, if that information falls into the wrong hands, it can lead to fraud or identity theft. A sound data security plan is built on five key principles:

• Take stock. Know the nature and scope of the sensitive information contained in your files and on your
• Scale down. Keep only what you need for your
• Lock it. Protect the information in your
• Pitch it. Properly dispose of what you no longer
• Plan ahead. Create a plan to respond to security

The following information is provided by the Federal Trade Commission, Bureau of Consumer Protection.

Take Stock

Know the nature and scope of the sensitive information contained in your files and on your computers.

• Take inventory of all file storage and electronic Where does your company store sensitive data?
• Talk with your employees and outside service providers to determine who sends sensitive information to your business, and how it is sent.
• Consider all of the methods with which you collect sensitive information from customers, and what kind of information you collect.
• Review where you keep the information you collect, and who has access to

Scale Down

Keep only what you need for your business.

• Use Social Security numbers only for required and lawful purposes. Don’t use SSNs as employee identifiers or customer locators.
• Keep customer credit card information only if you have a business need for
• Review the forms you use to gather data — like credit applications and fill-in-the-blank web screens for potential customers — and revise them to eliminate requests for information you don’t need.
• Change the default settings on your software that reads customers’ credit Don’t keep information you don’t need.
• Truncate the account information on any electronically printed credit and debit card receipts that you give your customers. You may include no more than the last five digits of the card number, and you must delete the card’s expiration date.
• Develop a written records retention policy, especially if you must keep information for business reasons or to comply with the law.

Lock It

Protect the information that you keep.

• Put documents and other materials containing sensitive information in a locked room or file cabinet.
• Remind employees to put files away, log off their computers, and lock their file cabinets and office doors at the end of the day.
• Implement appropriate access controls for your
• Encrypt sensitive information if you must send it over public
• Regularly run up-to-date anti-virus and anti-spyware programs on individual computers.
• Require employees to use strong
• Caution employees against transmitting personal information via e-mail.
• Create security policies for laptops used both within your office, and while traveling.
• Use a firewall to protect your computers and your
• Set “access controls” to allow only trusted employees with a legitimate business need to access the network.
• Monitor incoming Internet traffic for signs of security
• Check references and do background checks before hiring employees who will have access to sensitive data.
• Create procedures to ensure workers who leave your organization no longer have access to sensitive information.
• Educate employees about how to avoid Phishing and phone pretexting

Pitch It

Properly dispose of what you no longer need.

• Create and implement information disposal
• Dispose of paper records by shredding, burning, or pulverizing
• Defeat “dumpster divers” by encouraging your staff to separate the information that is safe to trash from sensitive data that needs to be discarded with care.
• Make shredders available throughout the workplace, including next to the photocopier.
• Use a “wipe” utility programs when disposing of old computers and portable storage devices.
• Give business travelers and employees who work from home a list of procedures for disposing of sensitive documents, old computers, and portable devices.

Plan Ahead

Create a plan for responding to security incidents.

• Create a plan to respond to security incidents, and designate a response team led by a senior staff person(s).
• Draft contingency plans for how your business will respond to different kinds ofsecurity incidents. Some threats may come out of left field; others — a lost laptop or a hack attack, to name just two — are unfortunate, but foreseeable.
• Investigate security incidents
• Create a list of who to notify — inside or outside your organization — in the event of a security breach.
• Immediately disconnect a compromised computer from the

The First National Bank of Elmer Contacts

You are protected in a variety of ways when you use Internet Banking; however, it is important to contact The First National Bank of Elmer in the event you that your company’s online access has been compromised. Also, report any unauthorized or unexpected transactions immediately.

Your account is protected against fraudulent transactions in a number of ways, so monitor your account balances and transactions frequently. If you want to report suspicious activity in your account(s), or if you have questions about the security of your account(s), you can call us at: 856-358-8141 or e-mail us at

The security of your company’s money and identity is as important to us as it is to you. Let’s work together to protect it.

Additional Resources 

The following links are provided solely as a convenience to our Business/Commercial Online Banking customers. The First National Bank of Elmer neither endorses nor guarantees in any way the organizations, services, or advice associated with these links. The First National Bank of Elmer is not responsible for the accuracy of the content found on these sites.

• Avoiding Online Scams: https://www.consumer.ftc.gov/topics/online-security
• Avoiding Social Engineering and Phishing Attacks: http://www.us-cert.gov/cas/tips/ST04-014.html
• Computer Security: https://www.consumer.ftc.gov/articles/0009-computer-security
• Phishing: https://www.consumer.ftc.gov/articles/0003-phishing
• Consumer Advisories: https://www.ic3.gov/Home
• Consumer Threat Alerts: http://home.mcafee.com/consumer-threats-signup
• OCC Consumer Advisories: https://www.occ.gov/
• US Cert: https://www.us-cert.gov/ncas
• StaySafeOnline: http://www.staysafeonline.org/tools-resources/tip-sheets