iBranch! Login FAQ - New Security Enhancements

We take our obligation to protect our members seriously and want to help prevent identity theft and phishing whenever we can. To make your online banking experience as secure as possible, we are introducing a new security feature. After you enroll in this new security system, your logon will be the same as it was before, whenever you log into a computer our system recognizes. The only difference is that now you will have an extra layer of security working behind-the-scenes to protect your account 24/7, even when you are not online.

It is a new security system that adds an extra layer of protection to your online Home Banking account by letting you know you’re at our legitimate Home Banking site.

Letting you know you’re at our legitimate Home Banking site

This security feature will help you distinguish our Home Banking site, iBranch! from a look-a-like. Upon registering for this new security feature, you will select a phrase, which will become a shared secret between you and us. When you see the phrase displayed on the screen, you can be confident that you are at our Home Banking site and that it is safe to enter your password. It is important to make sure that you NEVER enter your password without seeing your personal phrase.

Letting us know it’s you accessing your account

If the security system does not recognize the computer being used when you log on to our Home Banking site, it will ask you to verify your identity by prompting you to enter a secondary password which you’ll establish now through this process. You can register multiple PCs with Florida Commerce Credit Union so that you won’t be prompted for the additional security measures. On subsequent PCs, you’ll sign in first using your secondary password and then you’ll have the choice to check a box to register this new PC.

The increase in threats to the security of personal financial information and funds is causing concern among members, credit unions and regulators. To address these concerns and adhere to the Federal Financial Institutions Examination Council’s suggestion, we are adding an extra layer of security to iBranch! This new level of security helps you guard against fraudulent online activities like “Phishing” (malicious requests for your personal information) and identity theft.

Phishing, (pronounced fishing), is the act of sending an e-mail to a user falsely claiming to be a legitimate enterprise in an effort to scam the user into surrendering private information. The e-mail directs the user to visit a web site where they are asked to update personal information, such as passwords and credit card, social security, and financial institution account numbers that the legitimate enterprise already has. The web site is designed to steal the user’s information, which is often used for identity theft. The e-mail may state something like, “Your account will expire if you do not log on and update your profile.”

When you visit your branch office, you know our faces and we know yours. Our new security feature does the same thing over the Internet. When you enroll, you will establish a secret phrase known only to you. Whenever you log on to your iBranch! account the system will display this phrase so you can feel confident that you are accessing our legitimate Home Banking site. Remember: Never enter your password without seeing your personal phrase.

The security system also checks the computer that you are using to access your Home Banking account; typically you will access your account from one or two computers, such as your work and home machine. The system remembers your computer(s) if you choose to register them. (You must register at least one PC.) If you log on from a computer that has not been registered, the system will take additional steps to verify your identity by using the secondary password you selected.

When you first enroll in the new security feature, you will choose your personal phrase. You will also be asked to provide an e-mail address and cell phone number and decide whether to register your computer. You can choose to change or update the phrase, e-mail address, and cell phone number at any time. You will only be prompted to enter additional information when you use a computer that is not registered, or you forget your secondary password.

When you initially enroll, or anytime you successfully log on to an unregistered computer, you can choose to register the computer you are using. You must register at least one computer location by 1-31-07.

-If you choose to register that computer: You will need to supply your secondary password the next time you log on from that computer. You may want to choose this option if you are using a personal home or work computer.

-If you choose NOT to register that computer: The system will prompt you to supply your Secondary password. You should choose this option if you are using a public terminal. If you forget your secondary password, you can request a one-time password be mailed or texted to your cell phone. When you use that one-time use password to login, you can then update your secondary password for use in the future.

You only need to complete the enrollment process once. Afterwards, it will work automatically. That means you are being protected 24/7 – when you’re online and when you’re not. You’ll know because your secret phrase will be displayed before you enter your password.

Yes, you can change your secret phrase or contact information at any time. To make the change, check the box labeled change two factor settings on the login page.

The system only shows your secret phrase if you log on from a computer that you have registered or if you enter your secondary password.

The system doesn’t recognize the computer you are using to log in. This is to prevent someone with stolen passwords from logging on to your account from a remote location. Since only you know the secondary password you selected, the system will know it is really you.

Yes. There is no limit to the number of different computers you can use or register to log on to for iBranch! However, if you log on from a new computer or a public terminal, you will need to go through one extra step of entering your secondary password. This helps protect you by keeping an unauthorized person from accessing your valuable information.

It is extremely simple. Just use the site as usual and look for your personal phrase at logon.

Yes, you can both use the same computer to log on to your individual accounts. There is no limit to how many people can log on to iBranch! from the same computer.

When someone tries to log on using your account number and password, the system will recognize that they are logging on from a different computer. It will either ask them for a secondary password or send an e-mail containing a one-time password that will need to be entered. Since only you can access your e-mail account to obtain the one-time password, they will not be able to log on.

This might happen in rare cases if you have deleted all cookies on your computer or if you have not registered that computer with the new security system. The additional authentication is a way to validate your identity. The system is allowing you to choose whether you want to use your secondary password or if you’ve forgotten the secondary password, request a one-time password the system will send to the e-mail address that you provided at enrollment. Before entering your secondary or temporary password, make sure that you are going to the legitimate credit union web site. The easiest way to ensure this is by typing our credit union’s URL, www. Floridacommerce.org, directly into your web browser’s address area and clicking on the link to access your iBranch! account. Then, after you correctly enter the password, you should see your phrase. If your phrase is there, you can be confident that you are at our legitimate site.

It’s good that you use anti-virus software and a personal firewall. Be sure that you keep both software programs up-to-date for the best possible protection against viruses, Trojans and hackers. This new security feature protects against other threats, such as stolen user name and password. It works with your other personal security programs, but does not replace them.

You will have to contact your credit union to clear the lockout.

Yes. In fact, your personal information is safer than ever before because the security system is making sure it is really you and not an unauthorized user trying to access your information.

You may receive a box stating that our website now requires two factor authentication. Click yes to accept the “key” and the process will continue. You will receive this warning if you have downloaded the Trace Assure toolbar. Your PC may also ask you to establish a password for your key. This is different than the secondary password that we refer to throughout this document. It is not necessary to select a password for your key, unless multiple people using a registered PC, might have access to your personal account number and password.

Once the new feature becomes available, the online banking application login will only ask for an account number. Your password will be requested on the second screen. The account number and password will be validated. Then, you will be asked to register your computer and complete a simple questionnaire, or select “Not right now, please remind me later” to login immediately. This allows members to complete the registration process at a more convenient time from a trusted computer.

Features of this new security include:

·Registration of your primary or other trusted computer to allow express logon.

·Selection of a known phrase so as to insure that you are on a site you know. The unique phrase is only visible when logging on from a registered computer.

·The ability to logon from other computers using a Security Code or Temporary Key.

·An option to receive an e-mail or text message upon every logon attempt.

You may register as many computers as you wish, but caution must be taken not to register computers accessible by others not authorized to access your accounts (e.g., your local library or at work).

A cookie is data sent to your computer by a web server that records your actions on a particular website. It is a lot like a preference file or a profile. When you visit the site after being sent the cookie, the site will load certain pages according to the information stored in the cookie.

The Known Phrase only appears on a registered computer. It is recommended that you always login from a trusted registered computer. Caution should be taken if you do not see this phrase. If you wish to register additional computers, you will be given a chance to do so after you have entered your Security Code using the virtual onscreen keyboard and mouse or entering a requested temporary key. Note: The Known Phrase may not appear on a previously registered computer if you periodically delete cookies from your PC.

You may need to change your Internet privacy and/or security settings to accept third-party cookies for all sites or, if possible, specifically for this online banking location.

When you login to the online banking application from an unregistered computer, you will be asked if you wish to “Register this computer now” after entering your Security Code using the onscreen keyboard and your mouse. It is that easy!
Note: We do not recommend registering computers accessible by others not authorized to access your accounts (e.g., your local library or work).

No problem, just start the login process and refresh your memory with the Reminder that appears just above the virtual screen keyboard. If the Reminder does not help use the “Click here to Request Temporary Key” located under the onscreen keyboard. A temporary key will be sent to you via text message or e-mail depending on your preference settings. Once you receive this key, log back in with your Account Number, Password and Temporary Key. Note: A temporary key is valid for approximately one (1) hour and can only be used once.

A temporary key entry field is visible if one was requested within the last hour. This field will no longer be visible once you successfully login. You may either enter the temporary key received via e-mail or text message or if you remember your Enhanced Security Code simply enter your Account Number and online banking application password then click continue to reveal your Reminder and Security Code Onscreen Keyboard to login. Note: The use of a mouse is required to select your code’s characters from the onscreen keyboard.

To comply with federal regulatory guidelines, beginning on January 1, 2007, activating this additional level of security will become mandatory for all online banking application members.

At this time, Enhanced Login Security will be disabled and you will need to register the computer(s) again or access the online banking application by using your Security Code or the Temporary Key feature.

If you attempt to login with the wrong PASSWORD an error message will be displayed. Return the login screen to try again. You can attempt to login five times before you online banking application account is frozen.

If your account is frozen, you will need to contact a Member Service Representative to reconfirm your identity and have your account unfrozen.

You should register your computer from both browsers to ensure the secure cookie is detected upon login.

If you would normally be charged for receiving a text message on your cell phone, then you will be charged for receiving login information or temporary keys.

Internet Explorer version 6.0 or higher.