Email and internet-related fraudulent schemes, such as "phishing" (pronounced "fishing"), are being perpetrated with increasing frequency, creativity and intensity. Phishing involves the use of seemingly legitimate email messages and internet websites to deceive consumers into disclosing sensitive information, such as bank account information, Social Security numbers, credit card numbers, passwords, and personal identification numbers (PINs). The perpetrator of the fraudulent email message may use various means to convince the recipient that the message is legitimate and from a trusted source with which the recipient has an established business relationship, such as a bank. Techniques such as a false "from" address or the use of seemingly legitimate bank logos, web links and graphics, may be used to mislead email recipients.
In most phishing schemes, the fraudulent email message will request that recipients "update" or "validate" their financial or personal information in order to maintain their accounts, and direct them to a fraudulent website that may look very similar to the website of the legitimate business. These websites may include copied or "spoofed" pages from legitimate websites to further trick consumers into thinking they are responding to a bona fide request. Some consumers will mistakenly submit financial and personal information to the perpetrator who will use it to gain access to financial records or accounts, commit identity theft, or engage in other illegal acts.
Please be assured that Two Rivers Bank and Trust will not solicit any information from our customers over the Internet or by email. We request that when sending emails to the bank that you DO NOT include account names, PINs, or social security numbers.
Customers who fall prey to email and internet-related fraudulent schemes face real and immediate risk. Criminals will normally act quickly to gain unauthorized access to financial accounts, commit identity theft, or engage in other illegal acts before the victim realizes the fraud has occurred and takes action to stop it.
Here are some precautionary steps to take:
A financial institution's web page should never be accessed from a link provided by a third party. It should only be accessed by typing the website name, or URL address, into the web browser or by using a "bookmark" that directs the web browser to the financial institution's website.
A financial institution should not be sending email messages that request confidential information, such as account numbers, passwords, or PINs. Please be sure you report any such requests to your financial institution.
All secure web pages on a financial institution's web site should contain security certificates such as from Verisign or Thawte that are used to authenticate the institution's web pages.
If you are aware of any fraudulent schemes or possible identity theft, please contact us immediately.
