Identity Theft Bulletin

E-mail and Internet-related fraudulent schemes, such as "phishing" (pronounced "fishing"), are being perpetrated with increasing frequency, creativity and intensity. Phishing involves the use of seemingly legitimate e-mail messages and Internet Web sites to deceive consumers into disclosing sensitive information, such as bank account information, Social Security numbers, credit card numbers, passwords, and personal identification numbers (PIN's). The perpetrator of the fraudulent e-mail message may use various means to convince the recipient that the message is legitimate and from a trusted source with which the recipient has an established business relationship, such as a bank. Techniques such as a false "from" address or the use of seemingly legitimate bank logos, Web links and graphics may be used to mislead e-mail recipients.

In most phishing schemes, the fraudulent e-mail message will request that recipients "update" or "validate" their financial or personal information in order to maintain their accounts, and direct them to a fraudulent Web site that may look very similar to the Web site of the legitimate business. These Web sites may include copied or "spoofed" pages from legitimate Web sites to further trick consumers into thinking they are responding to a bona fide request. Some consumers will mistakenly submit financial and personal information to the perpetrator who will use it to gain access to financial records or accounts, commit identity theft, or engage in other illegal acts.

Please be assured that Two Rivers Bank and Trust will not solicit any information from our customers over the Internet or by email. We request that when sending emails to the bank that you DO NOT include account names, PIN's, or social security numbers.

Customers who fall prey to e-mail and Internet-related fraudulent schemes face real and immediate risk. Criminals will normally act quickly to gain unauthorized access to financial accounts, commit identity theft, or engage in other illegal acts before the victim realizes the fraud has occurred and takes action to stop it.

Here are some precautionary steps to take:

A financial institution's Web page should never be accessed from a link provided by a third party. It should only be accessed by typing the Web site name, or URL address, into the Web browser or by using a "book mark" that directs the Web browser to the financial institution's Web site.

A financial institution should not be sending e-mail messages that request confidential information, such as account numbers, passwords, or PIN's. Please be sure you report any such requests to your financial institution.

All secure web pages on a financial institution's web site should contain security certificates such as from Verisign or Thawte that are used to authenticate the institution's web pages.

If you are aware of any fraudulent schemes or possible identity theft, please call us immediately at 319-753-9100 or toll free at 888-226-6063.