Security and Fraud Prevention

The Internet has made it easier for criminals to deceive individuals into revealing confidential information by clicking on links or attachments that will compromise the security of their computers which ultimately have an impact on Internet banking security. These criminals have continued to use increasingly sophisticated, effective, and malicious methods to fraudulently gain unauthorized access to consumers' Internet banking accounts.

First Enterprise Bank is committed to protecting your personal information. Our Internet Banking and bill payment system uses several different methods to protect your information. All information within our Internet Banking and bill payment system uses the Secure Socket Layer (SSL) protocol for transferring data. SSL is a cryptosystem that creates a secure environment for the information being transferred between your browser and First Enterprise Bank. All information transferred through the Internet Banking and bill payment system has a 128-bit encryption which is the highest level of encryption.

First Enterprise Bank is required under Regulation E: Electronic Fund Transfers to provide certain protections to our customers relative to electronic fund transfers (EFT). As applicable to Internet access, this regulation covers transactions initiated through First Enterprise Bank's Internet banking and cash management channels, to either order, instruct, or authorize the financial institution to debit or credit an account. Transactions may include but are not limited to ACH payments, external transfers, and bill payments.

First Enterprise Bank will ONLY request a portion, never the full content, of a customer's personal information (debit card number, account number, social security number, or password) through email or by phone for account verification. If you ever receive an unsolicited phone call or email claiming to be from First Enterprise Bank requesting your personal and confidential information, please DO NOT respond. Contact us immediately by calling (405) 681-0771. As an additional monitoring control, you should frequently review account statements and online account transaction history to ensure all transactions are correct and authorized.

First Enterprise Bank may request additional information to properly authenticate your identity in order to prevent unauthorized access for password reset requests or other sensitive changes.

Protecting Yourself Online

First Enterprise Bank has implemented strong preventative and monitoring controls within its Internet banking and bill payment system; however, in order to enhance our customer's internal security we recommend our customers implement their own controls to mitigate risks. Examples of controls you may want to consider implementing to mitigate the risks of account takeover and fraudulent account activities are:

• Maintain up-to-date operating system security patches and have installed updated virus/spyware protection software

• Install a Firewall, either software or hardware

• Implement intrusion detection / prevention software or services

• Safeguard your Internet banking authentication credentials

• Use multifactor authentication to protect your account credentials from being compromised

• For business customers, implement dual control for initiating and approving high risk Cash Management transactions such as ACH origination and wire transfers

• Monitor account activity daily via Internet banking account transaction history.

• Review and monitor your checking account, debit card, and credit card statements for unauthorized transactions

• Refrain from opening unsolicited email and attachments

• Refrain from providing authentication credentials to callers claiming to be representing the financial institution

• Refrain from responding to emails requesting confidential information or re-directing you to a website

• Prior to disposing, shred all confidential information on paper and on electronic media

If you notice any suspicious or unauthorized account activity, experience a breach in security of personal information, suspect your login credentials or computer security have been compromised, or for more information please contact First Enterprise Bank's Client Services at (405) 681‑0771.

Mobile Banking - Security Tips

Mobile Banking from First Enterprise Bank is a safe and convenient way for you to stay on top of your finances while on the go. At the same time, it's important to take steps to protect your account information. Here are some tips to help you avoid financial theft while using mobile banking:

• Safeguard your Mobile Banking username and always use a strong password

• Use multifactor authentication to protect your account credentials from being compromised

• Keep your mobile device's operating system up-to-date

• Install the latest version of the FEB Mobile Banking app and only download from the Apple App store or the Google Play store

• Install reputable mobile security software on your Android™ device

• Install and enable software to locate and remotely wipe your mobile device

• If your device has been lost, stolen, or is being replaced, deactivate the device's authority to access Mobile Banking from the FEB Internet Banking website

• Avoid using unsecured Wi-Fi networks such as those found at coffee shops

• Avoid "rooting" or "jailbreaking" your mobile device's operating system

• Always be cautious when clicking links in text messages or emails and remember that First Enterprise Bank will never ask you for your security information

And, again, if you notice any suspicious or unauthorized account activity, experience a breach in security of personal information, suspect your login credentials or mobile device security have been compromised, or for more information please contact First Enterprise Bank's Client Services at (405) 681‑0771.

Identity Theft

Identity theft involves the unlawful acquisition and use of someone's identifying information, such as:

• Name

• Address

• Date of Birth

• Social Security Number

• Mother's Maiden Name

• Drivers License

• Bank or Credit Card Account Number

Criminals then use the information to repeatedly commit fraud in an attempt to duplicate your identity which may include opening new accounts, purchasing automobiles, applying for loans, credit cards, and social security benefits, renting apartments and establishing services with utility and telephone companies. It can have a negative effect on your credit and create a serious financial hassle for you.

How Do I Protect Myself from Identity Theft?

• Report lost or stolen checks or credit cards immediately

• Never give out any personal information including birth date, SSN or Passwords

• Shred all documents containing personal information, like bank statements, unused checks, deposit slips, credit card statements, pay stubs, medical billings, and invoices

• Don't give any of your personal information to any web sites that do not use encryption or other secure methods to protect it.

Online Identity Theft Resources

For more information about identity theft and other tips on how to protect yourself and your information please visit the following websites.

Equifax
P O Box 105069
Atlanta, GA 30349-5069
www.equifax.com
To order a report: (800) 685-1111
To report fraud: (800) 525-6285

Experian
P O Box 2002
Allen, TX 75013-0949
www.experian.com
To order a report: (888) 397-3742
To report fraud: (888) 397-3742

Trans Union
P O Box 1000
Chester, PA 19022
www.transunion.com
To order a report: (800) 916-8800
To report fraud: (800) 680-7289

Debit Card Protection

Debit card usage has increased dramatically in recent years and fraudulent use of debit cards has also increased.

First Enterprise Bank has some suggestions for you for the care and usage of debit cards.

• NEVER give your debit card information when requested by phone, email, or texting. First Enterprise Bank will NEVER request information from you in this manner. Please contact us if you receive any such request.

• It is a good idea to pay by credit card if your card leaves your sight. An example might be when a waiter takes your card from your table in a restaurant or when ordering online. Debit cards are easier to process illegally vs. credit cards.

Senior Fraud Prevention

Senior citizens should be especially aware of fraud schemes targeting their lifestyle and savings. According to the Justice Department, an estimated $3 billion is stolen from seniors each year from fraudsters reaching out with calls, emails, or regular mail promising cash, valuable prizes or good fortune if the recipient sends back a payment for processing fees.

Here are some online resources to help protect against senior fraud:

Forensic Preservation and Recovery - First Steps

There are endless ways that malicious people can use computers for illegal activity. Hacking into other computers, unleashing new viruses, using phishing emails and SMS messages to steal personal information are just a few. If you suspect that your computer may have been compromised, the first steps you take are the most important ones to get right.

Here are a few steps to help you stop an attacker and restore security without damaging any potential evidence that they may have left behind:

STEP 1: Secure the Area - When a computer security breach is suspected the first step is to secure the area around the computer and limit access during the investigation to ensure that any evidence is not altered:

• IMMEDIATELY STEP AWAY from the keyboard and mouse

• Locate and disconnect the network cable from the back of the computer. This is typically a cable connected to what looks like an over-sized telephone plug. If your computer is connected wirelessly, detach it from the wireless network. This is a VERY IMPORTANT step as it will prevent a remotely connected attacker from altering evidence, copying data, or further compromising the computer or network.

• DO NOT shut down or restart the computer.

• DO NOT click on or close any messages or windows.

• DO NOT change anything.

STEP 2: Report the Incident – If your computer is part of a company network, contact your IT team and follow your company’s security breach procedures. If this is your personal home computer, contact a qualified computer technician, preferably one with experience in properly handling security intrusions. If the technician determines that your computer has been compromised by an attacker, contact law enforcement.

If you suspect that your First Enterprise Bank Internet Banking account has been compromised, contact customer service at (405) 681-0771.

STEP 3: Document the Events – While waiting for help to arrive you should document all of the events leading up to the incident. Any information that you can provide will be helpful in determining an appropriate response.

Account Takeover - How to Protect Yourself

Account takeover occurs when someone gains unauthorized access to one or more of your online accounts. Originally a tactic to target businesses, account takeover has become a serious problem for consumers as well.

Account takeover can happen to any online account: bank, retail, social media, or email. Any website where you have a user ID and password is at risk.

The easiest way for a hacker to gain control of an account is by having a weak password. Once a password is compromised, hackers will usually try it on other online services - if it works on your email account, it might work on your bank account. Criminals who use this method to attack your bank account can siphon away money before you realize it. Phishing (covered below) and malware are other ways that hackers can gain control of your online accounts.

The damage done in an account takeover can be considerably greater than that of other frauds. Credit card fraud can be easy to take care of. Generally, you can quickly see the charges, the bank cancels the card, and you get a new one. Account takeover is far more difficult to manage because it can go undetected.

Unauthorized charges and money transfers are just the beginning. If your email account is compromised, it can be used to access and make changes to your other accounts. Ultimately, a takeover could lead to massive identity theft, which can require a lengthy process to resolve.

To protect yourself from account takeover requires a team effort between the bank's security and monitoring and you as a consumer. Here are a few steps you can take:

• Always use strong and unique passwords and never use the same password for more than one service

• Maintain up-to-date operating system security patches and have installed updated virus/spyware protection software

• Install a Firewall, either software or hardware

• Implement intrusion detection / prevention software or services

• Safeguard your Internet banking authentication credentials

• For business customers, implement dual control for initiating and approving high risk Cash Management transactions such as ACH origination and wire transfers

• Monitor account activity daily via Internet banking account transaction history.

• Review and monitor your checking account, debit card, and credit card statements for unauthorized transactions

• Refrain from opening unsolicited email and attachments

• Refrain from providing authentication credentials to callers claiming to be representing the financial institution

• Refrain from responding to emails requesting confidential information or re-directing you to a website

• Commercial customers should consider dedicating a computer solely for financial transactions (for example: no other web browsing, emails, or social media access). This is an FBI-recommended best practice.

Phishing

Fraudsters will commonly use a type of Internet piracy called 'phishing.' In a typical Phishing case, you'll receive an email that appears to be from First Enterprise Bank. In some cases, the email may appear to come from a government agency, including the FDIC. The email will probably warn you of a serious problem that requires your immediate attention. It may use phrases, such as 'Immediate attention required,' or 'Please contact us immediately about your account.' The email will then encourage you to click on a link or button to go to the Bank's web site. In a phishing scam, you could be redirected to a fictitious web site that may look exactly like the Bank's web site. In other situations, it may be the Bank's actual web site. In those cases, a pop-up window will quickly appear for the purpose of harvesting your login authentication credentials. In either case, you may be asked to update your account information or to provide information for verification purposes: your Social Security number, your account number, your password, or the information you use to verify your identity when speaking to a real financial institution, such as your mother's maiden name or your place of birth. If you provide the requested information, you may find yourself the victim of identity theft which can lead to malicious activity such as Internet banking account takeover.

First Enterprise Bank is required through its banking regulators to conduct regular periodic risk assessments of our electronic banking products and services to identify security threats, and controls in place related to internal and external security, changes in customer functionality offered through electronic banking, and actual incidents of security breaches, ID theft, or fraud experienced internally or within the industry. As a proactive measure, we strongly suggest to our business or commercial customers to also perform a periodic risk assessment and controls evaluation related to security of their Internet banking / cash management environment. Special attention should be directed to high risk transactions which involve access to personal financial information or the movement of funds to other parties such as ACH, wire transfers, and bill payment.