Unity Credit Union - Online Security

We understand Online Banking makes managing your finances easy and convenient. However, there are measures you should take, and best practices you should follow, whenever you go online to access your accounts. Your online security is our priority, and we are proud to offer security tools and safeguards for our members to use. However, security is a two-way street, so you also play a key role in keeping your financial information safe and secure.

OUR PROTECTIONS
PASSWORD PROTECTIONS

Our Online Banking system and Unity Credit Union Mobile App are safeguarded with industry-leading security capabilities, including strong fraud prevention, cyber security features and high-risk transaction protections to ensure that your transactions are secure while data is transmitted between your device and our banking server.

Click the Tabs at the top to read more about what we offer.

There is a maximum number of attempts to input the password for your account. If the number of failed attempts exceeds this number, your account will be locked. This means that if someone is attempting to access your account, the number of tries is limited, the account will be locked, and can only be unlocked by calling us at 1.306.228.2688.

In addition to your username and password, your Online Banking account is protected with Two Factor Authentication (2FA), sometimes also referred to as Two-Step Verification (2SV), or as a form of One Time Passwords/Passcodes (OTP). High-risk transactions may require you to reauthenticate that you are the owner of the account. Such high-risk transactions may include adding a bill payment vendor, adding an e-Transfer recipient, or changing your personal information.

*Unity Credit Unions offers the ability to add alerts; however, it is the member's responsibility to set these up and use them*

There are two types of Alerts - Account Alerts and Security Alerts. You can choose to receive alerts using all, a combination of, or one notification type (text, email, and/or push notification).

Security Alerts include notifications when your password is changed, biometric access has been added, too many incorrect passwords/account is locked, successful logins, and when you receive a new Secure Message from Unity Credit Union. As a security measure, there are 3 mandatory Security Alerts that are received by email and cannot be turned off (Password Changed, New Biometric Access, and Password Attempt Lock).

Account Alerts can be set up for regular balance updates, low balance notification, payments, transfers, and any types of withdrawals.

Note: You will need to set up your account alerts for each individual account. Account alerts are unique to each account – different alerts can be set up on different accounts. Only one balance frequency notification can be selected (daily, weekly, or monthly) per account.

HOW TO SET UP ALERTS:

Online Banking:

1. Sign in to online banking on a desktop computer or tablet.
2. Click ‘My Unity Credit Union’ and under Alerts select 'Security' or 'Account'.
3. Select the account.
4. Under each heading, toggle on/off the types of desired notifications (text message, email, push notifications).
5. Set limit and amount if applicable.
6. Click 'Save'.

Mobile App:

1. Sign in to online banking on the mobile app.
2. Tap ‘More’ (located bottom right-hand corner), choose ‘Alert Settings’, and then tap either ‘Accounts Alerts’ or ‘Security Alerts’.
3. Choose the account.
4. Under each heading, tap the type of alert you would like then toggle on/off the types of desired notifications.
5. Set limit and amount, if applicable.
6. Click 'Save'.

The Autodeposit feature allows the money you have been sent (via Interac e-Transfer®) to be automatically deposited directly into your bank account, without having to login to Online Banking or answer security questions.

Note: You can now set up Autodeposit for your email address AND your cellphone number.

How to sign up for Autodeposit:

Online Banking:

1. Sign in to online banking on a desktop computer or tablet.
2. Go to ‘Transfers & Payments’.
3. Under Interac® e-Transfer click ‘Autodeposit Settings’.
4. Click 'Add Autodeposit'.
5. Under Register With, input the cellphone number or email address you would like to register and choose which account you would like your money to be automatically deposited into.
6. Agree to the acknowledgement and click ‘Continue’.
7. Confirm your autodeposit details and click ‘Continue’.
8. Enter the one-time password you receive via text or email address.
9. Click ‘Continue’.
10. A verification message will be sent to you via text or email to complete the registration. You will have the option of either completing the registration or declining it.

Mobile App:

1. Sign in to online banking on the mobile app.
2. At the bottom of the screen tap ‘Move Money’.
3. Tap ‘Interac e-Transfer®’ at the top right corner.
4. Tap ‘Autodeposit Settings’.
5. Click the + icon at the top right hand corner of the screen.
6. Under Register With, input the cellphone number or email address you would like to register and choose which account you would like your money to be automatically deposited into.
7. Agree to the acknowledgement and click ‘Continue’.
8. Confirm your autodeposit details and click ‘Continue’.
9. Enter the one-time password you receive via text or email address.
10. Click ‘Continue’.
11. A verification message will be sent to you via text or email to complete the registration. You will have the option of either completing the registration or declining it.

Your accounts can only be accessed by providing the correct login credentials and password. Only you know your password. Our employees do not have this information, nor do they require it from you. We will never ask you for your credentials.

Internet encryption protects your information while it is in transit between your computer and our systems. Encryption ensures that data cannot be read or altered because the information is scrambled. Our Online Banking website and Mobile App uses a 256-bit TLS encryption, enabling you to easily and securely complete banking transactions on your phone, tablet or computer. Encryption ensures that information cannot be read in transit or changed by scrambling the data using a complex mathematical formula. Some browsers can create a more secure channel than others, owing to the 'strength' of their encryption.

To establish a secure connection, verify that the prefix of our website address in your browser reads 'https' (and not simply 'http'). All the browsers we support meet this requirement. If yours doesn't, please download the appropriate encryption support from your browser's supplier.

PROTECT YOUR INFORMATION
SAFE BROWSING

You can take simple, proactive steps to keep your money safe and protect yourself from fraud, scams and other online security threats. From how you choose and manage passwords to the way you monitor your computer or mobile phone activity, you are the principal guardian of your financial security.

It is your responsibility to ensure that your Online Banking and Unity Credit Union Mobile App credentials are protected. Please use the following security practices:

Do not provide account or personal details in an email, as it’s not secure.
Do not follow links from emails to your financial institution’s website. Instead, open your web browser and type in the address that you know is safe and look for 'https' in the address. Always use: https://www.unitycu.ca
Scammers will try scare-tactics – saying your account has been closed or there’s an issue to get you to take immediate action. Contact us to verify these types of messages.

Click the Tabs at the top to learn more.

When visiting a branch, you can feel confident that your money is safe and secure, with the premises adorned by vaults, locked doors, security and surveillance. We are keeping you just as safe when you bank with us online. However, once your information reaches your computer, you have a responsibility to protect it.

Logging In and Out
When you are finished with your banking session, always log out by clicking the "Log Out" button, as opposed to simply closing the browser window. To help protect your information, your online banking session will end automatically if there has been no activity for a period of time. If your session has timed out, no further transactions can be made until you log in again. This time-out feature helps protect your accounts from unauthorized access if your PC is left unattended or if you have forgotten to log out.

Clearing Cookies and Cache
When you spend time on the Internet, your browser stores information, such as the websites you visit, the images and files you view, and your personal information, including passwords and login details. This data is held on your computer's hard drive and is known as 'cache.' Even though you may have logged out and closed your browser, this information may remain accessible. You can protect your data by clearing your browsing history regularly.

Private Browsing
Some web browsers have a feature that allows you to browse the Internet without the browser storing information, such as the sites you visit, the images you see and videos you watch. This feature is sometimes used by people who share the same computer. Private browsing is a temporary option and must be selected in order for it to be activated. Private browsing, however, does not give you immunity to spyware or make you anonymous. It is still possible for your Internet service provider, employer or the websites you visit to track your online activity.

While pickpockets can only target a few people each day, Internet fraudsters cast their nets much wider, using the anonymity and reach of mass emails and fake websites. You can protect yourself from these situations by knowing how to identify and avoid these scams.

We take attempts to defraud our members very seriously. If you receive correspondence that you think may not be from Unity Credit, please report it to us by Telephone or our Contact Us form.

Quick tips to avoid scams:

Never use a link provided in an email or text to access your Online Banking (because we don't send those, scammers do!).
Do not open emails, texts or attachments from unknown sources.
Scan your emails using anti-virus software.
Read before you click! It is important to understand that electronic messaging is not a secure form of communication. Unity Credit Union will never send you an unsolicited email or text message that asks you to provide sensitive personal information like your social security number, bank account number, and credit card information, ID questions like your mother's maiden name or your password.

Understand Phishing and Smishing

Phishing

A common way for Internet scammers to obtain your personal information is through a method called phishing. Usernames, passwords, banking information and credit card details are phished through email or instant messaging. Phishing works by sending communications, which appear to be from your financial institution, but they are not. You are asked, supposedly by your financial institution, to log in to your online banking to verify account information. Often some type of security concern is cited as the issue. The fake email instructs you to click on a link that takes you to a non-legitimate version of your online banking site – one that is largely indistinguishable from the legitimate site – and you'll be asked to enter your credentials.

Smishing

Smishing is similar to phishing in that it is a fraudulent attempt to obtain sensitive information. Smishing is done using text messages purporting to be from reputable companies.

Phishing or smishing messages may include:

Warnings about account closures
Requests to update your information
Offers to register for a new service
Offers for pre-approved credit cards
Free virus-protection programs

Once you click on the link, which directs you to a phishing website, you'll be prompted to enter personal or banking information. Phishing and smishing scams seek personal details, such as your address, social security number or mother's maiden name. The details obtained will then be used for identity theft.

Scam emails or text messages purporting to be from your credit card company or financial institution often have some telling signs, including:

Poor spelling or grammar
Alarmist content, warning that your account will be closed if you don't provide your banking or personal details immediately
Notices that you've won a prize and are required to pay a fee in order to claim it

Never provide personal details or any account details in an email or text message. Electronic messaging is not a secure form of communication.b If you receive a message that you are unsure about, please contact us.

Understand Pharming

Another way for hackers to get their hands on your personals details is by pharming them. Pharming occurs when hackers use a malicious code on your PC, which compromises your computer's host file and redirects you to fake websites. The malware hides the fraudulent URL, cloaking it in the legitimate one that appears in your browser. With pharming, the dishonest redirection of URLs happens even when you type correct URLs directly into your browser, making you think that you're on the correct website when you are not. Once there, you are asked to enter your online banking credentials or account information, which hackers take and use for criminal activity.

Watch for Malicious Software

**Be sure to install anti-virus software on your computer to protect your information, money and privacy. Such software detects viruses and cleans your computer so that harmful viruses do not spread. Set up your anti-virus to run frequent scans and update the software as soon as it is required. Ensure you have real-time scanning of every email and every file you download.**

Malware

Malicious software (malware), spyware, worms and Trojans are the same class of destructive viruses; just with different names. Nobody wants a computer virus. They can steal your personal information, take over your PC and use your computer to attack other people's computers. Your PC can become infected through email attachments, downloading infected content or visiting harmful websites.

Spyware

Spyware is exactly what it sounds like – tracking software that is downloaded to your computer (without your knowledge) when you visit certain Internet sites. Secretly, it gathers information about you and your browsing habits. This information can be trivial or it can include passwords and personal data that you wouldn't want criminals to get their hands on. It can also interfere with user controls and disable legitimate anti-virus programs.

The best way to protect your computer against spyware is smart browsing. Stay away from sites that look unsafe and avoid streaming or downloading content from untrustworthy sources. Many anti-virus products offer targeted spyware solutions that inspect your operating system, installed programs, downloads and files.

Scareware

One of the most common viruses to watch out for is known as scareware. These scams pop-up on your screen and display alarmist warnings, telling you a virus has invaded your computer. Scareware prompts you to download (and often pay for) fake anti-virus software to remove the non-existent viruses. Scareware is a scam that tries to trick you into paying money in exchange for nothing.

You can protect against scareware by keeping your anti-virus software up-to-date and by being judicious about what you choose to download to your computer. You should also familiarize yourself with the interface of your legitimate anti-virus program, so you won't be fooled if one of these pop-ups appears.

It's a good idea to protect and maintain the devices you use to do your banking. This can involve upgrading the software and other practices as outlined here.

Protecting Your Computer

Your computer's operating system needs to be up-to-date in order to defend itself from viruses and malicious software (malware). If one part of your operating system develops a virus, it leaves holes in your computer's security defenses and compromises the safety of the information contained in your computer.

Keeping your software up-to-date is one of the most important ways of staying safe online because it is much harder for viruses to infect an updated operating system and software. Hackers are targeting operating systems with new viruses all the time and software companies combat these efforts with security patches. You should always download the latest security patch as soon as it becomes available.

Your operating system lets you know when updates are available by notifying you there are new security features to download. You can also upgrade your operating system to the latest version available from the manufacturer; however, you should ensure your computer has sufficient hardware capacity to support an upgrade.

Back Up Your Data

To fully eliminate a virus that has infected your machine, the re-installation of your operating system may be required. Protect yourself against the permanent loss of important data by frequently backing up your files on an external hard drive so you'll have the data should you ever have a problem with your operating system.

Install Anti-virus Software

Install anti-virus software on your computer to protect your information, money and privacy. Such software detects viruses and cleans your computer so that harmful viruses do not spread. Set up your anti-virus to run frequent scans and update the software as soon as it is required. Ensure you have real-time scanning of every email and every file you download.

Use Firewalls

A firewall protects your computer and home network from harmful websites and hackers. It sits between your computer and the Internet, scanning information that is being transmitted. It allows for safe browsing, while blocking unauthorized intrusions. Even though you may think you have no information of value on your computer, firewalls also stop your computer from being used by hackers to send malicious software to other computers.

Most computers come with a firewall as part of the standard operating system. However, you can get the maximum protection for your computer by installing additional firewalls and ensuring they are kept up to date.

Protecting Your Smartphone

Browsing the web has never been easier – it's all at your fingertips. Smartphones let you surf, shop or bank wherever you are. Make sure your information stays secure while you're on the move by following these smartphone-safe browsing tips:

Activate your phone's password feature, which locks the screen and prevents anyone but you from accessing your phone. Set up the password feature on your phone with a code that only you know.
Don't connect to unknown networks through Wi-Fi hotspots to make financial transactions.
Beware of smishing – that's phishing on phones through text messages. Never download media or images, or click on text-message links that come from unrecognizable people or phone numbers. Never provide personal details or any account details using any form of electronic messaging because this is not a secure form of communication. If you are unsure, please contact us.
Download apps exclusively from the official source for your smartphone's platform, such as the Apple App Store or Google Play Store.
Install anti-virus software for your smartphone when available and update it frequently.
Install location finding applications, which work with your phone's built-in GPS. These applications allow you to locate and/or remotely erase (or "wipe") data in your phone if it is lost or stolen.
Update your smartphone's operating system as soon as newer versions are available.

Frequently reviewing your paper and/or electronic account statements and registering for our Direct Alerts system ensures that you spot any incorrect or fraudulent transactions as soon as they occur. If your card has been skimmed (when the card's magnetic stripe and PIN are fraudulently copied by embedded devices at ATMs or point-of-sale devices) or unauthorized transactions have been made, you will want to catch this as soon as possible. Everytime you receive an account statement verify you made all the transactions.

Review your statements regularly and set up transaction alerts for your account to help you identify any irregular activities.

Our alert messages will never contain any personal information about you or account and will never ask you to click or download anything.
To learn how to set up alerts, view our Set up Alerts Demo.

Ensure your Online Banking login password is unique – avoid re-using passwords from other sites and services you use.
Choose a password that is easy for you to remember, but difficult for others to guess, and avoid using personal information like phone numbers, birth dates, your pet’s name, etc.
Avoid re-using passwords from other sites and services you use.
Do not select a part of a PIN as part of your password.
Do not write down your password or store it in a file on your computer.
Do not use the auto-save function for usernames and passwords on your browser and device. Consider using protected password management software or another secure system for storing passwords.
Change your password frequently (every 90-120 days).

Never share your password with anyone. We will never ask you for your credentials.