Your security is important to us. At BancFirst we want to provide you with the tools and resources to educate you on security and to help prevent identity theft.
What is Phishing?
Phishing (FISHing) is the term coined to describe computer and internet hackers who imitate legitimate companies in email or pop-up messages to entice people into disclosing their bank account numbers, credit card numbers, Social Security numbers, passwords, and/or other sensitive personal information.
Some phishing attacks are viruses and/or "Trojan Horses" to install programs called key loggers on your computer. These programs capture and send out any information that you type to the phisher. If this happens, it's likely you may not be aware of it until you notice unusual transactions on your account.
What is Spoofing?
Spoofing is using technology in pretending to be something it is not. Fraudsters can make their letters, emails and web sites look like those of legitimate companies.
What is Pretext calling?
Pretext calling is when you receive a phone call from someone purporting to be from your bank or card issuer stating there has been a problem with your account and they need you to verify your account information. If you receive one of these calls do not provide them with your information. BancFirst employees will never ask you to verify your account number over the phone.
BancFirst does, however, utilize a fraud control service to detect possible fraudulent transactions on BancFirst issued cards. If unusual activity is detected, they will call your phone number from our records to verify the recent transactions. They should identify themselves as fraud prevention services calling on behalf of BancFirst. The analyst will need to verify certain personal information, but in any case they will not ask for complete information.
How to report Phishing and/or Spoofing?
If you receive any phishing or spoofing attempts, we suggest you report them to the following groups:
Note: When forwarding spoofed messages, always include the entire original email with its original header information intact.
If you have been victimized:
If you have given out your account information (bank account, credit card, debit card):
If you have given out your personal information (name, address, Social Security number), contact the three major credit reporting agencies - Experian, Equifax and TransUnion - and do the following:
- Report the incident to the related BancFirst location, other financial institution and/or card issuer as quickly as possible. Report using toll-free numbers and 24-hour service that many companies have established to deal with such emergencies
- Request your bank or card issuer close your compromised account number and reissue you a new account or card with a different number
- Monitor your account activity and review account statements carefully after the information loss
- If any unauthorized charges appear, call the bank or card issuer immediately and follow up with a hard copy letter (keep a copy for yourself) describing each questionable charge
- Request that the agencies place a fraud alert and a victim's statement in your file
- Occasionally request a free copy of your credit report to check whether any accounts were opened without your consent
- Request that the agencies remove inquiries and/or fraudulent accounts stemming from the theft
To minimize your risk:
- Secure personal information in your home, especially if you have roommates, employ outside help, or are having work done in your home.
- Don't give out personal information on the phone, through the mail, or on the Internet unless you've initiated the contact or are sure you know who you're dealing with.
- Deposit your outgoing mail in post office collection boxes or at your local post office, rather than in an unsecured mailbox.
- Promptly remove mail from your mailbox.
- Tear or shred your charge statements, checks (including those from closed accounts) and bank statements, expired charge cards that you're discarding, and credit offers you get in the mail.
- If a retail or ATM receipt contains your full card number, do not casually throw it away or leave it unattended.
- Don't carry your SSN card; leave it in a secure place.
- Carry only the identification information and the credit/debit cards that you'll actually need when you go out.
- Keep your purse or wallet in a safe place at work; do the same with copies of administrative forms that have your sensitive personal information.
- Occasionally photocopy the contents of your wallet for theft reporting numbers and card information.
- When ordering new checks, ask to pick them up at the branch instead of having them mailed to your home mailbox.
- Install and/or update anti-virus and personal firewall software on your computer.
- If your computer system appears to have been compromised, repair it and then change your password again, since you may well have transmitted the new one to the hacker.
- Check your other accounts! The fraudsters may have helped themselves to many different accounts: eBay, PayPal, email, online bank accounts and other e-commerce accounts, and everything else for which you use online passwords.
- Be suspicious of any email with urgent requests for personal financial information. Phishers have been known to include upsetting or enticing (but false) statements in their emails to get people to react immediately.
- Be careful of emails that are not personalized and/or may contain spelling errors and/or awkward syntax and phrasing. Many phishing emails are sent in great bulk and, therefore, are not personalized. If you are suspicious of an email claiming to be from BancFirst that is not personalized, call your local branch before responding. Many phishing emails are being sent by individuals from other countries where English is a foreign language, thus resulting in misspelled words and awkward syntax and phrasing.
- Be careful of personalized emails that ask for personal financial information. Be suspicious of any email that contains some personal financial information, such as a bank account number and asks for other information, such as a PIN. BancFirst will never ask for or send you personal financial information by email.
- Do not use links in an email to get to a web page without carefully inspecting the link address first. If the link is to BancFirst you should also be able to get to the same information from www.bancfirst.com.
- Do not complete forms in email messages that ask for personal or financial information. BancFirst would never ask you to complete such a form within an email message.
- Use online statements to reduce the volume of paper mailed. Today, paper is the cause of more actual instances of identity theft than are electronic thefts.
Major Credit Bureaus:
Equifax - www.equifax.com
Experian - www.experian.com
- To order your report, call 1-800-685-1111 or write: P.O. Box 740241, Atlanta, GA 30374-0241
- To report fraud, call 1-800-525-6285 and write: P.O. Box 740241, Atlanta, GA 30374-0241
- Hearing impaired call 1-800-255-0056 and ask the operator to call the Auto Disclosure Line at 1-800-685-1111 to request a copy of your report
TransUnion - www.transunion.com
- To order your report, call 1-888-EXPERIAN (397-3742) or write: P.O. Box 2002, Allen, TX 75013
- To report fraud, call 1-888-EXPERIAN (397-3742) and write: P.O. Box 2002, Allen, TX 74013
- TDD: 1-800-972-0322
Additional actions to take:
- To order your report, call 1-800-888-4213 or write: P.O. Box 1000, Chester, PA 19022
- To report fraud, call 1-800-680-7289 and write: Fraud Victim Assistance Division, P.O. Box 6790, Fullteron, CA 92634.
- TDD: 1-877-553-7803
- If any accounts were set up without your consent, close them
- Contact your local police department and file a criminal report
- Contact the Social Security Administration's Fraud Hotline at 1-800-269-0271 to report the unauthorized use of your personal identification information
- Notify the Department of Motor Vehicles of your identity theft and check to see if an unauthorized driver's license number has been issued in your name
- Notify the passport office to watch for anyone ordering a passport in your name
- File a complaint with the Federal Trade Commission. Ask for or download a free copy of Take Charge: Fighting Back Against Identity Theft
- Document the names and phone numbers of everyone you speak to regarding the incident. Follow up your phone calls with letters. Keep copies of all correspondence.
Federal Trade Commission (FTC) at 1-877-IDTHEFT (438-4388) or www.consumer.gov/idtheft
Federal Deposit Insurance Corp. (FDIC) Consumer Call Center at 1-800-934-3342 or www.fdic.gov
U.S. Postal Inspection Service (USPIS) for mail theft at www.usps.gov/websites/depart/inspect
Federal Communications Commission (FCC) for phone fraud at www.fcc.gov
Social Security Administration (SSA) Office of Inspector General at 1-800-269-0271 or www.socialsecurity.gov/oig
Department of Justice (DOJ) at https://www.justice.gov/criminal-fraud/identity-theft/identity-theft-and-identity-fraud
Federal Bureau of Investigation (FBI) at www.fbi.gov
U.S. Secret Service (USSS) at www.treas.gov/usss
Identity Theft Resource Center at www.idtheftcenter.org
National Consumers League at www.nclnet.org
Privacy Rights Clearing House at www.privacyrights.org
Fake Checks at www.fakechecks.org