CUSTOMER INFORMATION SECURITY

The security of your Washington Federal account and customer information is something we take seriously, no matter how you choose to bank with us - in person, by telephone, or online.

At Washington Federal, we are committed to protecting your personal information and helping you safeguard yourself from identity theft and fraud. The information below will help you to recognize common fraud and identity theft tactics used to obtain your personal information, and describes steps you can take to protect your account and personal information.

Common Fraud Schemes - Phishing and Pharming

Phishing
Phishing is a type of online fraud where you are tricked into providing your personal information through your computer. By posing as individuals or organizations you know, "phishers" seek to obtain your computer passwords, credit card numbers or bank account information so they can use them fraudulently.

In most phishing attacks, you will receive an email or pop-up message appearing to be from a company you've done business with or an individual you know. The message may ask you to update, validate, or confirm your bank account information, Social Security number or credit card numbers. Phishing emails frequently have an urgent, demanding tone and encourage you to act right away. The messages direct you to a website that resembles a legitimate organization's site. By following instructions, you are unknowingly providing your personal information to a bogus site.

Pharming
In this latest version of online identity theft, a virus or malicious program is secretly planted in your computer and hijacks your web browser. When you type in the address of a legitimate site, you're taken to a fake copy of the site without realizing it. Any personal information you provide at the phony site, such as your password or account number, can be stolen and fraudulently used. Pharming is one of the more difficult types of online fraud to detect, and the results of pharming can be devastating to your finances and your identity.

How to Avoid being Phished or Pharmed - "Don't Take the Bait!"

If you get an email or pop-up message that asks for personal or financial information, do not reply. Do not click on the link in the message, either. Legitimate companies do not ask for this information via email. If you are concerned about your account, contact the organization mentioned in the email using a telephone number you know to be genuine, or open a new web browser session and type in the company's correct web address yourself. In any case, do not cut and paste the link from the message into your web browser - phishers can make links look like they go to one place, but they actually send you to a different site.

Area codes can mislead. Some scammers send an email that appears to be from a legitimate business and ask you to call a phone number to update your account information or access a refund. Because they use VOIP (Voice Over Internet Protocol) technology, the area code you call does not reflect the true physical location of the scammer. If you need to reach an organization you do business with, call the number on your account statements or on the back of your credit card. In any case, delete random emails that ask you to confirm or divulge your financial information.

Use Anti-Virus and Anti-Spyware software, as well as a firewall, and update them regularly. Some phishing emails contain software that can harm your computer or track your activities on the Internet without your knowledge.

Anti-Virus software and a firewall can protect you from inadvertently accepting such unwanted files. Anti-Virus software scans incoming communications for troublesome files. Look for Anti-Virus software that does the following: recognizes current viruses as well as older ones; can effectively reverse the damage; and updates automatically.

A firewall helps make you invisible on the Internet and blocks all communications from unauthorized sources. It's especially important to run a firewall if you have a broadband connection. Your operating system and web browser may also offer software patches to close holes in the system that hackers or phishers could exploit.

Confidential Information. Do not send confidential information such as account numbers, passwords, social security numbers or credit card numbers in an email. Email does not provide a secure connection.

Before submitting confidential information through a website, make sure the connection is secure. Normally, the URL address will begin with "https://". You should also see a locked padlock symbol in your browser window.

Washington Federal will NEVER ask you for any private information regarding your account numbers, PIN numbers or passwords via email. If you ever have any questions pertaining to your accounts, visit any of our branch locations or contact us at (724) 222-3120.

Listed below, you'll find other important contact and reference information regarding identity theft and fraud.

Equifax
www.equifax.com
Fraud Line: (800) 535-6285

Experian
www.experian.com
Fraud Line: (888) 397-3742

Trans Union
www.transunion.com
Fraud Line: (800) 680-7289

Federal Trade Commission
www.ftc.gov
Fraud Line: 1-877-IDTHEFT

How Not To Get Hooked
http://www.ftc.gov/bcp/edu/pubs/consumer/alerts/alt127.htm

FTC's Identity Theft Site
http://www.ftc.gov/bcp/edu/microsites/idtheft

Security Tips From The National Security Alliance
http://www.staysafeonline.info