1. Recognize and Report Phishing

Phishing is when tricksters try to get users to open harmful links, emails or attachments with the intent of stealing personal information or infecting their devices. Phishing “bait” often comes in the form of an email, text message, direct message on social media and phone calls, too. Tricksters design these messages to appear as if they’ve come from a trusted person, company or organization, in hopes of getting a response. Don’t take the bait!

Common signs of a phishing attempt include:

• Urgent or emotionally-charged language – especially messages that threaten dire consequences for not responding immediately
• Requests for users to send personal and financial information
• Untrusted shortened URLs
• Incorrect email addresses or links
• Poor grammar or misspellings (artificial intelligence has helped scammers avoid making these mistakes, so always look out for the other signs)

Resist the urge to click on links or attachments that seem too good to be true. If it looks suspicious, it’s likely phishing. Report phishing messages as spam or junk and/or delete the message. Do not click on anything within the message, including the unsubscribe button – just delete it!

TIP: You may also report internet crimes to The Internet Crime Complaint Center (IC3) at www.ic3.gov. It is a central hub run by the FBI for reporting cyber-enabled crime.

2. Use Strong Passwords

Protect your accounts by creating passwords that are: • 16 characters long (even longer is better) • A mix of letters, numbers and symbols or a passphrase of 4-7 random words • Unique and used for ONE account only Remember to update your passwords every 90 days (or sooner if there has been a security breach or known compromise).

3. Turn on MFA

Multi-Factor Authentication (MFA) prevents unauthorized access to your data and applications by requiring a second method of verifying your identity, making your accounts much more secure. Even if one credential becomes compromised, unauthorized users will be unable to meet the second authentication requirement.

4. Update Software

Protect your computer and smartphone devices by using security software. Ensure they are set to update automatically so the latest software is able to protect you against any new security threats.

Phishing attacks can happen to anyone. If you’re ever in doubt about the legitimacy of a communication you’ve received, throw it out! Remember, First Community will never call and request your debit/credit card details, online banking login or any other personal identifiable information. Please don’t hesitate to contact our Call Center at 800.456.3228 to report any suspicious communications.