Search
Security Guarantee
Security Guarantee
Step 1: Sign in using your debit card
Step 2: Verify your identity
You’ll need to enter your date of birth and either your mobile phone number or the email address that we have on file for you. You will receive a verification code either through a text message or email. Enter the code you receive in the verification pop-up window and click ‘Confirm.’
Step 3: Set up a new username
Enter a new username (username cannot be your debit card number and avoid using your name). Choose something unique to you and something that you can easily remember because once you create it, you can't change it.
Your username can be up to a maximum of 35 alphanumeric characters. Special characters are optional. Going forward, this is what you will be using to sign in.
Step 4: Set up a password
Choose a password that has a minimum of 10 characters and includes:
• 1 Uppercase letter
• 1 Lowercase letter
• 1 number
Special characters are optional.
Step 5: Confirm sign in details
If everything looks correct, go ahead, and click ‘Create User Profile’ to finalize your sign in information. Going forward, whenever you sign into digital banking, you will use the Username and Password you just created!
Landline/cell phone numbers and email address changes are important to update with us as well, as they help us verify your identity.
Best Practices
Best Practices
We take pride in insuring your information is safe and secure, our staff are well trained and our technology is always leading edge and up-to-date. However, you need to do your part too. Once our information leaves our secure site and you access it on your personal devices, it is then your responsibility to protect yourself.
There are many different names for electronic fraud:
- Phishing – email fraud
- Smishing – texting fraud
- Vishing – fraud via phone call
- Spoofing - try to obtain personal information
- Scareware – malicious computer program
Very funny names for a very serious issue, these are all considered Social Engineering fraud. Fraudsters use the anonymity and reach of mass electronic messages and fake websites to try to trick you into providing your personal information. In the hopes to commit identity theft or sell your information on the black market. You can protect yourself from these situations by knowing how to identify and avoid these scams. There are many types of fraud and scams out there, although we cannot list them all, below are suggestions on how you can do your part to keep your information safe.
- Verify you are using our legitimate secure website (it will have https: not http:) https://www.biggarcu.com/
- Keep your Anti-Malware and Antivirus up–to-date
- Report any concerns immediately
- Monitor your account, you have 30 days to report any discrepancies or issues.
- Sign up for Alerts
- Do not make online purchases from websites that are not secure https
- Do not share your card or PIN number with anyone
- Do not use the same username and password for your financial info as other websites
- Do not access your Online Banking over unsecure Wifi
- Do not give access to your computer to someone who has phoned you stating they can fix it.
- If you’ve had an incident with your computer that is a red flag for you and you are not sure what to do, take your PC into a trusted technician.
A common way for scammers to obtain your personal information is through electronic means such as email, texting and SMS messaging. Usernames, passwords, banking information and credit card details are requested through electronic message or instant messaging. To simplify it, you get an electronic message appearing to be from a legitimate contact such as your financial institution, credit card provider or you receive an e-Transfer notification, but they are not legit. Typically you are asked to log in to your online banking to verify account information because of some urgent concern, need to verify or deposit funds. The fake electronic message instructs you to click on a link that takes you to a non-legitimate website, you'll be prompted to enter personal or banking information. Fraudsters are seek personal details, such as your address, social security number or mother's maiden name. The details obtained will then be used for identity theft.
1. Scare Tactics
- CAPITAL LETTERS
- ATTENTION!, PAST DUE!
- Sender is trying to scare you into action, to clicking on a link eg: You did not pay a parking ticket, CRA is after you for money, your credit card company needs more information, your account is going to be closed.
These are all scare tactics. You need to Stop, Think, Rationalize; does it make sense?
- Where were you to get a parking ticket and how did they know your email address.
- Why would the credit card company be contacting me asking me for my information, don’t they have that on record?
- CRA does not email notifications, they send it via mail
- You would get an official letter if there was an issue with your account.
- Legitimate businesses will not phone you to verify information, they have your information.
2. Verify the email address
Sometimes a fraudulent email will look like a legitimate email address but if you look closely it will be off slightly.
Eg: Real: info@biggarcu.ca vs Fake: info@B1ggarcu.ca
3. Attachments
Never click on an attachment if you were not expecting it or it is from an unknown source. The electronic message may have malware attached to the link or take you to a mod website that looks like a legitimate one.
4. Links and URLs
You can double check a link or URL in an electronic message by hovering over it with your mouse. You will get a popup that displays exactly where the link is going to take you. If this does not make sense, don’t click on it.
Never click on a link in an email to access your account if you were not expecting it or initiated it; iTunes, Banking, Credit Card, SGI, Facebook etc.
5. Grammar, Spelling & Structure
The structure of an electronic message can be a sign that it may be phishing electronic message. An electronic message with spelling mistakes, missing tenses, transposed words, or over generalities, should be a red flag. You will rarely send an electronic message without the inclusion of a name, company, or specific subject, especially in a business context. If you spot any of these grammatical or structural errors, don’t disregard them, they may be indicators of a phishing attempt.
6. Personal Information Requests
A legitimate financial institution or credit card company, will not contact you to ask for your personal information, especially your login information. From time to time you will be contacted to update your personal information such as an address or contact information if we are having issues getting ahold of you or your statements are coming back undeliverable. However we will not ask you for information we already have, such as your card number, date of birth or SIN. If we are missing that information we would ask you to contact us.
- Keep yourself secure by keeping your Operating System, Browsers, Firewalls, Malware and Antiviruses current.
- To prevent access to your information make sure you have login password for your home computer and mobile devices.
- Only download information from legitimate trusted sites and App stores such as Apple and Google Play.
- Install anti-virus software for your smartphone and keep current
