Privacy & Security:
Guidance suggests enhanced controls for Businesses:
Business customers should be encouraged to
perform a periodic risk assessment and an
evaluation of the effectiveness of the controls they have in
place to minimize the risks of online transaction
The password, website, computer and
network tips above provide a starting point for this
process and the web resource links provide additional
Business customers should understand the
security features of the software and websites they utilize
and take advantage of these features. Segregation of
duties—the process of separating duties so no one person can
perform all steps of a transaction—is an example of a very
important security feature.
options that may be available to business customers doing
online transactions include transaction thresholds,
out-of-band verification (such as telephone or email
verifications), fraud detection and monitoring systems, and
IP reputation–based services. The Guidance encourages
establishing layered security processes.
Access by Home Computer:
Customers need to have a current
anti-virus/anti-spyware scanning program, a current patched
operating system, and a secure browser program. The Windows
firewall should be activated, or another software firewall
should be on the computer along with Intrusion Prevention or
Access by Wireless Home Network:
Customers needs to have all of the security measure
applicable to the wired home computers plus the wireless router
should have strong password protection, and it is recommended
the wireless network have at least WPA or WPA-2 PSK encryption
rather than WEP encryption.
Cell Phone Telephone Scam:
Please be advised of a debit card and banking scam circulating
throughout Pennsylvania. The targeted individuals will receive
a phone call, most likely on their cell phone, from someone
indicating that their debit card has been deactivated. The
caller then asks the individual to verify their card number or
provide an account number. In some cases a message is left on
the individuals voice mail, asking then to call a given phone
number, enter their debit card information and press 1. This is
a scam. Please do not provide account information to callers
claiming to be from Mercer County State Bank or any other
financial institution. If you receive a phone call and any
information is given please report the incident your local
Mercer County State Bank branch immediately.
Protecting Your Account and Identity:
At Mercer County State Bank, the privacy and security of your
information is very important to us. Our security practices are
designed to ensure information about you is secure whether you
choose to bank with us through our branch offices, ATMs,
telephone, or the Internet. For your protection, no matter which
channel you choose, we verify who you are before allowing you
access to your accounts. Additionally, our systems use firewalls
and encryption to protect information about you. At Mercer
County State Bank, we also encourage you, the customer, to take
steps in protecting information about you. You can find
information on how to prevent identity theft and what to do if
you are a victim of identity theft on the Federal Trade
Commission website at
or contact them toll-free at 877-438-4338. We have also provided
the following tips that are designed to help you protect
yourself from fraud and identity theft.
Preventing Identity Fraud on Your Account:
Do not lend your Debit Card or share your passwords with anyone
who is not authorized on your account. Do not share your
account numbers with anyone.
Report lost or stolen checks and Debit Cards immediately.
Review new checks to ensure none were stolen. Be aware of
the expiration date on your Debit Card. If you do not
receive a reissued card before the expiration date, contact
our Customer Care Center at 800-376-7015 Monday through
Thursday 8:30 AM – 4:30 PM, Friday 8:30 AM – 7:00 PM and
Saturday 8:30 AM – 12:00 PM. After hours please call
800-554-8969 for lost or stolen Debit Cards.
Store new and cancelled checks safely.
Question suspicious emails or phone inquiries. Unless you
initiate the contact, Mercer County State Bank will not
request your personal information (account number, Debit
Card number, and mother’s maiden name) through email, U.S.
mail, or by phone. Please notify us immediately if you
receive calls or emails claiming to originate from Mercer
County State Bank requesting account information. Be especially wary of those requesting
account information to “award a prize” or “verify a
Guard your Internet Banking information. Avoid using obvious
or easily obtainable information as your password. Do not
share your passwords with anyone or write them down.
Do not write your Personal Identification Number (PIN) on
the back of your Debit Card. Keep all PINs in a safe place,
not in your wallet.
Shred anything with your account number or personal
information before throwing it away.
Preventing Identity Theft:
Do not give out financial information online or on the phone
unless you initiated the contact and know the party you are
Shred unnecessary financial documents, including old bank
statements, invoices, unwanted pre-approved credit offers.
For those documents you must keep, file in a safe place.
Promptly retrieve incoming mail and do not put outgoing mail
in your residential mailbox.
If you do not receive your monthly billing statement, notify
the company immediately.
Review all account statements and monthly billing statements
immediately. Do not ignore suspicious charges. If doubtful
or unauthorized charges appear on your bill or
statements, call immediately to resolve discrepancy.
Do not write personal numbers on your checks. Never preprint
driver’s license or social security numbers on your checks.
Do not carry your social security card in your wallet; keep
it in a safe place.
Review your credit report. Reviewing your credit report will
tell you if anyone has applied for credit in your name and
if any accounts are being used without your knowledge with
the billing statement being sent to a different address. You
can obtain a copy of your credit report at any time from one
of the three major credit bureaus. If you have reason to
believe you have been a victim of identity theft, please
contact one of the three major bureaus and request a “fraud
alert” or victim’s statement be placed on your credit
reports. This will alert creditors to call for your approval
if they receive applications to open new accounts.
Please contact our Customer Care Center at 800-376-7015 if you
have additional questions about account security or identity
MasterCard Customers - We may be calling you:
To protect your account, we monitor your Debit Card transactions
for potentially fraudulent activity which may include a sudden
change in locale (such as when a U.S. – issued card is used
unexpectedly overseas), a sudden string of costly purchases, or
any pattern associated with new fraud trends around the world.
If we suspect fraudulent ATM or Debit
Card use, we’ll be calling you to validate the legitimacy of
your transactions. Your participation in responding to our call
is critical to prevent potential risk and avoid restrictions we
may place on the use of your card.
Our automated call will ask you to verify recent transaction
activity on your card
You’ll be able to respond via your touchtone keypad
You’ll also be provided with toll-free number to call should
you have additional questions.
Our goal, quite simply is to minimize
your exposure to risk and the impact of any fraud. To ensure
we can continue to reach you whenever potential fraud is detected,
please keep us informed of your correct phone number and address
at all times.
In the meantime, please be diligent in
monitoring transaction activity on your account and contact
Customer Care Center at 800-376-7015 us immediately if you
identify any fraudulent transactions.
What If My Wallet Is Stolen?
Be prepared. Make a log of everything in your wallet
including driver’s license, debit cards, credit cards, Social
Security card, etc. Be sure to include account numbers as well
as the telephone contact information printed on the back of the
card, so you have the information to quickly report the loss.
Keep this log in a safe place other than your wallet. If you are
traveling, carry a duplicate copy of your passport for
identification. File a police report immediately in the
jurisdiction where your wallet is stolen, which proves to credit
providers you were diligent.
Immediately call the three national credit-reporting Bureaus
(listed above) and place a fraud alert on your name and
Social Security number. This alert notifies companies that check
your credit that your information was stolen and that you must
be contacted by phone before new credit can be authorized.
In the meantime, please be diligent in monitoring transaction
activity on your account and contact us immediately if you
identify any fraudulent transactions. Here are some additional
tips on protecting yourself from debit card fraud.
Unless absolutely required for a legitimate business purpose,
avoid giving out your:
Address and ZIP code
Date of birth
Social Security number
Card or account number
Card expiration date
Your PIN is private; never give it out.
In stores and at ATMs, always cover your card and PIN, and watch
Cell phone cameras, mirrors, or other tools used to view
cards and PINs
People watching your transactions
Cashiers taking your card out of sight; take it to the
Any unusual activity at ATMs; if you feel uncomfortable, go
to another ATM
As always, please feel free to call the Customer Care Center at
800-376-7015 if you have any questions.
Online Internet Threats and Other Scams:
Software that is intended to be harmful to a computer. Malware
could be a virus, worm, Trojan horse, spyware or adware. Some
malware is designed to gather information from your computer or
log your keystrokes to gain information such as usernames and
passwords. It is important to have anti-virus/anti-malware
software installed on your computer and keep it up-to-date in
order to detect and block these types of threats.
A form of online fraud that redirects a website’s traffic to a
bogus website. The fraudulent website will look very similar to
the legitimate website. It is important to pay attention to the
website address you are on before entering any information.
An attempt to collect personal information such as usernames and
passwords by an attacker claiming to be a trustworthy source.
Phishing scams are generally initiated through an
official-looking email that asks the victim to urgently click on
a link and provide personal information. Other phishing scams
originate in an email that asks the recipient to call a phone
number to verify information. Often times the caller reaches an
automated voice response system that asks them to provide
personal identifying information.
Watch out for emails, calls, text messages, or other
communication that urge you to act quickly because your account
may be suspended or closed, or to update your personal
Mercer County State Bank will not ask you to provide usernames
and passwords. If you have any doubts or concerns about
information that is being requested, contact our Customer Care
Center at 800-376-7015. For more information about pharming or
phishing, please visit
Similar to Phishing, but conducted via telephone rather than
through email. The caller will claim to be from a trustworthy
source and attempt to gain personal information.
A way of manipulating people to share their personal
information. This may be someone posing as a trusted source or
it may be someone who uses intimidation or fear to gain
information. For additional information on common scams, please