Improving Your Online Security

• Only click on a link in an email if you are absolutely certain that it is from a reliable source.
• Do not click on emails where you do not know the sender or source and don't be duped by great offers coming through email.
• Think twice about forwarding an email with a "great offer" to a friend/relative.
• If you receive a suspicious email (especially ones purporting to come from a financial institution), do not act on the instructions contained in the email.
• Avoid opening suspicious or dubious emails or attachments, even if the email is from someone you trust (the email and attachment could have been forwarded automatically without the person's knowledge).
• You should not reply to "spam" emails or emails where you do not know the sender or source. It simply confirms that your email address is valid and you may receive further emails from them. You should simply delete the email.
• Email is one of the prime movers for malicious viruses. Regardless of how enticing the "subject" or attachment may look, be cautious. Any unexpected email, especially one with attachments (from someone you may or may not know), could contain a virus and may have been sent without that person's knowledge from an infected computer. Should you receive an email of this kind and you are doubtful of its legitimacy, delete it.

• personal details
• member number
• Internet Banking access code and/or
• credit card details

• Have a unique password for your internet banking. Avoid using the same password for different online applications. Doing so puts your money at risk should anyone discover your single access code
• When choosing a password, select something that you will remember easily but which will not be obvious to others
• Do not use your debit, credit or access PIN number or, your date of birth as your password. Avoid repeated digits or simple sequences; where possible use a combination of letters and numbers. Refrain from using your birth date, telephone number, car registration, postcode or other words and numbers easily linked to you personally
• Keep your password confidential - you should not share or reveal your password to anyone. Do not disclose your password to anyone including a family member, friend or a Family First Credit Union staff member.
• As an additional safeguard, it is advised that you regularly change your password; we recommend every 30 days
• Do not write your password down even if it is disguised.
• Be wary of unsolicited calls or emails requesting personal information, password or card numbers.

• Internet Banking Login link on the top right of our web site

When logging into or using Internet Banking, look for the closed padlock symbol at the bottom or top right corner of your web browser. You can double-click the padlock symbol to view the server security certificate's details. The certificate informs your browser that the web site you are connected to is in fact Family First Credit Union's and not a "fake" site. The closed padlock images appear below.

Spam is all unsolicited electronic mail sent out in bulk to individuals that have not consented to receive it. "Spammers" use email addresses harvested from websites or procured by means without the owners' consent.
You can protect yourself from spam in a number of ways:

Use Filters

A filter is kind of software that sorts incoming emails and rejects those it considers spam.
Spam filters can be very useful but are not perfect. Sometimes they block genuine messages (this is called a 'false positive'). On other occasions they fail to identify real spam (this is called a 'false negative'). Because of this, a good approach is to divert emails that have been identified as spam to a 'spam folder'; this way you can manually review the diverted messages to check for any that are genuine.

Protect your Email Address Online

Spammers have typically used two techniques for gathering email addresses: 'dictionary attacks' and 'harvesting'. While both of these techniques are now outlawed under the Spam Act 2003, you should still exercise caution.
A dictionary attack occurs where a spammer sends out bulk emails to large numbers of possible addresses in the hope of locating a real email recipient. Harvesting refers to the process whereby a spammer finds your email address from a publicly available source, for instance where you have registered a domain name or just posted a message on a bulletin board. If you do supply your email address, try to limit the scope of subsequent communications (eg by ticking a box to indicate that you do not want to receive any further offers or information).
Also, consider using different email addresses for different purposes. This will help to limit the amount of unwanted mail you receive to your main email address.

• Internet Industry Association Security Portal

• Australian Communications and Media Authority

Viruses

A computer virus is a program that attaches itself to another program, but changes the action of that program so that the virus is able to spread. Anti-virus software is designed to protect you and your computer against known viruses, worms and Trojans. A Trojan is a malicious program disguised as something harmless, such as a game or a screen saver, which in fact contains hidden code that allows an intruder to possibly take control of your machine without your knowledge.
New viruses are constantly appearing; viruses range from harmless pranks that merely show an annoying message, to programs that can destroy or disable a computer altogether.

• It's important that everyone who uses a computer is aware of proper security practices. Protect your computer with up-to-date antivirus software. You should regularly update your computer system with the latest anti-virus software.
• Avoid opening, running, installing or using programs/files you have obtained from a person or organisation that you do not know you can trust, especially unsolicited email containing file attachments
• Scan new programs/files/attachments for viruses before opening, running, installing or using them
• Ensure you have the latest available updates and anti-virus definitions for your anti-virus software. Unless your software is kept up to date it will quickly become ineffective at preventing virus infection
• You should regularly scan your computer with current anti-virus software to ensure your system is not infected by a virus

• Trend Micro
• McAfee
• Symantec

Visit the Internet Industry Association National AntiVirus Initiative www.iia.net.au/novirus to find out more.

Spyware

"Spyware" is the collective name given to software that is installed on your computer to secretly obtain information and send it back to another source. Spyware programs can be installed through a virus or as part of another software installation e.g. a 'freeware' program.

Spyware can be removed from your computer by:

• Running a spyware remover program: special programs such as Ad-aware can be used to remove spyware that has been installed onto your machine
• Virus checking: scanning your machine with a virus checker can remove any virus related spyware;
• Deleting cookies: deleting cookies from your browser can help spyware related problems; and
• Installing a personal firewall: a personal firewall will stop unauthorised 'attacks' to your computer from spyware sources. A personal firewall is particularly important if you have a permanent, high-speed connection to the Internet.

For more information on "spyware" detection tools, visit www.tucows.com.