President's Choice Financial|security|daily banking|Communicating securely

Communicating securely

FRAUD: RECOGNIZE IT. REPORT IT. STOP IT.

E-mail fraud alert
E-mail fraud examples
E-mail fraud (phishing)
E-mail communications
President's Choice Financial e-mail policy
Identity theft
Unintentionally moving money for strangers
How to protect yourself
Find out more
Related links

E-mail fraud alert

Some President's Choice Financial^® services customers have recently received a fraudulent e-mail, also known as phishing or brand spoofing.

Fraudulent e-mails generally ask customers to select a link, leading them to a fraudulent web site that looks like a legitimate financial institution's web site — even duplicating logos and text. Customers are asked to enter personal banking information, which the fraudsters can use to withdraw money, make purchases or open new accounts and credit card accounts in the customer's name. Fraudulent e-mail messages may imply a sense of urgency or immediate risk to bank accounts or credit cards if you fail to answer. Special offers and prizes may also be promoted as incentives.

what to do if you receive this type of e-mail and have not yet responded to it

do not respond to the e-mail — some phishing sites distribute malicious software; do not click on the links provided in the e-mail – visiting these sites could place your computer at risk
e-mail fraud@preschoicefinancial.com so we can investigate — describe the fraudulent incident, making sure to attach or include any fraudulent e-mails you received and any anti-virus/anti-spyware scan logs (if applicable)
permanently delete the e-mail from both your inbox and your deleted items / trash folders
take precautions to protect yourself against e-mail fraud and identity theft
if you have any questions, contact President's Choice Financial services directly at 1-888-723-8881

what to do if you receive this type of e-mail and have responded to it

contact President's Choice Financial services directly at 1-888-723-8881 to cancel your bank card and change your online banking password
e-mail fraud@preschoicefinancial.com so we can investigate — describe the fraudulent incident, making sure to attach or include any fraudulent e-mails you received and any anti-virus/anti-spyware scan logs (if applicable)
permanently delete the e-mail from both your inbox and your deleted items / trash folders
take precautions to protect yourself against e-mail fraud and identity theft

As a precaution, we recommend you check your deposit accounts and credit card statements regularly to ensure all transactions are legitimate.

E-mail fraud examples

Below are examples of the fraudulent e-mails currently in circulation. President's Choice Financial wants to assure our customers the authorities have been notified regarding this situation.

Example 1

President Choice Financial - ALERT!

Dear [e-mail address]

This e-mail has been sent to you by President's Choice Financial to inform you that we were unable to verify your account details.
This might be due to either of the following reasons:

1. A recent change in your personal information. (eg: address, phone)
2. Submitting incorrect information during register process.

Our technical service department has recently discovered that your information on file with us is incomplete.

Please update your PC Financial account on our secured server below :

https://www.pcmastercard.pcfinancial.ca/rocen/cardapp/contentPG/index.htm?user=ashley.smith-gaudet@hotmail.com

Regards,
PC Financial member services

® PC, PC Financial, President's Choice and President's Choice Financial and are registered trademarks of Loblaws Inc. Trademarks used under licence.

Example 2

Date: August 9, 2010 9:42 AM
From: PCF - Support mailto:test@rf.hk
Subject: President's Choice Financial® - information about how we ensure your security and how you can help

Very Important Notice: Please respond promptly, your cooperation is greatly appreciated.

Dear valued customer,

As mentioned in our PC Financial Terms & Conditions, you have accepted to help us maintained the integrity and security of our systems.

As part of our ongoing commitment to maintain and improve the systems platform and online banking services that we provide, you will be required to restore your online banking account. Please follow the link below to confirm your account details and to restore your account.

PC Financial – Online Security Center

If you fail to restore your account within 48 hours, we will be forced to suspend access to your bank card until you have completed the restoration process.

Please accept our apologies for any incoveniences you may experience. We thank you for your understanding and co-operation.

Sincerely,

Pamela G. Wyman
Customer Services
President’s Choice Financial

Example 3

Date: Sunday, March 21, 2010 12:15:19 -0500
From: onlinesecurity@presidentschoice.ca
Subject: Online Services is Locked

Our Valued Customer,

Your access to Online Services has been suspended. Due to a miss-match access code between your Security information. To enable you continue accessing your online account it will only take you few minutes to re-activate your account. Click on the link below and you will be taken straight to where you can activate your account.

http://www.txn.banking.pcfinancial.ca/a/authentication/

Important Notice:- You are strictly advised to match your Security information rightly to avoid service suspension.

Thank You.
Presidential Choice Customer Services.

Please rest assured the President's Choice Financial services online banking web site remains secure. President's Choice Financial services will never ask you to respond via e-mail to any requests for private or personal information including passwords, personal information numbers or sign in information.

If you have any doubts about any other types of e-mails you receive from any President's Choice Financial services provider, please check the President's Choice Financial services web site (by typing www.pcfinancial.ca directly into your browser instead of selecting the link in the e-mail), or call us at 1-888-723-8881. If you think you have been the target of an attempted e-mail fraud, do not reply to the e-mail — delete it immediately.

E-mail fraud (phishing)

Several financial institutions have recently reported customers receiving fraudulent e-mail, also known as phishing or brand spoofing. Fraudulent e-mails generally ask customers to select a link, leading them to a fraudulent web site that looks like a legitimate financial institution's web site — even duplicating logos and text. Customers are asked to enter personal banking information, which the fraudsters can use to withdraw money, make purchases or open new accounts and credit card accounts in the customer's name. Fraudulent e-mail messages may imply a sense of urgency or immediate risk to bank accounts or credit cards if you fail to answer. Special offers and prizes may also be promoted as incentives.

President's Choice Financial will never ask you to respond via e-mail to any requests for private or personal information including passwords, personal information numbers or sign in information. If you receive an e-mail that appears to be from President's Choice Financial and the e-mail requests that you select a link and re-enter your personal information or password, do not reply to the e-mail — please contact us at fraud@preschoicefinancial.com or call 1-888-723-8881 to let us know about the e-mail, then delete it immediately. Describe the fraudulent incident, making sure to attach or include any fraudulent e-mails you received and any anti-virus/anti-spyware scan logs (if applicable).

If you have any doubts about any other types of e-mails you receive from any President's Choice Financial provider, please check the President's Choice Financial web site (by typing www.pcfinancial.ca directly into your browser instead of selecting the link in the e-mail), or contact us at 1-888-723-8881. If you think you have been the target of an attempted e-mail fraud, do not reply to the e-mail — please contact us at fraud@preschoicefinancial.com or call 1-888-723-8881 to let us know about the e-mail, then delete it immediately. Describe the fraudulent incident, making sure to attach or include any fraudulent e-mails you received and any anti-virus/anti-spyware scan logs (if applicable).

E-mail communications

From time to time you may receive e-mails from us about the President's Choice Financial program. We may send you e-mails about a variety of subjects, from financial articles to special promotions. When you provide your e-mail address, you consent to the sharing of this information with other providers of President's Choice Financial products and services. If you no longer wish to receive e-mail news from us, just let us know.

It is important not to include confidential information in any e-mails you send. In addition, do not provide your e-mail address to third party web sites without reading their privacy and security policies — you should understand the circumstances in which your e-mail address will be used.

President's Choice Financial e-mail policy

What we do:	What we don't do:
send you e-mails based on your e-mail permissioning	send you unsolicited e-mails

address you by the name you have provided	send you e-mails that are from, redirect to or link to a third-party web site

send you e-mails with information about products, services or promotions we think would interest you	send you e-mails with fields that ask you to enter confidential* information send you e-mails that ask you to provide, confirm or update sensitive or personal information in a time sensitive or urgent manner

link directly to President's Choice Financial non-transactional or marketing web site pages only including "your guided tour" (our online banking demo) only include written URLs (non-live links) to other web sites	link directly to pages that: a) ask you to enter confidential information (including account information, balances and passwords) b) require you to sign in to verify your banking information

always provide an opportunity for you to unsubscribe or provide directions for how to change your e-mail preferences always provide a way to contact President's Choice Financial

always provide a link to the President's Choice Financial privacy policy for banking e-mails

*confidential = personally identifying information such as name address, telephone number, date of birth, social insurance number, account number, etc.

Identity theft

Electronic identity theft is a growing concern in Canada and around the world. If you participate in Internet file sharing or download music or software, your computer is a potential target for thieves who seek to steal your identity by learning your passwords and taking over your online accounts. Your computer is also vulnerable to viruses, adware and spyware — applications that can capture information from your browser, including passwords, or re- direct you to fraudulent web sites.

To reduce the risk of identity theft, please ensure your computer uses a good firewall program, plus up-to-date anti- virus and anti-spyware software. For further information about the steps you can take to help protect yourself online, please visit What you can do.

Unintentionally moving money for strangers

Criminals want you to do their banking for them. If they earn your trust, they'll use your account to cash phony cheques, collect funds from other accounts, and move stolen money offshore. They use a variety of schemes to convince you that they're legitimate. Some will even give you money to earn your trust. By accepting and re-directing electronic deposits (such as wire transfers), you could be participating in a money-laundering scheme if those deposits were proceeds of a fraud or other criminal activity. The stories vary, but the results are the same: fraud and financial loss.

Common fraud stories


The Lottery Scam		A criminal tells you you've won a lottery. But taxes need to be paid first. If you're unable to pay the fee on your own, you may be offered financing from a third party (who is involved in the scheme). You receive a cheque to cover the taxes and then wire the money to cover the taxes. Afterward, you learn that the original cheque was fraudulent and that you're responsible for the losses.
The Overpayment		The criminal buys something from you and overpays for the item. After you refund the difference, you learn that the original payment was fraudulent and the charges have been reversed.
Earn Money From Home		A job offer involves receiving funds into your bank account and then transferring a portion of the collected funds on to another account. After transferring the funds, you learn the original transaction has been reversed.
The Government Official		A criminal tells you they are a government official from another country, and that they need your help getting funds out of the country. You receive monies and then forward them. Like the above cases, the original deposit is fraudulent and you're liable for the amount forwarded.
The Inheritance		A relative you never met has left you money in their will. But you need to pay service fees before receiving the funds. Like the other examples above, this scam can leave you on the hook for significant financial losses.

How to protect yourself

There are various forms of computer viruses existing on the Internet today that are targeting online financial services. It is important for you to protect the privacy of your information by installing the appropriate programs on your personal computer.

Update your computer and software

Install up-to-date anti-virus software on your computer to help guard against computer viruses.
Install a personal firewall and disable file-sharing software to prevent unauthorized access to your computer and its data.
Keep your browsers up-to-date with current versions and security enhancements
Let PC Financial help protect your computer from viruses and other nasty computer attacks. For a limited time, you can download a 60-day trial version of Norton Internet Security^TM for Windows* - Symantec's all-in-one anti-virus and firewall protection software. Near the end of your free trial, you'll be provided with a link to purchase Norton Internet Security online at 30% off the regular price.

Browse securely

When you are using public computers (for example, at libraries and Internet cafes), sign off after your online banking session and close the browser when you leave the computer.
Electronic forms which you submit online should be securely encrypted. If you're not sure if a web site is secure, look for the letters "https://" at the beginning of your web site address in your web browser. The "s" means that the web connection is secure.
Look for the "lock" icon on the bottom bar of your browser. This indicates you are running in secure mode prior to entering any personal information.

Double-check the web address (URL) of your bank site before entering any confidential information (such as your bank card number and password).
Keep an eye out for fraudulent e-mail scams. These are designed to trick you into downloading a virus or jumping to a fake web site where you will disclose personal information.

Do not respond to unsolicited e-mails

We will never ask you to respond via e-mail to any requests for private or personal information including passwords, personal information numbers or sign in information.
Be cautious of e-mails that ask for personal information. If you are unsure of the authenticity of an e-mail do not reply — simply delete it.
Be cautious when selecting a link to an unknown web site or in an unfamiliar e-mail. The link may appear to be taking you to a reputable web site but may actually be taking you to a fraudulent web site.

Carefully select and manage your online user names and passwords

Make it difficult for others to guess your password by ensuring it contains letters and numbers. If you think someone knows one of your passwords, change all your passwords right away.
Memorize your passwords and PIN numbers, and do not disclose them to anyone. When entering your password or PIN at a bank machine or paying by INTERAC^®, position yourself to block others from observing you entering your information. Stay alert when you are using a bank machine by yourself.

Never conduct financial transactions on behalf of strangers

Be wary of any offer that sounds too good to refuse.
Be aware that cheques and other funds deposited into your account can be reversed long after the funds have cleared
Never wire funds until the legitimacy of the cheque or electronic deposit is confirmed.
If you suspect a cheque may be fraudulent, contact the issuing bank and verify its authenticity. If you have already deposited the cheque into your President’s Choice Financial account, call us immediately at 1-888-723-8881.

Protect your account and card information

Do not give your account or credit card information to anybody, whether in person, over the telephone, or online, unless you are confident that you are sure who you are dealing with. Do not carry your Social Insurance Number card in your wallet unless it is necessary.
Sign credit cards as soon as you receive them. Cancel inactive cards and don't lend your credit cards to anybody.
Shred or tear up junk mail and statements. If you don't want a pre-approved credit card offer, tear it up or shred it. Identity theft often occurs when thieves go through trash looking for these offers. As well, tear up or shred any personal information you are going to throw away, such as receipts that show your President's Choice Financial MasterCard card number or bank statements.
Arrange to have your salary deposited directly into your President's Choice Financial acount so you can prevent lost or stolen cheques. You can also set up recurring transfers and payments through online banking so your obligations are met automatically.
Report thefts and losses immediately. If your wallet or purse is lost or stolen, contact us immediately at 1-888-723-8881 to block your accounts. For lost or stolen President's Choice Financial MasterCard cards, please call 1-866-246-7262.
Review all transactions on your account statement to ensure they are genuine. Report suspicious transactions immediately to President's Choice Financial services at 1-888-723-8881.
Review your credit report. At least once each year, contact a credit bureau to check the accuracy of your credit report.

Banking online is a great way to actively monitor your accounts. If you ever have a question about a transaction, remember we^† are here to help — just call us at 1-888-723-8881. For President's Choice Financial MasterCard, call us at 1-866-246-7262.

For further information, contact Phonebusters, Canada's national call centre for fraud, at 1-888-495-8501, or visit the Phonebusters web site.