Information Systems Security Education

Passwords & Phishing Scam Protection

  • Never give out your personal or financial information in response to an unsolicited phone call, fax or email, no matter how official it may seem.
  • Slow down. Spammers want you to act quickly; do not let their urgency influence your review of the message.
  • Reject offers or requests for help. Legitimate companies and organizations do not contact you through email to provide help unless you solicit help. If you would like to donate to an organization, seek out a reputable organization on your own to avoid falling for a scam.
  • Do not respond to emails that may warn of dire consequences unless you validate your information immediately. Contact the company to confirm the email validity using a telephone number or website you know to be genuine.
  • Check your credit card and bank account statements regularly and look for unauthorized transactions, even small ones. Some thieves hope small transactions will go unnoticed. Report discrepancies immediately.
  • When submitting financial information online, look for the padlock or key icon at the bottom of your Internet browser. Also, many secure Internet addresses, though not all, use “https” in the URL.
  • Never enter personal information in a pop-up screen. Contact the company and inquire if the request is legitimate.
  • Maintain the latest version of your Internet browser (Microsoft Edge, Google Chrome, Firefox, etc.).
  • Beware of any download. If you don’t know the sender personally and are not expecting a file from them, delete the email immediately and DO NOT download any attachments.
  • Set your email spam filter to high. You can update this in your email settings. Periodically check your spam folder to see if any legitimate email has been accidentally trapped there.
  • Secure your computer. Install anti-virus software, firewalls and email filters. Once in place, keep them up to date. Most operating systems allow automatic updates in your settings.
  • Log off from any online session when you’re complete.
  • Change your passwords every 30-60 days.

Report suspicious activity to the Internet Crime Complaint Center, a partnership between the FBI and the National White Collar Crime Center. If you have responded to an email, contact First Federal Bank immediately so we can protect your account and your identity. If you are a victim of identity theft, please report it and get a recovery plan at identitytheft.gov.

For more information on phishing, download this info sheet from the American Bankers Association.

What are some examples of threats to my account and personal information?

Phishing


Spear Phishing


Ransomware


Communication & Security Procedures

First Federal will not contact you by mail, phone, or email to inquire or request your digital banking ID and password. In the rare case we detect any unusual or uncharacteristic behavior (anything that appears out-of-the-ordinary compared to how you normally would bank online and where you normally bank online), we will attempt to call or email you by using the phone numbers or an email address you have previously provided to the Bank, and will ask you to answer security questions that you have previously provided to the Bank. We may also contact you using Secure Messaging through the Digital Banking message center. You are responsible for keeping your password, account numbers, and other account data secure and confidential.

Two-factor Authentication (2FA) is a specific type of multi-factor authentication (MFA) that strengthens access security to your accounts by requiring two methods (also referred to as authentication factors) to verify your identity when setting up digital banking. Two-factor authentication is important because it adds an additional layer of security to the authentication process, making it more difficult for attackers to gain access to your devices or online accounts during account set up. Even if a password becomes compromised, a password alone is not enough to pass the authentication check.

Account Monitoring & Reporting

  1. Review your account history for unauthorized transactions in online banking or the mobile app.
  2. Set up transaction alerts in the mobile app to receive notifications based on dollar amount or if the transaction matches a certain description.
  3. Business Accounts - Perform a related risk assessment and controls evaluation periodically for assigned online banking users for the business. As owner, assign yourself or restrict the assignment of the “Administrator” role to a trusted individual. If an “Administrator” is assigned or transferred to another position, leaves your employment, or is no longer authorized to use a username or password on your behalf, that individual’s role as “Administrator” should be removed. Periodically review (ex. every 90 days) and determine if the individual(s) that have been assigned the “Administrator” role are still trusted or in a position that still warrants the “Administrator” role.

To report suspicious account activity or if you experience information security-related events, contact First Federal Bank at either number below.

First Federal Bank main line: (816) 241-7800
Digital Banking Team: (816) 245-4225

Your Protections Under Regulation E

Fees

We do not charge for direct deposits to any type of account.
We do not charge for preauthorized payments from any type of account.
Except as indicated elsewhere, we do not charge for these electronic fund transfers.
ATM Operator/Network Fees. When you use an ATM not owned by us, you may be charged a fee by the ATM operator or any network used (and you may be charged a fee for a balance inquiry even if you do not complete a fund transfer).
Please refer to the Limits and Fees Disclosure for additional information on fees.

Documentation

  • Terminal transfers. You can get a receipt at the time you make a transfer to or from your account using an automated teller machine or point-of-sale terminal. However, you may not get a receipt if the amount of the transfer is $15 or less.
  • Preauthorized credits. If you have arranged to have direct deposits made to your account at least once every 60 days from the same person or company, you can call us at 816-245-4225 to find out whether or not the deposit has been made.
  • Periodic statements. You will get a monthly account statement from us for your checking and savings accounts.

Preauthorized Payments

  • Right to stop payment and procedure for doing so. If you have told us in advance to make regular payments out of your account, you can stop any of these payments. Here is how:
    • Call or write us at the telephone number or address listed below in time for us to receive your request 3 business days or more before the payment is scheduled to be made. If you call, we may also require you to put your request in writing and get it to us within 14 days after you call. Please refer to our Limits and Fees Disclosure for the amount we will charge you for each stop-payment order you give.
  • Notice of varying amounts. If these regular payments may vary in amount, the person you are going to pay will tell you, 10 days before each payment, when it will be made and how much it will be. (You may choose instead to get this notice only when the payment would differ by more than a certain amount from the previous payment, or when the amount would fall outside certain limits that you set).
  • Liability for failure to stop payment of preauthorized transfer. If you order us to stop one of these payments 3 business days or more before the transfer is scheduled, and we do not do so, we will be liable for your losses or damages.

Financial Institution’s Liability

Liability for failure to make transfers. If we do not complete a transfer to or from your account on time or in the correct amount according to our agreement with you, we will be liable for your losses or damages. However, there are some exceptions. We will not be liable, for instance:

  1. If, through no fault of ours, you do not have enough money in your account to make the transfer.
  2. If you have an overdraft line and the transfer would go over the credit limit.
  3. If the automated teller machine where you are making the transfer does not have enough cash.
  4. If the terminal or system was not working properly and you knew about the breakdown when you started the transfer.
  5. If circumstances beyond our control (such as fire or flood) prevent the transfer, despite reasonable precautions that we have taken.
  6. There may be other exceptions stated in our agreement with you.

Confidentiality

We will disclose information to third parties about your account or the transfers you make:

  1. where it is necessary for completing transfers; or
  2. in order to verify the existence and condition of your account for a third party, such as a credit bureau or merchant; or
  3. in order to comply with government agency or court orders; or
  4. as explained in the separate Privacy Disclosure.

Unauthorized Transfers

(a) Consumer liability.

  • Generally. Tell us AT ONCE if you believe your card and/or code has been lost or stolen, or if you believe that an electronic fund transfer has been made without your permission using information from your check. Telephoning is the best way of keeping your possible losses down. You could lose all the money in your account (plus your maximum overdraft line of credit). If you tell us within 2 business days after you learn of the loss or theft of your card and/or code, you can lose no more than $50 if someone used your card and/or code without your permission.
    • If you do NOT tell us within 2 business days after you learn of the loss or theft of your card and/or code, and we can prove we could have stopped someone from using your card and/or code without your permission if you had told us, you could lose as much as $500.
    • Also, if your statement shows transfers that you did not make, including those made by card, code or other means, tell us at once. If you do not tell us within 60 days after the statement was mailed to you, you may not get back any money you lost after the 60 days if we can prove that we could have stopped someone from taking the money if you had told us in time.
    • If a good reason (such as a long trip or a hospital stay) kept you from telling us, we will extend the time periods.
  • Additional Limits on Liability for First Federal Bank Debit Card. You will not be liable for any unauthorized transactions using your First Federal Bank Debit Card if: (i) you can demonstrate that you have exercised reasonable care in safeguarding your card from the risk of loss or theft, and (ii) upon becoming aware of a loss or theft, you promptly report the loss or theft to us. In the event you do not meet the conditions for zero liability, your unauthorized transaction(s) will be processed under the same consumer liability as noted above under (a) Consumer Liability. Mastercard is a registered trademark , and the circles design is a trademark of Mastercard International Incorporated.

(b) Contact in event of unauthorized transfer. If you believe your card and/or code has been lost or stolen, call or write us at the telephone number or address listed below. You should also call the number or write to the address listed if you believe a transfer has been made using the information from your check without your permission.

Error Resolution Notice

In Case of Errors or Questions About Your Electronic Transfers, Call or Write us at the telephone number or address listed below as soon as you can, if you think your statement or receipt is wrong or if you need more information about a transfer listed on the statement or receipt. We must hear from you no later than 60 days after we sent the FIRST statement on which the problem or error appeared.

  1. Tell us your name and account number (if any).
  2. Describe the error or the transfer you are unsure about, and explain as clearly as you can why you believe it is an error or why you need more information.
  3. Tell us the dollar amount of the suspected error.

If you tell us orally, we may require that you send us your complaint or question in writing within 10 business days.

We will determine whether an error occurred within 10 business days (20 business days if the transfer involved a new account) after we hear from you and will correct any error promptly. If we need more time, however, we may take up to 45 days (90 days if the transfer involved a new account, a point-of-sale transaction, or a foreign-initiated transfer) to investigate your complaint or question. If we decide to do this, we will credit your account within 10 business days (20 business days if the transfer involved a new account) for the amount you think is in error, so that you will have the use of the money during the time it takes us to complete our investigation. If we ask you to put your complaint or question in writing and we do not receive it within 10 business days, we may not credit your account. Your account is considered a new account for the first 30 days after the first deposit is made, unless each of you already has an established account with us before this account is opened.

We will tell you the results within three business days after completing our investigation. If we decide that there was no error, we will send you a written explanation. You may ask for copies of the documents that we used in our investigation.


FIRST FEDERAL BANK OF KANSAS CITY DEPOSIT OPERATIONS
P.O. BOX 419194 KANSAS CITY, MO 64141
Business Days: Monday through Friday Excluding Federal Holidays
Phone: 816-245-4225
MORE DETAILED INFORMATION IS AVAILABLE ON REQUEST

+

You are now leaving First Federal Bank of Kansas City

Our website/mobile terms, privacy and security policies do not extend to the website or app accessed through this link, and First Federal is not responsible for the content on any third-party website or app. Click "Yes" to leave our website.

Yes