DCECU is committed to protecting the data and finances you have entrusted to us in all formats, including our online services (website, Online and Mobile Banking). This commitment requires hardware and software maintenance, upgrades, and enhancements.
Your participation and cooperation is critical to our success, which may include future technology and/or system upgrades to the hardware and/or software that you utilize for the best user experience. DCECU’s recommended standard is to update all operating systems, anti-virus software and browsers on devices (desktop, laptop, mobile phone, tablet, etc.) that are supported by the manufacturer to ensure that you are protected by the current levels of security offered.
DCECU is committed to providing access to our online services when using devices that meet these recommended standards. Devices that are no longer supported or updated do not receive critical security updates. This may limit access or functionality and could result in the compromise of your information or finances. We believe that this stance provides our members reasonable opportunity to make updates or upgrades to their devices to ensure security of their information. Both DCECU and our members will need to remain flexible to ensure we are all working together to protect the ongoing security and privacy of our shared information. We appreciate your cooperation and trust that you value our strong security posture.
When you contact the credit union, a combination of authentication methods may be used to ensure your interactions with us are secure and sensitive information remains protected.
Every time contact is made, we need to verify your identity or validate a contact method. DCECU members may receive a one-time verification code sent via SMS text or email and in some instances answer personally identifiable pieces of information.
Remember, never share a one-time verification code or personally identifiable information with anyone other than a credit union representative in regard to a transaction or inquiry initiated by you. Do not share this information over the phone, especially during an unexpected call as it could lead to fraud. If anyone asks, stop immediately and contact us.
While we have many security measures in place, the security of your account and your private information begins with you.
DCECU recommends periodically changing your password for Online Banking and the Mobile App to keep your information safe. If you believe that your password has been compromised in any way, please change your password immediately by following these simple steps.
We also require that you update your password for Online Banking and the Mobile App at least once per year. As a reminder, if it has been more than one (1) year since you changed your password, you may be prompted to update your password when signing in to your account. Follow these easy steps to change your password.
In addition to updating your password annually, DCECU recommends following these password best practices:
Please ensure that you are not sharing your password with anyone else. If you suspect that someone has acquired your password or are not confident in the privacy of your password, please follow these easy steps to change your password.
It is recommended that you never use the same password for multiple accounts or different sites. If one of the accounts or services becomes compromised, all others which use that password are at risk. If your current password has been used for any other site or service, please follow these easy steps to change your password.
We recommend that you remain vigilant for incidents of fraud and identity theft by reviewing account statements and monitoring your credit reports. You may obtain a free copy of your credit report from each company listed below once every 12 months by requesting your report online at annualcreditreport.com, calling toll-free 1-877-322-8228, or mailing an Annual Credit Report Request Form to: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA, 30348-5281.
You may also purchase a copy of your credit report by contacting any of the credit reporting agencies below:
PO Box 740241
Atlanta, GA 30374
PO Box 9554
Allen, TX 75013
PO Box 2000
Chester, PA 19016
If you believe you are the victim of identity theft, visit identitytheft.gov to file a report and get a recovery plan.
Please be aware of the inherent security risks involved when using a public or shared computer, particularly in regards to your usage of Online Banking. Given that a public computer can be accessed by anyone, malicious or negligent activities performed on the computer before or after your use could compromise your privacy. Some risks include: Keyloggers that record usernames and passwords, or viruses that send private user data to a third party. Because of this, it is highly recommended to only use a private computer for account access through Online Banking.
DCECU supports the following browsers for our online services:
Out-of-date browsers are unable to access Online Banking & dcecu.org
In order to protect your financial data online, we have disabled TLS 1.0 within Online Banking and our main website. As a result, old browsers – or browsers that do not have TLS 1.1 or higher enabled – are unable to access our site.
Below are a few best practices for secure computing in order to help safeguard your personal information, particularly if should you find yourself in a situation where you must use a shared device.
Using your mobile device to check the balances of your accounts or to process a simple transaction is convenient and can save you time, but how do you make sure it is also secure?
While DCECU has a variety of mechanisms in place to protect members, there are some steps you can take to help protect yourself as well. Some may seem like common sense, but it’s important to keep them in mind.
Phishing is the method of tricking people into providing their social security numbers, credit card numbers, mother’s maiden name and other personal information. It is becoming apparent that the volume of phishing attempts through email is on the rise. “Phishers” often pretend to be someone else, such as a financial institution, retailer, government agency or other organization. This may include altering the “from” address of a message to make it appear to originate from a legitimate source.
There are a variety of methods that hackers may use in order to gain one’s confidence. For example, a member may receive an email claiming that there is a problem with their account or that their account will be closed unless they provide specific information. The most recent fraudulent attempts include emails claiming that a recent bill payment or ACH transaction was rejected. The sender may ask to verify an address, account number or password. A phishing email could also include an attachment containing a virus to steal sensitive information. Additionally, an emailed website link could be embedded that will lead to a fake site designed to look like a legitimate site, in an attempt to obtain sensitive information.
Always know that DCECU will never ask you to provide your account information in this manner. Furthermore, DCECU emails will never:
If an email includes any of the above, then it is most likely a phishing attempt. If you have any concerns that an email may be a phishing attempt, Online Banking (via www.dcecu.org) can always be used to verify account balances, transaction history, and other related information. If you believe that you may have fallen victim to a phishing attack, or still have any questions, please contact the Credit Union.
From: billcenter <email@example.com>
To: firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org;
Sent: Tuesday, October 7, 2011 11:43 PM
Subject: Important Notice from DCECU Billing Center
Dear Dow Chemical Employee’s Bank customer,
PLEASE LOGON AND FOLLOW THE STEPS LISTED AT THE FOLLOWING PAGE: http://www.dcecu.fx5q3zb44vpmc6cbt.com
Chemicale Employee’s Bank
From: NACHA <email@example.com>
To: firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org;
Sent: Tuesday, September 6, 2011 1:43 AM
Subject: ACH Transfer Review
ACH transfer (ID:620734) is going to be reviewed because of the incorcrectly input data when sending the payment.
Please,i fill ign the application form attached attentively and send it to us.i
After that your transfer will be processed.
If you have any qukestions or comments, contact us at email@example.com.
Thank you for using NACHA
Remember: Not all phishing emails are created equal. Some phishing attempts may raise very few red flags. For example, we are Dow Chemical Employees’ Credit Union, not Dow Chemical Employee’s Credit Union. If you are ever concerned about the legitimacy of a DCECU communication, please contact us.
Vishing Scams Use Phones Instead of Fake Websites In a new twist, identity thieves are sending spam that warns victims that their credit union/bank account or PayPal accounts were supposedly compromised. However, unlike typical phishing emails, there is no website address in these phishing messages. Instead, the victim is urged to call a phone number to verify account details.
The automated voice message says: “Welcome to account verification. Please type your 16-digit card number.” The goal is to get the victim to enter their credit card number. In these reported scams, no mention of the credit union, bank or PayPal is made.
Security experts tracking this scam and other instances of “vishing”, short for “voice phishing”, maintain that these frauds are particularly despicable because they imitate the legitimate ways people interact with financial institutions. In fact, some vishing attacks do not begin with an email. Some come as calls out of the blue, in which the caller already knows the recipient’s credit card number. This increases the perception of legitimacy and the caller only asks for the valuable three-digit security code on the back of the card. Vishing appears to be prospering with the help of Voice over Internet Protocol, or VoIP, the technology that enables cheap and anonymous Internet calling, as well as the ease with which caller ID boxes can be tricked into displaying erroneous information.
If you are a victim of a phishing or vishing attempt, feel free to contact us. You may also wish to take appropriate steps to protect yourself by canceling your compromised credit/debit cards, reporting the incident to the credit bureaus, or by ordering a copy of your credit report from any or all of the following: