Security Tips

Keep your information safe online.

Debit and Credit Card Safety

Debit and credit cards are a quick and convenient way to pay for your purchases. During hectic times of the year it is easy to become distracted. Remembering some card safety tips will help keep your accounts safe.

Secure your Cards - Keep your cards in a safe location and pay close attention to your purse and wallet while shopping. For additional safety, carry only the cards you need to make your purchases.
Monitor Account Activity - Closely monitor your account activity and report suspicious transactions.
Shop Trusted Merchants - Shop with merchants you know and trust both online and offline. When shopping at a store, keep an eye on your card (see skimming below) and be sure to collect any receipts. When shopping online, look for the small padlock icon that appears in the bottom right of the Web page. The beginning for the retailer's Internet address will change from "http" to "https" when a purchase is made using a secure connection.
Watch for Skimmers - Card skimmers are electronic devices capable of capturing your account information for purposes of creating a duplicate card. Skimmers are most commonly found on ATMs and gas station pumps but can also be used by a dishonest employee of a store, restaurant or bar to obtain your card information. Learn more about spotting ATM skimmers.
Protect your PIN - Beware of "shoulder surfers" who peer over your shoulder while you enter your PIN into an ATM or while making a purchase. Don't use a word or number that is easily guessed or that can be found in your wallet (e.g. birthday). Memorize your PIN and don’t share it with anyone.

Report
If you find any suspicious activity on your bank accounts or suspect fraud, please report it immediately to your bank.

Card Skimming
Skimming is a method used by fraudsters to steal or “skim” your personal information off your debit, ATM or credit card during a transaction. Once the card information is captured it is encoded onto a fake card and used to withdraw money from your account or to make purchases.

How it Works
A small device is usually placed close to or on top of the regular card reader, such as at the ATM or gas pump. In addition, small cameras may be installed to capture the PIN number as you enter it. These are both very well hidden and often blend in with the machine they are placed on. Once installed the fraudster simply waits for an unsuspecting person to use the machine and gathers their personal information.

Spotting a Skimming Device

There are some helpful tips to spotting a skimmer:

Appearance of an attachment to the card slot. Pull on it. If it comes off or loosens, do not use the ATM and report it immediately.
Appearance of an overlay on the key pad, possibly making it difficult to type.
Unusual instructions on the display screen or a blank screen.
Signs, especially those posted over the card reader, saying directions have changed or to use a specific machine.
The flashing area of the card entry slot on an ATM is not visible.
An unusual appearance to the front of the machine, mirrors, differences in look from nearby machines or extra pieces.

Protect Yourself

There are some simple things you can do to help protect your card and accounts:

Educate yourself on how to spot a skimmer.
Review your account transactions frequently to look for any suspicious charges
When you enter your PIN number, cup your hands over the keypad to help block the view of any cameras or individuals.
Choose the credit instead of the debit option when making purchases, so you do not have to use your PIN.
Where possible, use ATMs you are most familiar with. Choose well-lit, well-placed ATMs where you feel comfortable.

Reporting

If you suspect a skimming device is being used or that your account has been compromised, report it immediately to your bank.

Email Phishing

Phishing is a popular scam designed to gather your personal information and use it for fraudulent purposes. It is usually a two-part scam involving emails and spoofed Web sites. The e-mail appears to come from a trusted source or institution and links to a spoofed Web site where you will be asked to enter your information.

Recognizing Phishing

Fraudsters try to convince you to share your personal information in a number of creative ways including:

Imitating trusted sites and sources, not only in the email but also on the Web site it links to.
Using urgent sounding scenarios or scare tactics.
Asking you to "verify" your information for security or other purposes.
Creating links that appear to be correct but when rolled over or clicked on go to another site.
While it can be difficult to spot a phishing site, some additional signs to look for are:
- Awkward greeting - A phish may have an odd greeting or may not refer to you by name.
- Typos and Incorrect Grammar - This is a tactic to avoid being blocked by e-mail filters.
- Incorrectly Spelled Company Name - Another tactic used to bypass e-mail filters. For example, "Rabo Agri Finance" or "RaboAgrifinance".

As a reminder, Rabo AgriFinance will never request confidential information by email or phone.

Reporting

It is important to report any suspicious activity. You may not only be helping yourself but others by doing so.

If you receive a suspicious e-mail that you think is a phish email pertaining to your Rabo AgriFinance account - do not respond or provide any information. Call Rabo AgriFinance toll free at (855) 722-7766.
If you have shared personal information when referring to your Rabo AgriFinance account in response to a phish email, call Rabo AgriFinance toll free at (855) 722-7766.

Malware

Malware is short for "malicious software." It includes a wide range of online threats such as viruses, worms, spyware and Trojan horses. Fraudsters use many methods to try and get malware onto your computer including e-mail, instant messages, fake websites and by offering a desirable download such as free songs or virus scans. Once on your computer, they use the malware to steal personal information, send spam, and commit fraud.

Recognizing Malware

Most malware tries to stay unnoticed, either by actively hiding or by simply not making its presence known to the user. Some types of malware will cause a few noticeable differences in your computer. A computer may be infected with malware if it:

Slows down or displays repeated error messages
Won't shut down or restart correctly
Behaves strangely, such as spontaneously rebooting
Allows a lot of pop-up ads, or even shows them when you're not on the Internet
Displays webpages or programs you didn't request
Sends e-mails you didn't write
Allows you to log into online banking but then tells you the system is down. While downtime can be experienced in online banking it is rare and usually communicated in advance.

Preventing Malware
You can both protect yourself from and avoid malware from getting onto your computer. Many attacks can be avoided with the help of security software and some basic online safety tips.

Protect

Install anti-virus and anti-spyware security software from a well-known company and keep it up-to-date. Set it to automatically install updates.
Install anti-malware software that is capable of detecting, blocking, and removing malware threats on your computer.
Have e-mail attachments and files scanned by your security software prior to opening them or transferring them to your computer.
Regularly install security patches on your operating system.
Keep your Internet browser up to date.

Avoid

Don't click on a link in an e-mail or open an attachment unless you know who sent it and what it is.
Delete all unwanted and unsolicited messages without opening them.
Download and install software only from Web sites you know and trust. While it is appealing to get free software, they can contain malware.
Beware of "anti-virus or spyware" scams. Offers to scan your computer for malware for free or pop-ups telling you that it was found are often fraudulent.
If you receive strange messages, files, or Web site links while instant messaging, even if it appears to be from a friend, immediately end your IM session.
Only transfer or share files from a well-known and trusted sources.
Be wary of clickable ads and pop-ups.
To safely close a pop-up, click on the "X" in the upper right corner. Do not click on a link in the ad that may appear to close it, such as "No thanks" or "Not interested." These links can also contain malware.

What to do if you suspect malware ...

If you suspect that your computer has been compromised and malware is on your computer, react immediately.

Stop shopping, banking and other online activities that involve login IDs, passwords, or other sensitive personal information.
Confirm that your security software is active and current. Your computer should have anti-virus and anti-spyware software and a firewall.
Once your security software is up to date, scan your computer for viruses and spyware. Delete everything the software identifies as a problem.
If you suspect your computer is still infected, you may want to run a second anti-virus or anti-spyware program or call professional help.
Monitor your accounts for any suspicious transactions and consider requesting your credit report.
After you are certain that the malware is no longer on your computer, change your online passwords.

Computer Safety

Anti-virus and anti-spyware software - Install anti-virus and anti-spyware security software from a well-known company and keep it up to date. Set it to automatically install updates. A couple of examples of anti-virus and anti-spyware software companies are Symantec (Norton) and McAfee.
Firewall - While connected to the Internet, use a firewall to protect your computer from unauthorized access. Set it up to block unsolicited requests for outgoing communications and to update automatically. There are a variety of options, so be sure to do a little research to find out what type of firewall is best for you and your situation.
Security Patches - Regularly install security patches on your operating system or it can be left vulnerable to the newest attacks.

Online banking activities and viewing or downloading documents (statements, etc.) should be conducted in a private setting where others cannot view your screen.
Avoid using public or other shared computers to access your financial accounts online, and be extra careful when using your own computer in a wireless "hot spot."
Turn your computer off completely when you are finished using it - don't leave it in sleep mode. If you need to leave it on, be sure to log completely off when you are not at the computer.

Fraudulent Websites

A large number of pop-ups or advertisements to "buy or download now" with little other content.
Extremely limited company information such as contact information, examples of past work, or details about the company.
Poor design with spelling errors and pages that don't work.
It pretends to scan your computer and tell you there are viruses or malware on it. No Web site can do this and it is a common scam.
Fraudsters may use pop-up windows while you are online to obtain personal information similar to spoof sites. These windows can be hidden in programs or software you download from the Internet such as a video clip or screensaver. It is a good idea to avoid downloading anything to your computer unless it is from a source you know and trust.

Go to the main website of the company or bank you do business with, instead of clicking on a link even if the source appears to be legitimate.
Only provide credit card or account information on the Web sites of companies you know and trust. Only provide this information if you have initiated the transaction.
Look for a secure padlock symbol on the Web site before entering your personal information on a retail or online banking Web site.
Do not download programs from unknown sources.
If you think your account has been compromised or encounter a suspicious Rabo AgriFinance Web site, please call us at (855) 722-7766. Learn more about reporting fraud.

Browser Security

Block Pop-up Windows - Although turning on this feature could restrict the functionality of certain Web sites, it will also minimize the number of pop-up ads you receive, some of which may be malicious.
Limit or Prohibit Cookies - Many Web sites track which pages you go to on their site using a type of file called a cookie. While most are simply there for your convenience, others can be malicious. It is advisable to restrict or disable cookies, then enable them if you visit a site you trust that requires them.
Use a Filter - Many browsers offer a filter that will warn you if you are going to a suspicious Web site or to reported phishing sites. Keep in mind this is not fool proof though and you still need to be aware of signs of a suspicious site.
Create Zones - Some browsers offer the option of putting Web sites into a specific "zone." Each zone can have a different security setting, making it easier to protect yourself while maintaining functionality on those sites you visit frequently.
Restrict Active Content - To make a Web site functional and stylish, Web sites may use active content such as JavaScript, ActiveX and Plug-ins. This is used to create options like drop-down menus. However, active content can also be a vehicle to install malicious code on your computer, so before installing anything make sure it is necessary and that the site you are downloading them from is trustworthy.

Social Network Safety

Treat links with caution, even those that appear to be sent by a friend, customer or trusted company.
If a message from a trusted source is suspicious (e.g. asking for personal information or a friend for financial help) find another method to contact the sender to verify its authenticity.
Beware of "add-ons" and only download from sites the social site recommends or are reputable.

Do not share information online that you would not want publicly available permanently.
Do a social audit on yourself or your company. Conduct searches in major search engines to see what is being said and take action if needed to correct errors.
Businesses should have a social media policy in place for employees and limit those that can post on the company's behalf.
Social sites should be selected carefully ensuring an acceptable level of protection and privacy.
Use anti-virus and anti-malware software and regularly install security updates for your browser and operating security system.
Educate children about how to protect themselves online as well as monitoring, setting rules and using filters where possible.
Use strong passwords and don't share them with anyone.
Do not update any statuses or tweet the dates that you are going on vacation or away from home, you may compromise your physical security.
Geolocation apps such as Foursquare share your exact location which also lets criminals know that you aren't home, so reconsider broadcasting that information.

Shopping Online

Always go to the main Web site of the company or bank you do business with, instead of clicking on a link from the body of an e-mail message. Learn about phishing.
Only provide credit card or account information if you have initiated the transaction. A common phishing tactic is to ask you to "verify" or "update" your information.
Always log off the Web site after making a purchase with your credit or debit card. If you aren't able to log off, close your browser window to prevent unauthorized access to your account information.
Decline offers to "save your information" in order to speed up future buying processes. When you save your information, it is stored on that company's servers, which if compromised can leave you vulnerable.
Beware of malware. Be sure to keep your computer's security software up to date and don't shop on a public computer. Learn more about malware.

Wi-Fi Network Security

Change the default administrator login and password (they are widely known) to only something you know.
If possible, disable wireless administrative access and require a physical network connection (e.g. Ethernet cable). If it needs to be wireless, require it to be "https" as opposed to "http" access.

Enable strong security on your Wi-Fi access point. The best option is to use security mechanism "WPA2" with the "AES" only encryption method. Using other options like WEP, TKIP or TKIP+AES encryption, or none is not recommended.
Choose a password that is different from your administrator password and at least 20 characters long. You will only have to enter it once into the device and then it will remember it, so the length will not hinder your ability to access the Internet.
Disable WPS (Wi-Fi Protected Setup). While it is designed to help make it easy to securely set up your network, vulnerabilities have been found that could allow a fraudster access.

Internet Precautions

Be vigilant to any differences in the online banking login page
Do not follow unsolicited Web links or attachments in e-mail messages, which could lead you to a fraudulent Web page.
Maintain up-to-date anti-virus/anti-malware software

  Passwords

Passwords are a popular method of limiting access to sensitive information. However, their ability to stand up to fraudsters is greatly affected by you and your choices. Here are a few tips to make your passwords as strong as possible.

Selection
Change it up - Don't use the same password for each online account you access. Your online banking login ID or password should never be used at another site.
Don't be obvious - When selecting a Personal Identification Number (PIN) do not use obvious and guessable numbers for your PIN such as your date of birth.
Be creative - Use a combination of letters, numbers and special characters (e.g. asterisk "*") when possible.

Don't share - Do not share your passwords with anyone including family, friends and bank staff. If you need to grant access to your online accounts to another trusted individual, Rabobank offers two more secure options. Personal online banking customers can use Family Banking. In Commercial Online Banking, your company administrator can add users and assign permissions to those users.
Memorize - Don't write down your passwords. If you must, do so in a disguised manner and keep it in a separate secure location.
Security Questions - These questions are often used in case you forget your password or need to update it. Therefore, it is important to choose questions that you can remember the answers to but that would be difficult for anyone else to guess or know.
Change it regularly - Change your passwords regularly (at least every 90 days) and if you think a password may have been compromised, change it immediately.

Target the Victim - The fraudster targets an employee of the company, often a senior executive, using any number of techniques designed to either directly gather the login information or infect the computer with malware that can obtain it. These techniques include but are not limited to phishing, attachments or links to Web site infected with malware, fake friend requests on social networking sites and more.
Install Malware - The next step is to install the malware onto the victim’s computer. This malware often contains the ability to transmit what key strokes are taken and even screenshots of what the victim is looking at. The Zeus Trojan is an example of one of the more prevalent pieces of malware on the Internet that targets online banking customers.
Gather Information - When the victim logs into online banking the malware transmits the login information to the fraudster.
Initiate Takeover - Once the login information is transmitted to the fraudster, they can use it to log in and transfer money out of the accounts, while appearing to be a legitimate user.

Educate yourself and your employees about this type of scheme.
Don't respond to or open attachments or click on links of unsolicited emails. If it appears to be from a trusted source (e.g. bank, IRS, Better Business
Be wary of pop-up messages claiming your machine is infected and offering to fix the problem. These are often vehicles to install malware.
Use and install spam filters.
Install and maintain anti-virus, anti-spyware, anti-malware and firewalls. Set them to update automatically.
Be sure to install all security updates for your operating systems and other applications.
Monitor your accounts closely on a daily basis.

Immediately stop doing anything online that involves passwords or other sensitive information, such as online banking or shopping.
Confirm that your anti-virus, anti-spyware, and anti-malware are up-to-date.
Disconnect from the Internet and run a scan, deleting anything that is identified as a potential issue.
If you think any of your accounts may have been compromised, contact your bank immediately.

The fraudster recruits you through regular job search channels (e.g. job sites, classifieds, social networking postings) or e-mail. The position is often called a rebate or payment processor, trading partner or currency trader.
As a new employee, you are asked to provide your account information or set up a new account with specific parameters.
Funds are deposited into your account and you are told to take a "commission," (usually a percentage of the amount transferred) to aid in transferring money through your account to another account.

Use common sense. If it sounds too good to be true, it probably is.
Be very wary of work-from-home opportunities. Verify with outside agencies like the Better Business Bureau (U.S. based) or WHOIS/Domain Tools (International) that they are legitimate.
Don't accept jobs in which you are paid or receive commission for facilitating money transfers.
Remember legitimate lotteries or sweepstakes will not require payment to receive the winnings.
Never give out your personal or bank account information to a stranger.

Go with your gut instinct. If it sounds suspicious, it probably is.
Don't accept payments for more than the amount of the service with the understanding that you send the buyer the difference.
Don't accept checks from individuals you've only met online
Never give out your personal or bank account information to a stranger.
If someone who appears to be your friend asks for financial help through a social site, e-mail or text message, call them or find other means to verify that the request is legitimate.

Smartphone Safety

It is important that smartphone users protect themselves using some simple steps.
When banking or accessing other sensitive information via your smartphone, be sure you are using a secure Internet connection in a private location.
Use and regularly update anti-virus and anti-spyware programs on your smartphone, just as you would on your computer.
Set your bluetooth to the highest security setting available, and for extra security, disable your phone's bluetooth function when you aren't using it.
Use your phone's built-in security features by setting a PIN or password to prevent unauthorized access if your phone is lost or stolen.
Install any required upgrades from your wireless carrier and pay attention to system updates.
Download applications, "apps," only from trusted sources and known brand names.
Utilize additional security measures that some Internet based companies offer. For example, Google requires you to enter a verification code, in addition to a password, to access their programs.
If you get a suspicious text message or e-mail, do not respond or click on any links. Instead, call the sender using a phone number you trust, such as the one on your statement or from the phonebook. Rabo Agrifinance will never send an unsolicited text message to you.
If you purchase a used or refurbished phone, check it for pre-loaded malware or viruses that can be used to steal your data.

You are contacted by phone. The call could either be a "live" person or a recorded message that asks you to provide your personal information for various reasons (e.g. protecting your card, keeping your account open, etc.). The fraudster may already have some of your personal information and appear to be calling from a local number, which can make it very convincing.
You are sent an e-mail requesting that you call the number provided, in order to verify your personal information. When you call the number you are led through an automated menu that asks for various pieces of information including (but not limited to) account numbers, passwords, and other critical information. The automated system may sound legitimate and may even thank you for calling the bank or company you are supposedly verifying the information for.

If you get a text message about one of your accounts, do not text back or call the number that may be given. Instead, call the sender using a phone number you trust, such as the one on your statement or from the phone book. Rabo AgriFinance will never send an unsolicited text message to you.
Never give out your personal information via text message.
If you get a suspicious text message, do not click on any links as they could contain a virus or send you to a fraudulent website.
If you receive a text message about a "service" you've been signed up for, search the Web for other reports of the message to help determine if it is fraudulent.

Keep it Private
- Do not share your Social Security number, account numbers, driver's license number, or other sensitive personal information with any person or company you do not know or are unable to verify as legitimate. Only share the information if it is absolutely necessary.
- Never respond to an unsolicited request for your personal information.
- Shred documents containing confidential personal information. Don't just throw them out.
- Never lend your identification, credit or debit card to anyone.
Protect your Mail

The majority of fraud and identity theft incidents happen as a result of mail and garbage theft, so it is important to know how to prevent this.
- Safeguard your mail by using a locking mailbox or a post office box.
- Consider signing up for eStatements where it is available and making payments through Bill Pay instead of by check.
- Place outgoing mail in a U.S. Post Office mailbox to reduce the chance of mail theft.
- Know your billing and statement cycles. Contact the company's customer service department if you stop receiving your regular bill or statement.
Be Proactive
- Review your credit report at least once a year, looking for suspicious or unknown transactions. You can get a free credit report once a year from each of the three major credit bureaus at www.annualcreditreport.com.
- When in doubt about a transaction, contact your bank immediately.

Our research gives you a competitive edge

Learn More

Security Tips

The Newsroom

Customer Service

Agricultural Financing

Insurance

Input Financing