SECURITY

SECURITY CHECK LIST

To better serve you, MetroBank NA recommends the following checklist to help decrease your exposure to online fraud. Your own computers can be vulnerable to computer hackers when prudent security measures are not taken. Please be assured that MetroCorp and its online banking vendors will provide the highest security available to our customers in safeguarding the data.

I. Install the latest anti-virus and anti-spyware software on your computer

• This is the best first line defense against hackers. Software is always changing so make sure to have the latest version’s virus definition file.

II. Do not open unknown emails

• This is the most common way for hackers to install spyware and viruses on your computer. These emails can also contain links to fictional websites used in phishing attacks. Never open any web links contained in unknown emails.

III. Check to make sure you are on the bank’s secure website

1. Check the web page URL. Normally, when browsing the web, the URLs (web page addresses) begin with the letters “http”. However, over a secure connection the address displayed should begin with “https” – note the “s” at the end.
2. Check for the “Lock” iconThere is a de facto standard among web browsers to display a “lock” icon somewhere in the window of the browser ( NOT in the web page display area! ) For example, Microsoft Internet Explorer displays the lock icon in the lower-right of the browser window:

As another example, Mozilla’s FireFox Web Browser displays the lock icon in the lower-left corner:

IV. Change your passwords frequently on personal email accounts such as gmail, yahoo, hotmail, etc.

• Changing your passwords frequently can help deter hackers from easily gaining access to your email accounts thus personal and sometimes financial information and activities. This is a simple yet very important measure to guard yourself against theft/fraud.

V. Beware of incoming emails that give you payment instructions. An example is an email from someone posing as a vendor asking you to make a payment online on an invoice and providing bank routing and account numbers.

• Call the vendor and verify the validity of such requests.

For Business Cash Management customers with ACH and/or Wire functions, in addition to the above:

I. Make sure your email address is accurate in the system.

• All ACH and wire submissions are emailed for confirmation. If you see any suspicious ACH and wires confirmations contact us immediately.

II. Separate duties of creator and approver for ACH and Wires

• This step provides additional protection in case a hacker is successful in accessing one of your computers. They may gain the ability to create a wire but not to send the wire because both of the unique user IDs and passwords are required to complete the wire.

III. Do not re-enroll your computer into once it has been enrolled

• Once your computer is enrolled it will not need to be re-enrolled. The system can detect if the login request is coming from a different computer and usually why it asks for the security questions. This can be a sign a hacker has gained access to your computer and is trying to access your security answers to enroll their own computer.

If you suspect your computer system has been compromised, you need to shut down your computer immediately and remove access from Internet. You should then contact our Customer Service Department at once to report such incidents.

MetroBank NA has taken strong measures to ensure the security and safety of your account and its overall online banking system. By staying alert to potential security threats and keeping in mind the suggestions listed above, you can help us keep online banking extremely safe and secure. Follow the good practices and use the knowledge we’ve provided here, and you will be much more prepared to enjoy the conveniences of online services with peace of mind.

Member FDIC