CNB Online Banking News

Online Banking Upgrade 11/8/08 - Some Services Unavailable

Back to the top

Phone Scam - Security Bulletin June 5, 2008

Back to the top

Sign up for e-statements TODAY

Back to the top

Enhanced Log-On Security Tutorial

Back to the top

Enhanced Online Security with Multifactor Authentication and Site Verification

Mutifactor Authentication

New Online Banking Users - the enrollment process is simple as 1-2-3.
Once you sign in to online banking:

1. you will be prompted to select three security questions and provide their answers;
2. you will be asked to provide your e-mail address; and
3. we will recommend that you register your computer by installing a digital certificate on your most commonly used private computers.

Once this process is complete, we will be able to recognize you not only by your login and password, but also by recognizing the digital certificate installed on the computer from which you are trying to access your accounts. If all of these factors match when you are logging in to online banking, then you will not notice any difference in your future logins. You will simply continue to provide your login and password. If any of these factors do not match, for example if you are accessing your accounts from a different computer, then for security purposes, you will be asked to answer one of the questions you provided as verification that you are authorized to access your accounts.

A tutorial of the enrollment process is also available to assist you.

Site Verification

Site Verification is achieved by downloading a free software titled Verification Engine. This software is able to validate designated areas of websites which have protected web content. On CNB's site, this includes the log in box, rate pages and our Bank logos.

Once this software is installed, to validate a site, simply place your curser over one of the designated areas described above. Validation is confirmed if a green border appears around the edge of your monitor screen. This is your way of knowing that you are on a valid website. (See related news item about Phishing)

To download Verification Engine:
This free software can be downloaded at www.vengine.com.

Downloading is easy and takes just a few moments.

If you need assistance or would like further information, please go to www.vengine.com. This site will provide you will frequently asked questions and additional support information.

Back to the top

Maintaining System Security

Bill Pay Verification - as part of our continuing efforts to ensure the security of your assets, we have instituted a new procedure to verify selected CNBanker Online Banking bill payments that you make via your online banking account. Please call us if you have questions regarding this new Bill Pay Verification Service.

Change Your Password - we require password changes every 120 days (minimum). You are encouraged to change it as often as you prefer anytime you are logged in to CNBanker Online Banking using the "Options" menu feature.

Inactive Users - as a security protocol, online banking customers that are not active users (have not used the system within the past year) will have their user ID deactivated. Online access can be reactivated by calling our Customer Service Center at the number listed below. To avoid the deactivation sequence, users simply need to periodically log in to create a new active session.

Look here in the future for additional security updates that will further strengthen our online services.

Back to the top

CNB Security Bulletin: Phishing

What is Phishing?

Phishing is a high-tech scam that uses e-mail or pop-up messages sent by an imposter claiming to be from a trusted source, for example, your bank or a bank regulatory agency, and directing you to provide confidential information or to perform other tasks at a spoofed Web site.

How it Works

The scammers create a replica of an existing Web page to fool you into providing personal information. The message in the email directs the victim to "click" on a link that redirects them to a false Web page -- that appears to be a legitimate Web page -- to deceive you into disclosing personal information. Criminals send thousands of emails at a time to random or targeted addresses, hoping to trick consumers into providing personal information. The FBI calls phishing the "fastest growing cyber crime of the internet."

Canandaigua National Bank & Trust will never ask you to provide account or other personal identification information via email. Personal information is defined as:

• Account or credit card numbers
• Passwords or PINS
• Social Security Number
• Mother’s Maiden Name
• Other private information

What You Can Do to Protect Yourself and Your Personal Information

• You should consider as fraudulent any unsolicited request for your account information that you receive through emails, Web sites, or pop-up windows and report the request immediately to our Customer Service Center at 1-800-724-2621.
• If you receive an unexpected email saying your account will be shut down unless you provide financial or personal information, do not reply or click on any of the links in the email. Contact us directly at the above phone number which you know to be genuine.
• If you are uncertain about the information, contact us directly at the above phone number, and we will assist you.
• If you have unknowingly supplied personal information or financial information contact our Customer Service Center immediately, and we will assist you.
• Learn more about how to protect yourself from identity theft and electronic scams by clicking on the link below. You will be taken to the Federal Deposit Insurance Corporation’s (FDIC’s) Web site and be able to view a multimedia presentation that has been developed by the FDIC to help consumers protect themselves from identity theft. The presentation provides information on different types of electronic scams, steps you should take to secure your computer and protect yourself from identity theft, as well as actions you should take if you become a victim of identity theft.

Don't Be an On-line Victim: How to Guard Against Internet Thieves and Electronic Scams

Back to the top