Fraud & Security

BankFinancial is committed to protecting your personal financial information from fraud and providing you with complete online security and privacy. We comply with all laws relating to the privacy and security of customer personal and financial information and we maintain electronic security safeguards that comply with federal regulations and security standards.

Phishing is an Internet and email scam designed to elicit personal and confidential information for fraudulent purposes. Such email messages often are mass-mailed or "spammed" to thousands of potential victims. This is typically how it works:

For more information on phishing and other identity theft scams, visit the Federal Trade Commission (FTC) website.

Similar to email phishing, "smishing" targets your mobile phone through text messages and "vishing" targets voice mail systems. If you receive a text message or voice mail asking you for information about yourself, your account, or your card information, contact BankFinancial immediately at 1.800.894.6900. Do not respond to the text message or voice mail, do not call a number they have provided you, and do not share any information with them.

For more information on smishing and vishing, visit the Federal Bureau of Investigation's website.

Smartphones are now a main target for scammers trying to install malware to steal your information.

Texts. Beware of texts from unknown numbers that include a link to a website or app.  Cybercriminals will try to trick people into downloading viruses, Ransomware and other malware onto their smartphones and tablets- not just computers and laptops. Remember- do not click on any links embedded in text messages from unknown numbers.

QR Codes and Apps. Beware of fake apps and QR codes. Scammers will place QR codes in inconspicuous spots and links to free apps to steal your information. They may even steal existing apps and then make money from in-app purchases.  

ID Theft. If you think you gave out your information, or that someone already has your identifiable information- like your social security number or your bank account information- call your bank or financial institution as soon as possible and report it to the FTC Identity Theft site to protect yourself from further harm. 

Your online security has always been a top priority. That's why Enhanced Login Security is so important. This security service is free, easy, and most importantly, gives you extra protection from fraud and identity theft. Enhanced Login Security identifies you as the true "owner" of your accounts. Not only will your password be recognized, your computer will be recognized as well. If we don't recognize your computer - you've logged in from a public computer or one you haven't used before - you will be prompted to answer challenge questions as an additional line of defense against unauthorized access to your accounts. Enhanced Login is just one more way to prevent fraud, protect against identity theft, and strengthen your online security as a whole. 

In accordance with the U.S. Patriot Act, all financial institutions are required by law to obtain the following information for each individual or entity opening any new account:

We may also ask to see your driver's license or other identification documents. Thank you for your cooperation in providing this required information.

BankFinancial does not solicit confidential or sensitive Customer information - including your account number, Social Security number, Personal Identification Number (PIN) or password - via email. Beware if someone emails you claiming to represent BankFinancial and asking for your account number or personal identification information. BankFinancial associates will not ask for such information via email. Use of Social Security information has become an increasingly transparent security device. Your Social Security number should not be used as your user identification or password. Unauthorized individuals can use your Social Security number to access other information to which they are not entitled. BankFinancial continues to take steps to protect against this and other security threats. As you experience these increased security measures, we ask for your patience. Please understand that they are for your own protection.

The Internet can often quickly spread "urban myth" stories, but few stories gain such rapid appeal with so many potentially negative impacts on cardholder safety and confidence as the misleading stories circulating the Internet regarding PIN reversal to signal duress. PIN reversal technology is a concept based upon the possibility that a cardholder could reverse his or her PIN at an ATM to draw attention to a dangerous situation like a kidnapping or a robbery. Critics say that it is unlikely that anyone under duress could successfully employ this technique without compromising personal safety. Financial institutions within the United States have not deployed this technique despite several well-circulated email chain letters that have misstated this. PIN reversal is not a valid security option at an ATM.

Recently, there have been a number of cyber attacks targeted at financial institutions. These attacks are designed to exploit potential vulnerabilities in financial institution servers and Customer web browsers in an effort to gain login identification and password information. BankFinancial strongly urges you to take the following precautions to protect yourself from cyber attacks and keep your personal financial information private and secure.

BankFinancial uses various methods to ensure our Online Banking is secure: