Security Controls: Secure Access & Verifying User Authenticity

To begin a session within our online banking system, the user must key in a user ID and password. Our system uses a "three strikes and you're out" lockout mechanism to deter users from repeated login attempts. After three unsuccessful login attempts, the system locks the user out, requiring a phone call to the bank. To provide additional protection, a timeout feature is used which automatically logs you out of online banking after an extended period of time. Re-establishing and authenticating your online session helps to reduce unauthorized access to your accounts with us.

Two-Factor Authentication

New Tripoli Bank has implemented security features which add a layer of protection to your online account by letting you know it's really us, and letting us know it's really you.

Letting you know it's really us—personalized image and name:

  • You pick one of thousands of images, and then give the image a name to help identify it to you.
  • Every time you attempt to log in to your bank account your image and name will appear before you enter your password.
  • Seeing your image and name will let you know that you are at your real online banking site and not a fake or fraudulent site. This means it is safe to enter your password.
  • If the correct image and name do not appear, do not enter your password.

Letting us know it's really you—security questions:

  • You will be asked to set up several security questions that only you should know the answers to.
  • The security system will recognize the computers you normally use to access your online banking site.
  • In the future, if you or someone else attempts to log in to your account from a new or unrecognized computer, you will need to answer some of your security questions before being allowed to continue.

Secure Data Transfer

Once an online banking session is established, the user and the server are in a secured environment through the use of the Secure Sockets Layer (SSL) using 128-bit encryption. SSL encrypts information so that only the sender and receiver can decipher it. SSL ensures that you are getting your information directly from us, keeps all of the information that is transmitted between us completely confidential as it makes its way across the internet, and prevents the theft of this information while it is in transit.

Your browser will indicate when you are in a secure session with a "closed lock" or "unbroken key" icon. You will also see "https://" on your browser URL address line, indicating that you have established a secure link.

Router & Firewall

A combination of computer hardware (router) and software (firewall) is used to control traffic and authorize legitimate transactions passing over the network. It prevents unauthorized users from accessing our computer systems.

How You Can Help

While New Tripoli Bank continues to provide security controls to protect your information, we believe it is extremely important for you to share in the responsibility for security. The following are some ways you can protect yourself and your accounts:

  • Never share your password with anyone. Remember, a bank employee will never ask you for your password.
  • Change your password on a regular basis. If you think your password has been compromised, change the password and contact us immediately.
  • Use only the secure email service provided within our online banking system when sending or requesting account or personal information.
  • Consider using a personal firewall to prevent hackers from invading your personal computer, especially if you are using DSL or a cable modem to access the internet.
  • Install virus protection software and scan all downloaded software, as well as all diskettes, before use. Also, delete emails with attachments from unknown sources.
  • When you are done with your transactions, always click on the Exit button on the website to log off of the online banking system and prevent further access to your account.
  • Check your account and transaction history details regularly.

Protecting Your Account from Scams

An increasingly common scam called "phishing" uses official-looking emails to deceive consumers into disclosing their sensitive personal information. The email often directs the recipient to a lookalike website of a legitimate business, tricking consumers into thinking they are responding to a valid request. To avoid getting caught by one of these scams, do not provide your vital account information by email or phone unless you initiated the contact. New Tripoli Bank will never send an email asking you to reply with your account or personal information. If you have responded to a scam message and given out your details, you should report it immediately to New Tripoli Bank at 610-395-8834 or 888-298-8821.