Digital Business Services — Security Best Practices

At St. Mary’s Bank, we’re committed to helping you manage your business easily and securely with our Digital Business Banking services.

We’ve implemented strong security controls to help protect your financial information, but account security is a shared responsibility. Business accounts do not receive the same regulatory protections as consumer accounts.

To help you reduce risk and protect your business, we encourage you and your team to follow these best practices:

Do:

• Use strong passwords with at least 16 characters, including letters, numbers, and special characters.
• Limit administrative rights on staff computers to help prevent malware.
• Use dual control for ACH and wire transfers (one person initiates, another approves).
• Use St. Mary’s Bank Digital Business Banking security features:
  • Turn on "Required Two-Factor Authentication" with each login
  • Amount limits for sub-users of ACH and Wire Services
  • Dual authorization for ACH and Wire transactions
• Keep all devices updated with current browsers, operating systems, antivirus software, and firewalls.
• Train staff on security risks and your business’s required practices.
• Enable login and transaction alerts for ACH and wire activity.
• Confirm any requested changes to account or payment details directly with the company before implementing them, to ensure the request is legitimate and not from a fraudulent source.
• Consider cyber insurance to help cover potential losses from cybercrime.

Don’t:

• Do not share or duplicate passwords between accounts or use browsers' auto-save features for them.
• Do not click links or open attachments in unsolicited emails. Always navigate to websites directly.
• Do not install Digital Business Banking “upgrades” from emails or pop-ups.

St. Mary’s Bank will NEVER contact you by phone, text or email requesting verification of your OBS password. We may contact you if a) no out of band document is received, b) a high-risk transaction is escalated by our monitoring software, or c) we suspect your Username or password is compromised.

At no time would St. Mary's Bank request your password, account number, or any other private information if we initiated the call.

 

Business Email Compromise (BEC)

BEC is a growing scam targeting businesses of all sizes. Learn how these scams work:

• FBI: Business Email Compromise
• Report suspicious activity at: IC3.gov

Need help?

Call us at 1-888-786-2791 — we’re here to protect you.