Fraud Prevention Tips

Personal and ID Security

State Farm Bank® deposit accounts are FDIC insured.

Identity Theft – occurs when someone uses your name, Social Security number, credit card number, or other personal information to purchase a product or service. There are ways you can prevent it:

  1. Only share personal information (passwords, account numbers, SSN, etc.) with those people you trust.
  2. Examine all bank statements and verify charges.
  3. Periodically verify personal information (phone number, email, etc)
  4. Order and review your credit report on an annual basis to verify your financial activity. You are allowed one free copy per bureau per year. Go to:
  • Major credit bureaus
    • Equifax – 800-525-6295
    • Experian – 888-397-3742
    • TransUnion – 800-888-4213
5. If you suspect that you have been a victim of identity theft, please call us immediately to report:
  • For lost or stolen State Farm Bank Credit Card:
    • Call State Farm Bank toll free at 877-SF4-VISA (877-734-8472). If you are outside of the United States, call us collect at 706-644-0582
  • Lost or stolen State Farm Bank Debit Card:
    • Call State Farm Bank toll free at 877-SF4-VISA (877-734-8472). If you are outside of the United States, call us collect at 309-994-6170.
  • When you report your card lost or stolen, we will cancel the card and send a new card to all authorized cardholders within 7 to 10 business days.
  • We recommend you to call the three aforementioned credit bureaus and also the Federal Trade Commission (FTC):
    • Federal Trade Commission
      600 Pennsylvania Ave, NW
      Washington, DC 20580
      Tel: 877-IDTHEFT (877-438-4338)

Phishing/Spoofing – these are fraudulent activities used to gather personal information by impersonating a trustworthy person or business place. State Farm Bank will never initiate a request for your personal information via email.

Red Flags

  • A phishing email will usually contain a generic greeting.
  • Some phishing emails look exactly like they came from a credible source. A credible source will never ask you for your personal or account information via email. Call the source to verify.
  • These E-mails are usually urgent requests.
  • Many E-mails will contain numerous misspellings and grammatical mistakes.
  • Don't respond to an email that asks for you to provide your personal information to verify or re-activate an account you have.
  • Avoid opening links through E-mails as they may contain viruses.

Card Security

ATM/PIN Safety Tips:
  • Fill out deposit slips or checks prior to transactions at the ATM.
  • Be observant of people and your surroundings.
  • Verify security devices/security seals on ATM are not broken.
  • Secure your card and/or cash immediately after your transaction.
  • Ensure you take your receipt after completing the transaction.
  • Never write your PIN down or share it for any reason.

Financial Card Safety:
  • Remember to sign the back of your credit and/or debit card immediately upon arrival.
  • Do not give out your financial cards number over the phone if you are at all suspicious.
  • Do not give out your financial cards number over the phone if you did not initiate the call.
  • Destroy all financial cards that you do not use or have expired.

Device Security

Password Safety Tips:
  • It's important to change your password periodically (1-2 months)
  • Use different ID's and passwords for your bank accounts and social networking sites.

Computer and Internet Safety Tips:
  • Keep your security software up to date so that you have the best protection and best online experience possible. Anti-virus software only catches approximately 43% of malware.
  • Using public Wi-Fi – Avoid wireless network with no security (i.e. WPA2). Unprotected wireless data can be intercepted and possibly used to steal your online account information.

Mobile Safety Tips:
  • At a very minimum use a PIN to restrict access to your mobile device. A strong password* is best.
  • Don't "root" or "jailbreak" your mobile device as this makes it more vulnerable to malicious software.
  • Set up account notifications to receive a text message or alert when changes are made to your account or if something suspicious occurs on your account.

*A strong password:
  1. Is at least eight characters long (14 or more recommended)
  2. Contains uppercase letters, lower case letters, numbers, and special characters (&$@*, etc.)
  3. Does not contain your user name, real name or company name.
  4. Does not contain a complete word, in any language.
  5. Is significantly different from previous passwords.