Security Center

We are continually working to keep your banking information secure. Here are some of the methods we use and some tips that you can take to secure your banking from your mobile devices and your personal computer. We have also designed a section to inform you of the many different scams that are prevalent today. Some use email, some use smart phones, some use traditional phones but all of them are dangerous. If you think something is too good to be true, it probably is. You can also see more HERE on the Federal Trade Commission’s Consumer Advice website.

Keep yourself, and your money, protected and call us at (207) 442-8711 if you ever suspect someone is trying to steal your personal banking information.

Be Alert. Be Smart. Beware.

Each year, millions of consumers are victims of fraud. New data from the Federal Trade Commission show that, in 2025, nearly 30% of people who reported losing money to a scam said that it started on social media, with reported losses reaching a staggering $2.1 billion.

Don’t be a fraudster’s victim! We know thieves and cheats and criminals are skimming and phishing and stealing information and identities. At First Federal Savings we’re committed to helping you avoid fraud scams. Staying proactive and informed will protect you and enable you to react quickly and appropriately.

As your trusted financial partner, First Federal Savings & Loan Association of Bath will never contact you via unsolicited, emails, phone calls, text messages or any other medium to request your Online Banking credentials or personal information. We already maintain your information on file and have no need to contact you.

So, be alert and be smart. Here are some quick tips for avoiding fraud.

  • Emails – Watch out for emails that ask you to click a suspicious link or provide personal information. The sender may claim to be someone from First Federal Savings & Loan Association of Bath. Beware, it’s a scam.
  • Phone Calls – If you receive a call from someone claiming to be affiliated with First Federal Savings & Loan Association of Bath and asking you to verify your account number, password, or a code sent to you unexpectantly. Beware, it’s a scam.
  • Text Messages – If you receive a text message claiming to be from First Federal Savings & Loan Association of Bath and asking you to sign in or offer up your password or personal information. Beware, it’s a scam.

If you’re ever in doubt that an email, phone call or text message is legitimate, contact us directly to verify the request.

Debit Card Fraud Prevention Scam

Our Risk Office has received reports of account takeover fraud via the impersonation of fraud prevention tools. These scams use sophisticated methods combined with social engineering to deceive cardholders into revealing critical information and disregarding legitimate fraud warnings.

Account takeover fraud occurs when a scammer has obtained sufficient credentials to pose as the cardholder to financial institutions. They can then execute changes to account or card-level settings that assist in the commission of fraud, including demographic changes (phone numbers, emails, passcodes etc.), increased limits, PIN changes, and travel exemptions that suppress normal fraud monitoring.

Agents have reported instances of cardholders receiving phone calls claiming to be from the Fraud Prevention Department. The cardholder is sent a one-time passcode (OTP), is asked for their account number, and told to provide the code. The caller then instructs the cardholder to reply “No Fraud” to text messages sent by the real Fraud Prevention Department in response to fraudulent transactions.

Preventing account takeovers depends on ongoing vigilance and education:

  • Diligence and account monitoring is the first line of defense when it comes to stopping fraud.
  • Never respond NOT FRAUD to fraud alerts on activity you did not perform, regardless of who instructs you to do so.
  • When in doubt use the numbers listed on our website or click here

Types of Scams

What Is spoofing?

Spoofing is when a caller deliberately falsifies the information transmitted to your caller ID display to disguise their identity. Scammers often use neighbor spoofing so it appears that an incoming call is coming from a local number or spoof a number from a company or a government agency that you may already know and trust. If you answer, they use scam scripts to try to steal your money or valuable personal information, which can be used in fraudulent activity. Read more here.

Phishing for information means that someone is trying to trick you into giving out personal information that they will use to steal from you – whether it’s your cash, credit card or your identity. It could come in the form of an email that says you need to reset your online banking password by clicking on a bogus link; or a phone call from someone pretending to be your bank, asking for your social security number.

Avoid the Bait – these methods of communication are a red flag – First Federal Savings will never contact you this way. Protect yourself and hang up the phone. If it doesn’t seem right, give us a call us at (207) 442-8711. You can also report phishing email scams to spam@uce.gov.

Examples of Phishing Messages

You open an email or text, and see a message like this:

“We suspect an unauthorized transaction on your account. To ensure that your account is not compromised, please click the link below and confirm your identity.”

“During our regular verification of accounts, we couldn’t verify your information. Please click here to update and verify your information.”

“Our records indicate that your account was overcharged. You must call us within 7 days to receive your refund.”

The senders are phishing for your information so they can use it to commit fraud.

How to Deal with Phishing Scams

Delete email and text messages that ask you to confirm or provide personal information (credit card and bank account numbers, Social Security numbers, passwords, etc.). Legitimate companies don’t ask for this information via email or text.

The messages may appear to be from organizations you do business with – banks, for example. They might threaten to close your account or take other action if you don’t respond.

Don’t reply, and don’t click on links or call phone numbers provided in the message, either. These messages direct you to spoof sites – sites that look real but whose purpose is to steal your information so a scammer can run up bills or commit crimes in your name.

Area codes can mislead, too. Some scammers ask you to call a phone number to update your account or access a “refund.” But a local area code doesn’t guarantee that the caller is local.

If you’re concerned about your account or need to reach an organization you do business with, call the number on your financial statements or on the back of your credit card.

Source: OnlineOnguard.gov

Using our mobile phones makes certain tasks easier, such as checking our balance online and viewing transaction, transferring money or using Bill Pay. However, these great devices also make it easier for criminals to steal personal financial information.

Keep yourself protected and keeping your phone secure by following the tips found below.

  • Use a PIN to protect your phone. If it gets lost or stolen, whoever finds it won’t be able to use the phone without knowing the PIN. Talk with your phone provider to get instructions on setting up your PIN and don’t share it with anyone!
  • Don’t Respond to Unsolicited Texts or Emails. First Federal will never contact you by email or text, asking for personal information. If you receive any text or email from someone claiming to be First Federal, please call us immediately at (207) 442-8711 and delete it from your phone.
  • Keep Your Phone and your Apps Updated. Did you know that your phone is just like a computer? It needs to be updated on a regular basis to ensure that it’s protected from security loopholes and hacking threats. Talk with your phone provider about mobile security software that can help protect you and your phone.
  • Delete Junk Email. If you don’t know the person who sent the email, delete it. Never click on links within emails, as these links could install spyware software on your phone.

Source: OnlineOnguard.gov

Malware (malicious software) and viruses are everywhere on the internet, just waiting for you and your electronic devices. Many viruses are spread through an email that contains a link, which everyone clicks on, because it promises something. Others will automatically install themselves just by going to a website that has the virus hiding somewhere. You may not even know it has happened.

Your first line of defense is keeping your computer up to date. Computer Software companies are continually releasing updates that fix security loopholes and help protect you from outside threats. Set your system to update automatically, so you don’t have to worry.

Your second line of defense is just as important – installing Anti-Virus software and keeping it up to date. Many people think they are safe, just by installing the Anti-Virus software, but if the software is not regularly updated, it’s not fully protecting you. Set your system to update automatically and check it to be sure it’s updating regularly.

Don’t click on links or open attachments in emails. This is a very common way that Viruses and Malware is spread. Don’t forward unnecessary emails to people in your address book.

Don’t click on pop-ups when you are visiting a website. Close pop-ups by clicking the “X” in the title bar.

Backup, Backup, Backup! Keep your computer files protected by scheduling a regular back up. If you are infected, you will still have a copy of your records.

Computers that are infected with Malware may become slow and unresponsive; you may have trouble starting it or shutting it down or it may start popping up messages and websites you haven’t clicked on. If you suspect your computer is infected, contact your local computer company for removal of the Malware and/or viruses.

File a complaint with the Federal Trade Commission

Protect your credit and your personal information

Identity theft occurs when your personal information is stolen and used without your knowledge. Whether it’s used to commit fraud or other crimes, identity theft costs time and money and leads to a chain of events that can greatly impact your quality of life. There are ways to protect yourself. Flushing Bank is here to help you.

Deter identity theft

Identity theft can happen when a thief rummages through your trash, phishes electronically, steals your wallet or purse, and more. You can deter identity theft and safeguard your information if you:

  • Shred financial documents
  • Protect your Social Security number
  • Never give out personal information unless you trust who you’re dealing with
  • Never click on links in unsolicited emails
  • Use firewalls and anti-virus software to protect your devices
  • Never use obvious passwords such as your birthdate or mother’s maiden name

Detect identity theft

Monitor your financial accounts and billing statements so that you can spot suspicious activity quickly and easily. Stay alert to these signs that require immediate attention:

  • Bills that do not arrive as expected
  • Unexpected credit cards or account statements
  • Denials of credit for no apparent reason
  • Calls or letters about purchases you did not make
  • Unfamiliar transactions on your financial statements and accounts

Top theft-detector: Monitoring your credit report

One of the most important steps you can take toward detecting identity theft is monitoring your credit report. You are entitled to one free copy of your credit report every year from each of the national consumer reporting companies – Equifax, Experian, and TransUnion. While reviewing your credit report may not prevent identity theft, it can help you spot it. Check your report for:

  • Unrecognizable names, accounts, addresses, and Social Security numbers
  • Any other fraudulent or suspicious information

Visit AnnualCreditReport.com or call 1-877-322-8228 to order your free credit reports each year.

Defend against identity theft

If you come across suspicious activity, notify the bank and credit card companies. For any Flushing Bank accounts, contact your local branch or call 1-800-581-2889. We will work with you to make it right regarding unauthorized transactions or any incorrect reports submitted to credit bureaus.

If you believe you have been a victim of identity theft, visit IdentityTheft.gov, where the Federal Trade Commission offers checklists and resources on how to set up a recovery plan.

Deter. Detect. Defend.

To learn more about identity theft and how to prevent and defend against it, visit ftc.gov/idtheft.

Email Scams

Email scams are a very common type of email that will come into your inbox. Some are easy to spot, some are a little more difficult to identify because the scam artists can be very cunning. Something may seem like a legitimate offer, when really, it’s a plan to steal your money.

Please always use caution when dealing with unsolicited email. Work only with companies you know and have dealt with in the past. If you don’t know who the person or company is that sent you the email, don’t fall prey to these criminals – delete that email!

The Bait:

Advertisements that offer home-based work in “one of the fastest growing industries” or by “being your own boss” or by “earning thousands of dollars every month”.

The Catch:

What they are not telling you is that you have to spend a lot of money out of pocket and that you won’t be paid for all of the work that has to go into this home-based scheme. You may have to buy software, supplies and equipment.

What You Can Do:

Legitimate business that offers home-based employment should provide you with a written description of the program that they are offering. These details should include any upfront costs that you are expected to pay, exactly how money is earned, who will pay you, etc. Be sure to check/talk with current employees, not people who are “paid” to give you a good reference.

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General

The Bait:

You’re contacted online by someone who appears interested in you. He/she may have a profile you can read or a picture that is e-mailed to you. For weeks, even months, you may chat back and forth with one another, forming a connection. You may even be sent flowers or other gifts.

The Catch:

But eventually, it’s going to happen—your new-found “romance” is going to ask you for money. They may even ask you for your online banking credentials.

You send money…but the requests won’t stop there. There will be more hardships that only you can help alleviate with your monetary gifts. He/she may also send you checks to cash since (s)he’s out of the country and can’t cash them himself or herself, or (s)he may ask you to forward him a package.

So, what really happened? You were targeted by criminals, probably based on personal information you uploaded on dating or social media sites. The pictures you were sent were most likely phony lifted from other websites. The profiles were fake as well, carefully crafted to match your interests.

In addition to losing your money to someone who had no intention of ever visiting you, you may also have unknowingly taken part in a money laundering scheme by cashing phony checks and sending the money overseas and by shipping stolen merchandise (the forwarded package).

You can read more here

The Bait:

Many emails may make their way into your inbox, promising some pill, patch, cream or other product that will result in dramatic weight loss in a very short amount of time. Others promise that their product will block fat absorption, carbs or calories.

The Catch:

These emails are only gimmicks. There is nothing available to purchase that will drastically reduce your weight, without significant changes to your behavior.

What You Can Do:

“Experts agree that the best way to lose weight if to eat fewer calories and increase your physical activity so you burn more energy. A reasonable goal is to lose about a pound a week. For most people, that means cutting about 500 calories a day from your diet, eating a variety of nutritious foods, and exercising regularly. Permanent weight loss happens with permanent lifestyle changes. Talk to your health care provider about a nutrition and exercise program suited to your lifestyle and metabolism.”

Source: OnguardOnline.gov

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General

The Bait:

You are contacted by mail or email claiming that you have “won” a foreign lottery or an online sweepstakes. The letter may even represent that it is from a company or agency that you’ve heard of before. However, in order for you to claim your winnings, you are being asked to cover taxes, fees shipping costs or insurances by sending a bank check or through a wire transfer.

The Catch:

Playing in a foreign lottery is illegal. These letters are simply an attempt to get you to wire transfer money to these crooks. Once it’s transferred, it’s gone forever. They may ask for a credit card number, that they will use to rack up credit card charges in your name. Maybe they will ask you for your banking information, so that they can empty your accounts.

What You Can Do:

Though it’s tempting to play and it’s exciting to learn you that you’ve “won”, these are only schemes designed to steal your money. If you have really won a sweepstakes or lottery from a legitimate company, you will not have to pay anything at all to claim your winnings.

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General

The Bait:

When selling items on an online auction posting or by an ad in the newspaper, you get a response from a so-called buyer who wants to write a check for more than the purchase price and asks you to wire the difference back to them.

The Catch:

The check is counterfeit and if you deposit it into your account, you will lose any money that you wire back to them. These fake checks often look very real and can even trick your bank teller.

What You Can Do:

Never accept a check for more than what you are selling your item for. Consider not accepting checks at all and instead use cash or a trusted online payment service.

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General

The Bait:

You receive a phone call from someone who is claiming to be a relative in need of help, immediately. The family member may say that their car has broken down, that they are in jail, in the hospital or in a foreign country. They ask you to keep their situation secret from everyone else in the family as they plead for you to wire money to them as soon as possible.

The Catch:

This imposter can easily impersonate a trusted friend, family member or organization. If you send money, they may call you for more.

What You Can Do:

If you receive a call like this, check the story with another family member or try to ask the caller questions that a stranger couldn’t possibly know. Don’t ever feel pressured to send money right away without checking everything first.

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General

The Bait:

You are contacted by email, asking if you are interested in becoming a “secret shopper” to help evaluate customer service at different companies. The first company you are asked to evaluate is Western Union, Money Gram, or another similar company. You are provided with a seemingly legitimate check to deposit into your bank account and are then asked to withdraw the funds in cash and wire it – usually to a foreign country. You are told to fill out an evaluation form on how the wire company performed and then you get to keep a portion of the funds they have provided.

The Catch:

The check they are providing to you is fake. It will bounce and be returned to your bank. Then you will be responsible for covering the full amount of the check, in addition to insufficient funds charges.

What You Can Do:

Never agree to deposit a check from someone you don’t know and then wire money back to them. You will be left with having to cover the costs.

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General

The Bait:

While searching for an apartment or a vacation rental, you find a great prospect at a great price. The landlord says that it can be yours if you send money through a wire transfer. They might say that they are out of the country at the moment and will have their lawyer or another representative get the keys to you.

The Catch:

There is no rental, which you will discover only after you’ve wired your money, and it is gone. A scammer has hijacked a legitimate rental listing by changing the contact information or there never was a rental to begin with – the scammers might have created a bogus listing.

What You Can Do:

Don’t wire money to cover any sort of security deposit, first month’s rent or application fee. View the property in person and if you can’t see it for yourself, ask a friend or relative to view it for you. Be skeptical of anyone who claims they are out of the country and need you to wire the money to them. Do more research to see if the listing is on any other rental sites or real estate sites.

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General

The Bait:

You receive a message stating that a product is a “miracle cure”, “scientific breakthrough” or an “ancient remedy” that can take care of a wide variety of ailments or diseases. Usually, the message will state that the supply is limited so you need to act fast. There is a “money-back guarantee” but you will have to pay in advance. Amazing testimonials accompany the message.

The Catch:

No product or dietary supplement is available online that can shrink tumors, cure insomnia, treat Alzheimer’s disease, or prevent severe memory loss.

What You Can Do:

Always consult your health professional before buying any “cure-all” product.

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General

The Bait:

There are ads everywhere for debt relief “programs” that will consolidate your bills into one low monthly payment. They offer to stop creditors from calling you, foreclosures, repossessions and even to wipe your debt completely.

The Catch:

These programs require that you claim bankruptcy in order to “wipe out your debt”, though they rarely tell you this upfront. Claiming bankruptcy will ruin your credit for many years. Bad credit can affect where you live, where you work, getting credit or insurances. In addition, you will have to go through a complex process to claim bankruptcy, including paying lawyer fees.

What You Can Do:

If you are having trouble paying your creditors, be upfront and honest with them. Ask them to work with you to create a modified payment plan. You could also contact a credit counseling service who will work with you and your creditors to develop a plan for repayment.

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General

The Bait:

You receive notification that you have been “pre-qualified” for a low interest loan or credit card – even though other banks have turned you down. All you need to do is pay a processing fee first.

The Catch:

Paying in advance for a credit offer is a scam. A legitimate pre-qualified offer still means you have to go through an application process to see if you can get the credit card or loan.

What You Can Do:

Don’t make a payment for a loan or credit card directly to an individual; legitimate lenders don’t ask anyone to do that. In addition, don’t use a wire transfer service or send money orders for a loan. You have little recourse if there’s a problem with a wire transaction, and legitimate lenders don’t pressure their customers to wire money.

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General

The Bait:

You receive a message that a great “investment” opportunity is available to you that promises a high rate of return on your money. Usually, you have to act fast to invest and send your money to the “company”. Many times, the investment is to start a new bank or company. Others may be more vague about the investment but reassure you with promise that you will earn a high rate of return.

The Catch:

These “investments” are run by crooks, who set up, get “investors” and then shut down quickly before they can be detected. Once you’ve sent your money, it is gone forever, along with the criminal who tricked you.

What You Can Do:

Take your time to evaluate your investments. Find several sources of information. Don’t let someone pressure you into immediately investing. Ask an accountant or an investment adviser to review the investment for you.

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General

The Bait:

People claiming to be business people, officials or surviving spouses of officials in Nigeria, send a message to you saying that their money is tied up temporarily. They offer to transfer lots of money back to you if you help them out this one time. They can be very persuasive and can easily fake documents to make you think that their position is legitimate.

The Catch:

The emails are really from crooks who are trying to steal your money or your identity. According to State Department reports, people who have responded to these emails have been beaten, subjected to threats and extortion, and in some cases, murdered.

What You Can Do:

If you receive an email from anyone asking for money, delete it. They are trying to manipulate you and your emotions.

How to Report a Scam:

Contact the Federal Trade Commission and Maine’s Attorney General. Call your local Secret Service field office. Local field offices are listed in the Customer Service Guide of your telephone directory.