Citizens Bank N.A. is here to help you protect yourself against online fraud. By learning how identity thieves steal your personal information and following some simple tips, you will be less likely to become a victim.

What is Identity theft?
Identity theft occurs when your personal information is stolen and used without your knowledge to commit fraud or other crimes. It can destroy your credit and ruin your reputation.

How does Online Identity theft occur?
Perhaps the most common way that Identity theft occurs is by a process called “Phishing” Phishing is a scam in which thieves pretend to be companies or financial institutions. They send spam, imposter emails, or pop-up messages to get you to reveal your personal information.

Some tips to avoid Identity theft:

• Don't give out personal information on the phone, through the mail, or over the Internet unless you know who you are dealing with.
• Never click on links sent in unsolicited emails; instead, type in a web address you know.
• Use firewalls, anti-spyware, and anti-virus software to protect your home computer; keep them up-to-date. Visit OnGuardOnline.gov for more information.
• Don't use an obvious password like your birth date, your mother's maiden name, or the last four digits of your Social Security number.
• Update your web browser. Recent updates to web browsers, such as Microsoft Internet Explorer and Mozilla Firefox include built in Phishing protection.
• Remember: Citizens Bank will never ask for you to send personal or financial information by, in response to, or via a link in an Email.

1. Internet Banking - customers will now enter user ID on one screen and password on a second screen. The system, through a series of technology means, can determine if the customer is logging in from a computer that they regularly use (and have registered) or is logging in from an unrecognized computer. If the system cannot recognize the computer, the customer will have to answer a challenge question in order to complete the login, e.g. father's middle name, high school mascot, etc. They will also have a small picture that appears on the password screen. If a customer logs in, and no picture appears, it is a signal that they are not on the authentic Citizens Bank site.
2. ECorp - customers will be given tokens which generate one-time passwords. Each time they login, they will enter their user ID and the password provided at that point by the token.

1. Place a fraud alert on your credit reports, and review your credit reports.
   
   Fraud alerts can help prevent an identity thief from opening any more accounts in your name. Contact the toll-free fraud number of any of the three consumer reporting companies below to place a fraud alert on your credit report. You only need to contact one of the three companies to place an alert. The company you call is required to contact the other two, which will place an alert on their versions of your report, too. If you do not recieve a confirmation from a company, you should contact that company directly to place a fraud alert.
   
   Equifax: 1-800-525-6285; www.equifax.com; P.O. Box 740241, Atlanta, GA 30374-0241
   Experian: 1-888-EXPERIAN (397-3742); www.experian.com; P.O. Box 9532, Allen, TX 75013
   TransUnion: 1-800-680-7289; www.transunion.com; Fraud Victim Assistance Division, P.O. Box 6790, Fullerton, CA 92834-6790
   
   Once you place the fraud alert in your file, you're entitled to order free copies of your credit reports, and, if you ask, only the last four digits of your Social Security number will appear on your credit reports. Once you get your credit reports, review them carefully. Look for inquiries from companies you haven't contacted, accounts you didn't open, and debts on your accounts that you can't explain. Check that information, like your Social Security number, address(es), name or initials, and employers are correct. If you find fraudulent or inaccurate information, get it removed. See Correcting Fraudulent Information in Credit Reports to learn how. Continue to check your credit reports periodically, especially for the first year after you discover the identity theft, to make sure no new fraudulent activity has occurred.


2. Close the accounts that you know, or believe, have been tampered with or opened fraudulently. Call and speak with someone in the security or fraud department of each company. Follow up in writing, and include copies (NOT originals) of supporting documents. It's important to notify credit card companies and banks in writing. Send your letters by certified mail, return receipt requested, so you can document what the company received and when. Keep a file of your correspondence and enclosures.
   When you open new accounts, use new Personal Identification Numbers (PINs) and passwords. Avoid using easily available information like your mother's maiden name, your birth date, the last four digits of your Social Security number or your phone number, or a series of consecutive numbers.
   If the identity thief has made charges or debits on your accounts, or has fraudulently opened accounts, ask the company for the forms to dispute those transactions:
   • For charges and debits on existing accounts, ask the representative to send you the company's fraud dispute forms. If the company doesn't have special forms, use the sample letter to dispute the fraudulent charges or debits. In either case, write to the company at the address given for "billing inquiries," NOT the address for sending your payments.
   • For new unauthorized accounts, ask if the company accepts the ID Theft Affidavit (PDF, 56 KB). If not, ask the representative to send you the company's fraud dispute forms. If the company already has reported these accounts or debts on your credit report, dispute this fraudulent information. See Correcting Fraudulent Information in Credit Reports to learn how.
   Once you have resolved your identity theft dispute with the company, ask for a letter stating that the company has closed the disputed accounts and has discharged the fraudulent debts. This letter is your best proof if errors relating to this account reappear on your credit report or you are contacted again about the fraudulent debt.


3. File a complaint with the Federal Trade Commission. By sharing your identity theft complaint with the FTC, you will provide important information that can help law enforcement officials across the nation track down identity thieves and stop them. The FTC can refer victims' complaints to other government agencies and companies for further action, as well as investigate companies for violations of laws the agency enforces. You can file a complaint with the FTC using the online complaint form; or call the FTC's Identity Theft Hotline, toll-free: 1-877-ID-THEFT (438-4338); TTY: 1-866-653-4261; or write Identity Theft Clearinghouse, Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580. Be sure to call the Hotline to update your complaint if you have any additional information or problems.



4. File a report with your local police or the police in the community where the identity theft took place.
   Then, get a copy of the police report or at the very least, the number of the report. It can help you deal with creditors who need proof of the crime. If the police are reluctant to take your report, ask to file a "Miscellaneous Incidents" report, or try another jurisdiction, like your state police. You also can check with your state Attorney General's office to find out if state law requires the police to take reports for identity theft. Check the Blue Pages of your telephone directory for the phone number or check www.naag.org for a list of state Attorneys General.
   
   When you go to your local police department to file a complaint, bring a printed copy of your ID Theft Complaint form and your supporting documentation. Ask the officer to attach or incorporate the Complaint into their police report. Also ask the officer to sign the “Law Enforcement Report” section of your Compliant. If the officer wants more information about the ID Theft Report, you can tell them it is available on the FTC’s Web site’s Section for Law Enforcement at the link for “Identity Theft Report”. Ask the officer to give you a copy of the official police report with your ID Theft Complaint attached or incorporated. (In some jurisdictions the officer will not be able to give you a copy of the official police report, but should be able to sign your Complaint and write the police report number in the “Law Enforcement Report” section.)
   
   The ID Theft Complaint can be used to supplement an automated police report. If you can online file an automated report, complete the “Automated Report Information” block of the ID Theft Complaint. Attach a copy of any confirmation received from the police to you ID Theft Complaint.