Fraud and Security Center

The impact of identity theft and online crimes can be greatly reduced if you can catch it shortly after your data is stolen or when the first use of your information is attempted. One of the easiest ways to get the tip-off that something has gone wrong is by reviewing your monthly statements provided by your bank and credit card companies.

If you suspect your debit card, ATM card, checks, or credit card have been lost, stolen, or compromised in any way, please use the following guidelines to contact us.

Lost or Stolen Card:
  • During Business Hours, please call (574) 235-2000 or toll free 800-513-2360 Monday through Friday from 8:00 a.m. to 8:00 p.m. ET, and Saturday 9:00 a.m. to 1:00 p.m. ET. 
  • If you have a lost or stolen Resource Plus Card to report during non-business hours and are in the United States, please call 800-472-3272. International callers should call collect (973) 682-2652.
  • MasterCard® Theft Resolution Services will also assist if you think your identity has been compromised. Certified resolution specialists are available 24/7 and can help you with credit bureau notification, canceling all of the lost or stolen cares in your wallet, and more! Call 800-622-7747.

If you have debit card transactions within Online Banking or on your statement that you did not make, or you are seeing a discrepancy in a transaction amount, please contact your Banking Center or call (574) 235-2000 or toll free 800-513-2360 Monday through Friday from 8:00 a.m. to 8:00 p.m. ET, and Saturday 9:00 a.m. to 1:00 p.m. ET.

1st Source will NEVER request that you reveal or confirm your personal or account information via email, an email link or text message.

Typically, fraudsters blanket an area with calls, texts, or emails hoping that even 1% of those contacted will provide personal account information. These scams have hit the largest banks in the past. Now the fraudsters have moved to regional and community bank clients hoping to trick unsuspecting people into giving up their account information. Robotic systems are used to randomly select phone numbers in a certain area to send calls/texts.

The crooks will often use the name of the largest bank in a geographic area. Since 1st Source has the largest deposit market share of a bank headquartered in Northern Indiana, we have been targeted in the past. A bank with a higher market share will give them a higher opportunity to hit our customers.

If you are contacted by someone claiming to be from 1st Source and they request any personal account information, hang up or delete the message without providing any information. Unfortunately, if you have been tricked into releasing information, contact your Banking Center immediately or call Customer Service at (574) 235-2000 or toll free 800-513-2360 Monday through Friday from 8:00 a.m. to 8:00 p.m. ET, and Saturday 9:00 a.m. to 1:00 p.m. ET. Clients should also review their account history to ensure no fraudulent transactions have taken place.

For questions about your account, or to report a lost or stolen card:
  • Call 24-hour Cardmember Service at 800-558-3424. 
  • To reach Cardmember Service via email, login to your account and click on Messages.
  • If you have a lost or stolen Credit Card to report during non-business hours and are in the United States, please call 800-558-3424. International callers should call collect (701) 461-1556.
Lost or Stolen Checks:

If your checks have been lost or stolen please click here.

During business hours, please call (574) 235-2000 or toll free 800-513-2360 Monday through Friday from 8:00 a.m. to 8:00 p.m. ET, and Saturday 9:00 a.m. to 1:00 p.m. ET.

Immediately Follow These Five Steps: 

If it's related to 1st Source, please call (574) 235-2000 or toll free 800-513-2360 Monday through Friday from 8:00 a.m. to 8:00 p.m. ET, and Saturday 9:00 a.m. to 1:00 p.m. ET. If it is related to another financial institution, contact them directly.
Contact one of the three consumer reporting companies and have a fraud alert placed on your credit report. This will help stop fraudsters from opening any additional accounts in your name. Contact only one of the following (they are required to contact the other two):

Close any accounts that you know - or even think – might have been tampered with or opened fraudulently. Report the transgression to a security spokesperson at the relevant company. Ask them about any additional steps – they'll probably ask you to send relevant copies of the fraudulent activity.

You can also use the FTC Theft AffadavitID Theft Affidavit (PDF, 56KB) as formal certification of your dispute.

Use the online complaint form; or call the FTC's Identity Theft Hotline, toll-free: 1-877-ID-THEFT (438-4338); TTY: 1-866-653-4261; or write Identity Theft Clearinghouse, Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580.

Sharing your identity theft complaint with the FTC will help law enforcement officials track down identity thieves and stop them. Call or visit the local police or police in the community where the identity theft took place and file a report. Have a copy of your FTC ID Theft complaint form available to give them. Obtain a copy of the police report and the police report number.
  • Never share user IDs, passwords, PINs, etc. with anyone.
  • Do not use the same login or password on any other website or software.
  • Keep sensitive data out of your email
  • Emails and text messages are not secure and can be intercepted by hackers.
    • Never send any personal information (account numbers, social security numbers, passwords, etc) via text message or email.
  • Do not open any messages from an unknown sender, and do not click on unfamiliar links that may be sent via text message, popup, or email
  • Do not allow a web site to keep sensitive information or credentials for future convenience.
  • It is best to use a home or work network that is protected by firewalls and antivirus software.
  • Do not neglect your device software updates to reduce the risk of having your device hacked or compromised.
  • Do not connect to public or unknown wireless networks, there's a higher risk of your device being compromised.
  • Protect your device with a password or passcode when it is not in use.
  • Use the security options available on your device (password, biometric, PIN) Also consider adding additional security and antivirus software.
  • Monitor your accounts on a regular basis and report any suspicious activity to 1st Source.
  • Sign up for e-Statements, notification of your statements emailed but the email does not contain any sensitive information.
  • Alerts notify you of your balances and deposits.
  • CardValet app control where your Resource Plus Card is used and receive alerts anytime your card is used.

Protect yourself from skimming at payment terminals & ATMs.  

What is Skimming?
Skimming is an illegal activity that involves the installation of a device, usually undetectable by card users, that secretly records bank account data when the user inserts a debit or credit card into the card reader. Criminals can then encode the data onto a blank card and use it to loot the customer's bank account.

How to spot card skimmers.

There are different kinds of skimmers. It is often an inconspicuous device that's smaller than a deck of cards. Sometimes tiny cameras are used to observe people as they put in their PIN. Other times, a very thin, basically duplicate keypad will be placed over the keypad.
 
Skimmers can be installed on a payment terminal such as a gas pump, ATM or it could even be a hand-held unit used by a corrupt employee at a restaurant, store or other merchant.

Identifying Signs of a Skimmer

skimmer
1. Examine the card reader for signs of tampering.
  • Glue marks around the reader
  • Tape sticking out from under the reader
  • Reader is skewed or hanging off to the side
  • Loose piece of plastic or equipment sticking out from reader 
 
hidden camera
2. Look around for a hidden camera.

Small cameras are often attached to the ATM to get your PIN number after you enter your card. Cameras may be hidden above the PIN pad, above the display screen, or in nearby structures, like a rack or shelf.

  • If you see a small pinhole drilled into the ATM, be careful, as it could be a small camera.
  • If you see something like a pack of cigarettes, book, deck of cards, or mug sitting on or near the ATM, move it aside to see if it is hiding a camera.
  • Legitimate cameras installed by the bank are usually very noticeable. They may be large, and there may be a sign indicating where they are. Card skimmer cameras are usually very small or hidden.
 
top of atm
3. Check the top of the ATM for unusual plastic pieces.

These are usually shaped as a rectangular bar. It will usually be glued or taped onto the ATM itself. This bar may contain a camera and other equipment to get your card info.

  • Look for a small pinhole in the bar. If you see one, it likely contains a small camera.
  • If it is attached to the light, be especially wary. Normally, there should nothing covering the ATM's light.
  • If you're uncertain about a piece of equipment on the ATM, try wiggling it with your hand. If it budges or moves, it is likely a skimmer.

Useful tips to avoid card skimmers and guard against fraud:

  1. Keep an eye out. – Be aware of your surroundings and people nearby.
  2. Check for tampering. – When you approach an ATM or a merchant's card reader, check for some obvious signs of tampering at the top of the machine, near speakers, the side of the screen, the card reader itself, and the keyboard. Note if things look different, such as a dissimilar color or material, graphics that aren't aligned correctly. If something doesn't look right stop your transaction and inform the merchant and 1st Source.
  3. Be ready. Have your card ready for your transaction when you approach the card reader or ATM.
  4. Memorize your PIN. – never write it down or store it with your card.
  5. Cover those keys. – when you are typing in your PIN cover your hand.
  6. Wiggle Everything. – Even if you can't see any visual differences, push at everything. Terminals are solidly constructed and generally don't have any jiggling or loose parts.
  7. Watch out for weekends. – Criminals typically install skimmers on Saturdays or Sundays, and then remove them before locations reopen on Monday.
  8. Use the chip. – Whenever possible, don't use your card's magnetic stripe to perform the transaction. When you use your chip card your personal information is never transmitted.
  9. Use your phone and Mobile Wallet. Consider using Apple Pay, Samsung Pay, or Android Pay. These services tokenize your card information, so your personal information is never exposed. If a criminal somehow intercepts the information, he'll only get a useless virtual credit card number.
  10. Pay attention to your cell. Keep your phone handy so 1st Source can reach you. Keep your phone numbers and email address up-to-date with the bank. Responding quickly can mean stopping attacks before they can affect you.
 
Remember: If something doesn't feel right regarding an ATM or a merchant's card reader, don't use it.
 
Monitor your account daily through Online or Mobile Banking and report suspicious transactions to 1st Source. Rest assured, customers of 1st Source Bank are protected from financial loss from skimming fraud.
 
There are other safeguards.  
  • With Fraud Monitor, we analyze your debit and ATM card transactions 24 hours a day — if a suspicious transaction is found, then one of our fraud analysts will contact you to confirm the transaction and prevent loss. 
  • We monitor both local and international fraud trends to make sure we are aware of the latest scamming developments. 

Your online security is always a top priority for us. That's why we employ and offer the following initiatives to keep your information private and secure.

This security service is free, easy and most importantly, gives you extra protection from fraud and identity theft.

1st Source employs multifactor authentication to keep your confidential information safe, and it conforms with the latest regulatory guidelines. If you are logging in with your username and password for the first time on a PC, we will send a one-time passcode via email, voice call, or text message. When prompted, simply enter the one-time passcode to complete the log-in process.

This security process provides a safe and easy-to-use means of reducing your risk of credential exposure by using multiple sources to confirm that it's really you logging in to your account.

1st Source also offers Fingerprint ID. It's more secure than a password, and it's completely unique to you.

  • Use your fingerprint to securely log in to your account.
  • Uses the same fingerprint recognition you set up on your mobile device.
  • Go to Settings on the Mobile App to find out which verification methods are available on your particular device. For more information about all of our Mobile Banking products and features, click here.

Fingerprint ID is compatible on iPhone 5S or higher iPad Pro, iPad Air 2, or iPad mini 3 or later, running iOS 8 or higher and Android devices that have compatible fingerprint support running Android 6.0 or higher.

MasterCard®Protection

With MasterCard Zero Liability Protection, you can use your card anywhere – on the phone, online and in stores – with confidence, knowing you’re protected. Your MasterCard comes with zero liability, so you’re not liable for unauthorized purchases.*

Your debit card also includes an extra benefit: MasterCard® Identity Theft Resolution Services. If you think your identity has been compromised, MasterCard® will provide certified resolution specialists to help you. They’re available 24/7.**

CardValet® - Your Debit Card on Your Terms

With CardValet®, you can save time and rest easy by controlling the debit card in your wallet with the phone in your pocket! An app for smartphones, it can help you to avoid fraud, stick to your budget, control where your 1st Source Resource Plus® Debit Card is used and more.

It's easy too – simply download the CardValet app for free on Apple® or Android™ devices, enter your card information and you're set up for control of your card.

* As a cardholder, you will not be held responsible for unauthorized transactions if: you have used reasonable care in protecting your card from loss or theft; and you have reported the card as lost or stolen to 1st Source Bank within two business days of discovery. For terms, conditions and exclusions see the Customer Liability section of the 1st Source Agreement for Deposit and visit MasterCard’s website: www.mastercard.us/zero-liability.html. Read the MasterCard® Guide to Benefits.

** MasterCard® Theft Resolution Services will assist you if you think your identity has been compromised – with 24/7 access to certified resolution specialists who can help you with credit bureau notification, canceling all of the lost or stolen cards in your wallet and more. Call 1-800-MC-ASSIST (1-800-622-7747).

A free detection service designed to combat debit card fraud

Fraud Monitor identifies uncharacteristic debit account purchases and activity on all 1st Source Resource Plus® debit cards. If activity on your card appears suspicious, Fraud Monitor will call you at the primary telephone number you have on record with 1st Source to determine if you have authorized the transaction. You can respond by touch-tone keypad, or call a toll-free number for more information.

What will Fraud Monitor do?

If a transaction on your card is not typical, this is what you can expect:

  • An automated call will ask you to verify recent transaction activity on your card.
  • You can validate charges via your touch-tone keypad.
  • If the transaction is not yours, Fraud Monitor will help stop further fraud.
  • You will also be provided a toll-free number to call should you have additional questions or wish to speak to a fraud analyst.
  • If you are not available, a message will be left for you to call Fraud Monitor.
  • If extreme risk is detected, a restriction may be placed on the use of your card until transactions are verified.

What will Fraud Monitor not do?

Neither Fraud Monitor, nor 1st Source will request your account number, debit card number, password or PIN. However, if you call Fraud Monitor, we will need a way to confirm your identity. If we call you, our automated service will ask for the ZIP code on record with your account. If you call us, we may ask for the last four digits of your Social Security number or your address before we can move on to verify your transactions.

What do you need to do?

  • Please keep us informed of your correct phone numbers (home, work, and cell) and address at all times. Let us know which number should be used as your primary phone number.
  • Notify us if your debit card or cell phone has been lost or stolen (see number below).
  • If you are planning to travel outside of the United States, alert your local 1st Source banking center, to ensure that your debit card transactions are approved.

Our goal, quite simply, is to protect your account at 1st Source and minimize your exposure to risk and the impact of any fraud. 

If you have a lost or stolen Resource® or Resource Plus® Card to report during regular business hours, please call (574) 235-2000. During non-business hours, if you are in the United States, please call (800) 472-3272. International callers should call collect, (973) 682-2652.

To help you feel more secure about the safety of your personal information, 1st Source has partnered with Deluxe® to offer an identity theft protection plan. You know Deluxe; you've used the checks they produce for years.

What is identity theft?

Identity theft affects millions of consumers every year. It occurs when someone uses your financial or personal information without permission to open new accounts, take control of existing ones or make purchases with your identity.

1st Source Identity Theft Protection powered by Deluxe offers three customized packages to fit your needs.
  • ID Protect - Includes proactive Internet monitoring of up to 14 personal identity points to ensure that your information is not exchanged online. Also includes identity restoration to help you recover your identity in the event that it is compromised.
  • ID Protect Plus - Combines all of the features of ID Protect, along with the monitoring of one credit bureau to alert you to any changes in your credit report.
  • ID Protect Platinum - Includes ID Protect and the monitoring of all three credit bureaus to alert you to changes in your credit report. Also includes public record monitoring and emergency card assistance in case any of your cards are ever lost or stolen.

Additionally, Deluxe® offers each of their services a la carte so you can pick which services are right for you.

I'd like to learn more about Identity Protection powered by Deluxe®.

Identity Theft Protection powered by Deluxe® is serviced by EZShieldSM, Inc. Additional identity theft protection products may be offered when enrolling for Identity Protection at an additional cost.

There are many fraud tactics being used today. Awareness is the first step in prevention. Please review the most common fraud tactics below. (And even more here!).

Adware: Software that displays advertising content on your computer. Like its cousin spyware, some adware runs with your full knowledge and consent, some doesn't. More often an annoyance than a security risk, adware may also monitor browsing activities and relay that information to someone else over the Internet.
  
Keylogger: Software that monitors and captures everything a user types into a computer keyboard. Used for technical support and surveillance purposes. Can also be integrated into malware and used to gather passwords, user names, and other private information.
 
Phishing: A scam that involves the use of replicas of existing web pages to try to deceive you into entering personal, financial or password data. Often suspects use urgency or scare tactics, such as threats to close accounts.
 
Pop-Ups: A form of web advertising that appears as a “pop-up” on a computer screen, pop-ups are intended to increase web traffic or capture email addresses. However, sometimes pop-up ads are designed with malicious intent like when they appear as a request for personal information from a financial institution.
 
Social engineering: A method of deceiving users into divulging private information, social engineering takes advantage of our natural tendency to trust one another rather than rely solely on technological means to steal information. Often associated with phishing, pharming, spam, and other Internet-based scams.
 
Spam: Unsolicited email, usually sent in bulk to a large number of random accounts; often contains ads for products or services. Also used in phishing scams and other online fraud. Can be minimized using email filtering software.
Spim or Instant Spam: Unsolicited instant messages, usually sent in bulk to a large number of IM accounts; often contain marketing materials and links to product web pages. May also be used in phishing scams or to spread malware. See also, spam.
 
Spoofing: Spoofing is when an attacker masquerades as someone else by providing false data. Phishing has become the most common form of web page spoofing. Another form of spoofing is URL spoofing. This happens when an attacker exploits bugs in your web browser in order to display incorrect URLs in your browser location bar. Another form of spoofing is called “man-in-the-middle”. This occurs when an attacker compromises the communication between you and another party on the Internet. Many firewalls can be updated or configured to significantly prevent this type of attack.
 
Spyware: Loaded on to your computer unbeknownst to you, spyware is a type of program that watches what users do and forwards information to someone else. It is most often installed when you download free software on the Internet. Unfortunately, hackers discovered this to be an effective means of sending sensitive information over the Internet. Moreover, they discovered that many free applications that use spyware for marketing purposes could be found on your machine, and attackers often use this existing spyware for their malicious means.
 
Virus: A computer virus is a malicious program that attaches itself to and infects other software applications and files without the user's knowledge, disrupting computer operations. Viruses can carry what is known as a 'payload,' executable scripts designed to damage, delete or steal information from a computer.
 
A virus is a self-replicating program, meaning it copies itself. Typically, a virus only infects a computer and begins replicating when the user executes the program or opens an “infected” file.
 
Viruses spread from computer to computer only when users unknowingly share 'infected' files. For example, viruses are commonly spread when users send emails with infected documents attached.
Additional Fraud Tactics
Bot or Web Bot: Derived from "robot." An automated program, such as a web crawler, that performs or simulates human actions on the Internet. Bots are used for legitimate purposes by search engines, instant message (IM) programs, and other Internet services. However, web bots can also be used to take control of computers, launch attacks, and compromise data; may act as part of a blended threat.
 
Botnet or Zombie Armies: A group of computers that have been compromised and brought under the control of an individual. The individual uses malware installed on the compromised computers to launch denial-of-service attacks, send spam, or perpetrate other malicious acts.
 
Denial-of-Service (DoS): An attack on a computer or network in which bandwidth is flooded or resources are overloaded to the point where the computer or network's services are unavailable to clients. Can also be carried out by malicious code that simply shuts down resources
 
Dumpster Diving: Thieves rummage through trash looking for bills or other paper that includes your personal information.
 
Malware: Also known as 'malicious software', malware is designed to harm, attack or take unauthorized control over a computer system. Malware includes viruses, worms, Trojan horses, some keyloggers, spyware, adware and bots. It's important to know that Malware can include a combination of the types noted.
Pharming: Pharming takes place when you type in a valid web address and you are illegally redirected to a web site that is not legitimate. These 'fake' websites ask for personal information such as credit card numbers, bank account information, Social Security numbers and other sensitive information.
 
RetroVirus: This virus specifically targets your computer defenses. It will look for vulnerabilities within your computer operating system or any third-party security software. Most security vendors have some form of tamper-proof measure in place, so it is important to keep your patches up-to-date. Retro Viruses are usually combined with another form of attack.
 
Spim or Instant Spam: Unsolicited instant messages, usually sent in bulk to a large number of IM accounts; often contain marketing materials and links to product web pages. May also be used in phishing scams or to spread malware. See also, spam.
 
Trojans: A Trojan is malicious code that is disguised or hidden within another program that appears to be safe (as in the myth of the Trojan horse). When the program is executed, the Trojan allows attackers to gain unauthorized access to the computer in order to steal information and cause harm. Trojans commonly spread through email attachments and Internet downloads. A common Trojan component is a “keystroke logger” which captures a user's keystrokes in an attempt to capture the user's credentials. It will then send those credentials to the attacker.