Digital Business Services — Security Best Practices

At St. Mary’s Bank, we’re committed to helping you manage your business easily and securely with our Digital Business Banking services.

We’ve implemented strong security controls to help protect your financial information, but account security is a shared responsibility. Business accounts do not receive the same regulatory protections as consumer accounts.

To help you reduce risk and protect your business, we encourage you and your team to follow these best practices:

Do:

• Use strong passwords with at least 8 characters, including letters, numbers, and special characters.
• Limit administrative rights on staff computers to help prevent malware.
• Use dual control for ACH and wire transfers (one person initiates, another approves).
• Use St. Mary’s Bank Digital Business Banking security features:
  • Turn on "Required Multifactor Authentication" option for each login
  • Amount limits for sub-users of ACH and Wire Services
  • Dual authorization for ACH and Wire transactions
• Keep all devices updated with current browsers, operating systems, antivirus software, and firewalls.
• Train staff on security risks and your business’s required practices.
• Enable login and transaction alerts for ACH and wire activity.
• Confirm any requested changes to account or payment details directly with the company before implementing them, to ensure the request is legitimate and not from a fraudulent source
• Consider cyber insurance to help cover potential losses from cybercrime.

Don’t:

• Do not share passwords or use browsers' auto-save features for them.
• Do not click links or open attachments in unsolicited emails. Always navigate to websites directly.
• Do not install Digital Business Banking “upgrades” from emails or pop-ups.

Reminder:

St. Mary’s Bank will never request your password, account number, or other private information by phone, text, or email. We may contact you if:

• Our monitoring flags high-risk activity, or
• We suspect your credentials may be compromised.

Business Email Compromise (BEC)

BEC is a growing scam targeting businesses of all sizes. Learn how these scams work:

• FBI: Business Email Compromise
• Report suspicious activity at: IC3.gov

Need help?

Call us at 1-888-786-2791 — we’re here to protect you.