Fraud Detection, Mitigation and Prevention

• BB&T provides the tools for a strategic approach to fraud detection. Whether you're in need of more timely access to account information or you want to transition from checks to electronic or card payment solutions, our specialists will work with you to integrate the fraud-protection components best suited for your business.
  • Account Reconciliation services offer businesses that issue a high volume of checks a more efficient way to handle accounting for and reconciling bank statements and other transactions each month
  • Positive Pay/Payee Positive Pay services compare posted checks to your issued check information to identify any check serial number and dollar amount mismatches. Suspect items are then provided to you for review. Payee Positive Pay screens and matches payee names in addition to the standard check number and amount fields, providing incremental protection.
  • UPIC is a secure way to receive electronic payments from your vendors and suppliers without disclosing your sensitive bank account information. Your bank account number is masked with a UPIC "Virtual account number."
  • ACH Control (ACH Blanket Block & ACH Positive Pay) are features you can use to manage ACH activity that can prevent any ACH debit from posting to an account, limit originators of electronic debits or disposition your rejected debit entries.
  • Reverse Positive Pay allows you to use CashManager OnLine to review your previous day’s posted checks and provide instructions to return any fraudulent checks. Unlike Positive Pay, there's no comparison with your check issue information for checks being cashed at the teller line.
  • Check Block is a service for clients who don't wish to issue checks on a specific deposit account but want an extra layer of protection to prevent check fraud.

Please take the time to review the BB&T Commercial Banking Services Agreement (PDF). It includes the following items related to the use of your organization's security code:

• You agree to indemnify and hold harmless BB&T for any such transaction alleged to be unauthorized
• You agree to keep any account information, security code, password or other confidential identification number used to access your deposit or credit account(s) secure and strictly confidential, and to not permit disclosure of such information to any unauthorized person
• You agree to immediately notify BB&T if this information has become known to, or been used by, an unauthorized person. You acknowledge that BB&T has no method to determine whether a transaction conducted with use of a valid account name, account number and security code was proper and therefore authorize BB&T to complete any transaction involving your deposit or credit card(s) made with the use of such information.
• You agree to be responsible for any transaction initiated with the use of a valid account name, account number and security code or credentials

As we work together, remember that BB&T will never ask for your password over the phone, by email or by text message.

• Card, ACH and wire transfer fraud
  • Stay on the lookout for charges presented through ACH that have already been checks returned for fraud
  • Watch out for fraudulent requests to initiate ACH payments for consumer charges received via internet or telephone
  • Beware of consumer credit purchases from "Card Not Present" merchants or from merchants not validating the CVV2 number on the card
• Online fraud
  • Online schemes often attempt to obtain confidential information that includes password, identification information and token code information
  • Malicious software can be installed on your computer without your consent. Once installed, these programs can capture confidential information, keystrokes, initiate fraudulent transactions, redirect your web browser or display fraudulent websites
• BB&T protects your business accounts from fraud with:
  • 128-Bit SSL encryption
  • Multiple firewalls to shield the network
  • Login security measures, with automatic logout due to inactivity
  • A multilayered security approach to protect your information and assets, including some mandatory alerts
  • Our fraud teams that actively monitor login and transaction activity

• To initiate funds transfers and payments, use standalone PCs not enabled for social networking functions, such as email or web browsing
• Implement user entitlements based on your business needs. Maximum payment amount limits should be determined and set by BB&T. Your user entitlements and payment limits should be routinely reviewed.
• Use alerts or event notifications, which proactively send email notifications when payments are made or changes are made to user entitlements
• Prohibit the sharing of passwords, require strong passwords with a mix of characters and cases, use a different password for each website accessed and regularly change passwords. Don't store passwords on your computer in case it's compromised.
• Establish an online fraud awareness program for your employees and conduct regular risk assessments
• Identify gaps in your internal controls, and address them immediately

• Mind your neighbors
  • Prevent anyone from looking over your shoulder while you're accessing mobile banking
  • Never leave your mobile device idle while your banking session is still active
  • Don't use free public Wi-Fi connections for banking transactions. Use your phone carrier's internet connections for enhanced security.
  • Never respond to any text messages asking you to verify your account information. Criminals may use text messages to "phish" for your personal information.
• Keep a close eye on the software you install
  • Only download apps from your mobile service provider or mobile device manufacturer's marketplace
  • Be cautious about granting applications access to your personal information or letting the app perform functions on your device. Disable unwanted services and calling features. Capabilities such as Bluetooth and NFC can be convenient using your mobile device; however, they can also provide an easy way for a nearby unauthorized user to gain access to your data. Turn these features off when they're not required.
  • Always install software updates and patches to your device as soon as they're available
  • Install security apps that enable you to find your mobile device and to delete its memory if necessary
  • Install a reputable Mobile Antivirus/security software if available for your device
  • Always wipe data on your old phone before donating, reselling or recycling it

If your device is lost or stolen, you should report it to your wireless provider immediately. They may be able to locate or disable the device. Then call BB&T Online Support at 888-228-6654 to have the device access disabled. Protect your identity Don't open suspicious email or links Reduce your fraud footprint. Keep sensitive financial information out of the regular mail by