Security FAQ

What is the new security?
The additional security features provide added safety by helping ensure that only you can access your account via Online Branch. Your personalized security image is only known to you and Summit, so when you see it you can be confident that you're on our Web site-not a fraudulent one.

In addition, your computer is recognized upon logging in. If your computer is not recognized, you'll be asked challenge questions to ensure that it is indeed you attempting to gain access to your account.

We're also asking that you provide your email address when using Online Branch, which means you'll receive your statements electronically and will no longer receive paper statements. You'll also be able to set up instant email alerts-both important elements of account security. Click here for Frequently Asked Questions regarding electronic statements.

How does it work?
The new security features not only ensure that we recognize you, but also ensure that you recognize us. When you enroll, you will select a security image known only to you. Whenever you log in, we'll show you this image so you can be assured that you're accessing our site.

We also check the computer(s) or device(s) that you're using to access your accounts via Online Branch. This is done by assigning a unique identifier to each computer you use to access your accounts using standard secure cookies. The cookie is used to store the identification information only-no personal or private data is stored.

If you log in from a computer that we don't recognize, you'll be asked challenge questions to gain access to your accounts and view your security image. And it's very easy to register additional computers. However, we recommend that you don't register computers in public places, such as libraries or Internet cafes.

Why is it more secure?
The additional security protects you from accidentally revealing your username and password to a fake Web site-a fraudulent activity known as "phishing." And, it provides an additional layer of security against someone attempting to gain access to your accounts with challenge questions.

Do I have to enroll?
Yes. All Online Branch users need to use the additional security. You will be able to log in without enrolling three times before the enrollment process is required.

The Federal Financial Institutions Examination Council (FFIEC), regulators that oversee banks and credit unions, announced that passwords alone will no longer be acceptable as the sole means of achieving online security. Multifactor Authentication (MFA) was the recommended solution. All financial institutions are required to use some method of multifactor authentication in their remote banking systems.

Do I need a new password?
No. Your account number and password will not change.

What if I don't have an e-mail address?
All users will need to have an email address to get access to Online Branch. Need an email account? Free Web-based accounts like Yahoo! Mail, MSN Hotmail, Gmail, or AOL Mail may be an answer. Please check their sites for email account details.

What is phishing?
Phishing is the use of e-mail and fraudulent Web sites to trick recipients into disclosing personal financial information, such as credit card numbers, Social Security numbers, account names, passwords and addresses.

Online fraud is accomplished by using e-mails that mimic those of legitimate banks and credit unions. The e-mails attempt to mislead the recipient into "verifying" or "submitting" personal and/or financial information. There are many different scams used to convince people to give their personal information. For example, the message may cite a breach of security or a new operating system as a reason to "verify" an account holder's personal information. Scamming e-mails usually contain a link that takes the recipient to an illegitimate Web site used to capture their personal and financial data. The fraudulent Web sites frequently mimic legitimate Web sites.

Summit has never been "spoofed" nor have our members been targeted for phishing. Our added security features now provide a way for Online Branch users to know definitively that they're on our legitimate site-when you see your security image, you'll know you're in the right place and it's safe to enter your password.

What if I don't see my security image or I see the wrong security image?
If you don't see your security image, don't enter your password. Save a view of your screen with the wrong or missing security image, including the Web address, and contact us right away. If possible, email the screen shot to us. A missing or wrong security image is an indication that you are not on Summit's site, and instead are on a "spoofed" site and part of an attempted "phishing" scam. (As long as you don't enter your password, your account will not be compromised.)

Can I access my account from multiple computers?
Yes. If you log in from a different computer than the one you used when you initially enrolled, you'll be asked a challenge question before being presented with your security image and gaining access to your account. If you answer the challenge question correctly, you'll also be asked if you'd like to register the computer. If you'll be accessing your accounts from it frequently, select yes. If it's a computer in a public place, such as a hotel, library, or Internet café, we recommend that you choose not to register the computer.

There is no limit to the number of computer's that you can register.

Can the joint owner of my account still access our account?
Yes. You'll need to be sure however that both of you are aware of the selected security image and answers to the challenge questions.

Several people in my house use the same computer for access but we have different accounts. How will this work?
There is no limit to how many users can use one computer to log in to their accounts, because each account is identified individually using a combination of your account number, password, security image, and computer.

Will this affect my ability to view more than one account (the multiple account access option) via Online Branch?
Multiple account access isn't affected by the new security. However, when you log into any account directly, you'll use the new security features.

Will this affect my ability to use Quicken Direct Connect or Microsoft Money?
Quicken and Money access isn't affected by the new security.

Can I change my security image?
Yes, you can change your security image at any time. Just simply go to "Preferences" and then "Security Settings" after logging in to Online Branch.


E-statement FAQ
Note: If you already receive electronic statements, there are no changes!

How do I get access to my e-statement?
Once you log in to Online Branch, select "Documents" and then "Statement Copies." Select the date of the statement you'd like to view from the drop-down menu.

How will I know when it's available?
You'll receive an email from us notifying you that your statement is available on the 1st of every month-sooner than your paper statement. Simply log in to Online Branch to view your statement.

Will my e-statement look the same?
Yes. Your e-statement will look exactly the same as the paper statement. If you prefer to keep a paper copy, simply print your statement.

How often will I receive an e-statement?
The frequency of your e-statement will be the same as your paper statement-quarterly or monthly, depending on the account(s) you have with us.

How long will I be able to view my e-statement?
We provide an archive of the previous 18 account statements.

How do I know it's secure?
We'll send you an email notifying you that your statement is available to be viewed. Then, you'll need to log in to Online Branch to view your statement. No account information is sent via email.

When will I receive my first e-statement?
If you log into Online Branch after March 7th and before the end of March, you'll receive your first electronic statement instead of paper on April 1. If you don't log into Online Branch until after April 1st, then electronic statements will begin and your paper statements will stop on the next regular statement date after your login.

What should I do if I still need my paper statement?
You'll need to call us at 608-243-5000 and request that you continue to receive paper statements.