New Alert: Fraudsters are posing as Merrimack employees in an attempt to gain access to your account. We will NEVER ask for personal or banking information, including login credentials and verification codes.

FDIC Logo FDIC-Insured - Backed by the full faith and credit of the U.S. Government
Merrimack County Savings Bank

Merrimack style is treating everyone – customers, employees and community members – with dignity, care, respect and compassion.

Credential Stuffing on the Rise in the Area

Posted on December 23, 2020

This is the time of year when fraud attempts are on the rise. One type of fraud focused on online banking is called “credential stuffing.”  This is when fraudsters obtain login IDs and passwords from other sites or apps, then attempt to use those same credentials elsewhere to see if customers use the same info for multiple sites or apps.

Unfortunately, many people do use the same login IDs and passwords for multiple sites and apps – so credential stuffing is sometimes successful. Even if an attempt is not successful but the login ID matches an online banking user, the customer will receive an “Invalid Login Attempt” email notification from our online banking system.

We have learned that some local financial institutions are currently seeing this type of fraud so we thought it was important to reach out to you in a timely manner.

It’s important to always use unique and complex login IDs and passwords for your online accounts. Use a mix of upper and lowercase letters and special characters to increase the complexity and avoid using things that might be easy to guess about you – like your kids’ or pets’ names or important dates. You can update your login ID or password in online banking at any time in the “Settings” menu.

If you do need to change your login ID and/or password:

  1. Log into Online Banking.
  2. Choose Settings.
  3. Then choose Security Preferences.
  4. Follow the simple on-screen instructions to set up a unique login ID and/or password.
    • Login IDs must be between 4 and 30 characters.
    • Passwords must be between 8 and 99 characters long, must contain at least 1 number, and must contain at least 1 “special character” such as ! * # @ $

We’re always here to help. If you’re ever notified of a login attempt to your online banking account that was not completed by you, update your login ID and password right away and call us at 800.541.0006 so that we can assist you with protecting your accounts and identity.

Resources For Protecting Your Identity & Accounts

  • The “Consumer Alerts” section on our website offers specific information about current criminal trends that are affecting our local area.
  • The “COVID-19 Updates” section highlights many issues around the pandemic, including related fraud.
  • Our Privacy & Security page gives detailed information about how we protect you and your information, and how you can protect yourself.
  • We participate in Security Saturday on our social media outlets, which you can click to at the bottom of this email.  Each Saturday, and more often when necessary, we highlight the latest trends and information aimed to help you keep your information and finances secure.
  • The American Bankers Association Banks Never Ask That website is an approachable tool with videos, quizzes and quick articles for learning more about ensuring that you aware of the latest scams.