SECURITY AWARENESS

Recently Central Bank has seen significant changes in the internet banking threat landscape.  Fraudsters have continued to develop and deploy more sophisticated, effective, and malicious methods to compromise authentication mechanisms and gain unauthorized access to customers online accounts.  Rapidly growing organized criminal groups have become more specialized in financial fraud and have been successful in compromising an increasing array of controls. Various complicated types of attack tools have been developed and automated into downloadable kits.   Fraudsters are responsible for losses of hundreds of millions of dollars resulting from online account takeovers and unauthorized funds transfers.  Central Bank is providing the below security awareness information for your use and action to help protect your online account and transaction information.

To access our Internet Banking service, you must use the ID and/or other means of access we establish or provide for your Internet Banking Customer Account together with a PIN. It is your responsibility to safeguard the ID and PIN we provide. Anyone to whom you give your Internet Banking ID and PIN or other means of access will have full access to your accounts even if you attempt to limit that person’s authority.

You or someone you have authorized by giving them your Internet Banking ID and PIN or other means of access (even if that person exceeds your authority), can instruct us to perform the following transactions:

Your Internet Banking payments and transfers will be indicated on the monthly or quarterly statements we provide. Please notify us promptly if you change your address or if you believe there are any errors or unauthorized transactions on any statement, or statement information.

If you believe that your Internet Banking ID or PIN or other means of access have been lost or stolen, or that someone has used them without your authorization, call us immediately at 501-221-6400 during normal business hours. After hours you may e-mail us at customer.service@centralbankar.com, or write us at Central Bank, 1506 Market St., Suite C180, Little Rock, AR 72211. Immediately contacting us by phone is the best way of reducing your possible losses, since not all e-mail may arrive at their destinations. We will then send an e-mail back to you as confirmation that we did receive it. Because e-mail is not secure, do not include any of your account or social security numbers with your e-mail. Your name, address, and a brief message as to what the problem might be is all we will need. If you have given someone your Internet Banking ID and PIN or other means of access and want to terminate that person’s authority, you must change your identification number and password or other means of access or take additional steps to prevent further access by such person.

You may terminate your Internet Banking Agreement at any time upon giving Central Bank written notice of the termination. If you terminate your online banking, you authorize us to continue making transfers you have previously authorized until we have had a reasonable opportunity to act upon your termination notice. Once we have acted upon your termination notice, we will make no further transfers or payments from your Internet Banking Account. If we terminate your use of Internet Banking Account, we reserve the right to make no further transfers of payments from your account, including any transactions you have previously authorized.

You are responsible for all transfers you authorize using the Internet Banking services under this agreement. If you permit other persons to use your Access Code, you are responsible for any transactions they authorize or conduct on any of your accounts. However, tell us at once if you believe anyone has used your Access Code and accessed your accounts without your authority. Telephoning is the best way of keeping your possible losses down.

For Internet Banking transactions, if you tell us within 2 business days, you can lose no more than $50 if someone accessed your account without your permission. If you do not tell us within 2 business days after you learn of the unauthorized use of your account or Access Code, and we can prove that we could have prevented the unauthorized transaction if you had told us in time, you could lose as much as $500 or more. Your liability for unauthorized loan transactions through the Internet Banking service will not exceed $50.00.

If your statement shows Internet Banking transfers that you did not make, please tell us at once. If you do not tell us within sixty (60) days of the mailing date of your statement, you may be liable for the full amount of the loss if we can prove that we could have prevented the unauthorized transactions if you had told us in time. Should some emergency (such as extended travel or hospitalization) prevent you from contacting us, a reasonable extension of time will be allowed.

If we do not complete a transfer to or from your consumer account on time or in the correct amount according to our agreement with you; our sole responsibility for an error in a transfer will be to correct the error. You agree that neither we nor the service providers shall be responsible for any loss, property damage or loss, whether caused by the equipment, software, Central Bank, or by Online browser providers such as Netscape (Netscape Navigator browser) and Microsoft (Microsoft Internet Explorer browser), or by Internet access providers or by online service providers or by an agent or subcontractor of any of the foregoing. Neither we nor the service providers will be responsible for any direct, indirect, special or consequential economic or other damages arising in any way out of the installation, download, use, or maintenance of the equipment, software, the Central Bank Internet Banking services or Internet Browser or access software. In this regard, although we have taken measures to provide security for communications from you to us via the Central Bank Internet Banking Services and may have referred to such communication as “secured,” we cannot and do not provide any warranty or guarantee of such security. In states that do not allow the exclusions or limitation of such damages, our liability is limited to the extent permitted by applicable law.

1. If, through no fault of ours, you do not have enough money in your account to complete a transaction, your account is inactive or closed, or the transaction amount would exceed the credit limit on your line of credit.
2. If you used the wrong Access Code or you have not properly followed any applicable computer, Internet, or Central Bank user instructions for making transfer and bill payment transactions.
3. If your computer fails or malfunctions or the Internet Banking service was not properly working and such problem was or should have been apparent when you attempted such transaction.
4. If, through no fault of ours, a bill payment or funds transfer transaction does not reach a particular creditor and a fee, penalty, or interest is assessed against you.
5. If circumstances beyond our control (such as fire, flood, telecommunications outages or strikes, equipment or power failure) prevent the transaction.
6. If the funds in your account are subject to legal process or other claim, or if your account is frozen because of a delinquent loan, overdrawn account, or suspected fraud.
7. If the error was caused by a system beyond the Central Bank’s control such as a telecommunications system, or Internet service provider.
8. If you have not given the Central Bank complete, correct, or current information so Central Bank can process a transaction.