Business Best Practices

Gain peace of mind – proactively protect your accounts by following these best practices.

Secure Access

• Access Business Online Banking at FNBAlaska.com or through your FNBizApp.
• Never click a link in an email or text to sign into FNBAlaska.com. First National will never ask you to log in through an unprompted link.
• Use strong passwords, and never share your usernames and passwords.

Know your Employees

• Perform credit and background checks on employees with access to accounts, account records and cash.
• Call at least three references to verify information when hiring new employees.
• Delete or disable former employees from critical systems.
• Build an internal verification process when changing direct deposit information. Validate updates directly with the employee.

Know your Vendors

• Verify all requests for changes to payment instructions or other information using a different channel of communication than the one used by the requestor.
• Build a validation process internally prior to updating any settlement accounts.
• Contact company executives directly to verify their requests using contact information already on file. Do not use the information provided by the requestor.
• Reconcile vendor payments to their paid invoices or outstanding balances.
• Beware of red flags such as false urgency, confidential requests, or unrecognized email domains.

Protect your Login Information

• Make sure your employees have unique usernames and passwords.
• Periodically verify employee contact information is up to date so notifications and validation codes are not sent to outdated emails and phone numbers.
• Ensure users have the appropriate level of authorization and access for their job duties.

Manage Issued Checks

• Maintain internal check registers and provide updated Positive Pay files to your bank.
• Update registers daily or based on the frequency of check issuance.

Dual Custody

• Create a dual custody process for updating payment instructions.
• Use dual custody to verify payment details before they are sent.
• Verify transactions both before initiating and during approval.
• Verify payment requests received by email are authentic by calling a known number for the vendor
• Require dual signature for high dollar transactions.
• Have two or more employees monitor Positive Pay and ACH Fraud exception items.

Separate Duties

• Split check writing and reconciliation duties.
• Rotate employees in financially sensitive assignments.

Control Check Stock

• Store all check stock, deposit slips, check-writing equipment and other sensitive documents in a locked space.
• Minimize personnel responsible for handling check stock orders and periodically rotate their duties.
• Change locks and combinations when an authorized employee leaves the company.
• Periodically review inventory checks and shred outdated or unused stock.
• Mail checks immediately after signing.

Monitor Account Activity

• Review transactions and balances daily to help detect unusual or suspicious activity.
• Report any unauthorized ACH transactions immediately.
• Report errors immediately.
• Compare the payee name on checks with the payee names listed on your check register. Ask about our Positive Pay service to mitigate check fraud.

Conduct Surprise Audits

Perform unscheduled audits to deter employees from committing fraudulent activities. Most embezzlement is a crime of opportunity.

Fraud Education

• Inform employees about current fraud trends, including but not limited to:
  • Business email compromise (BEC)
  • Imposter fraud
  • Phishing – fraudulent emails and links
  • Vishing – fraudulent phone calls or texts
  • Spear phishing – phishing attacks targeting an individual or group
  • ACH Fraud
  • Check and Check Payee fraud
• Avoid impersonation fraud by maintaining an open environment and allowing staff to question unusual transactions.

Information Technology (IT)

• Shield networks from unauthorized access.
• Do not allow external devices to plug into any USB ports.
• Back up important data and test backups regularly.
• Regularly update systems and programs.
• Use multi-factor authentication.
• Ensure you are PCI-compliant.