How you can protect yourself
With chase.com and our Chase Mobile® app, you can bank anytime, from almost anywhere. We use secure technology to protect your information, so you can feel safe paying a bill, checking your balances and even depositing a check, no matter where you are.
Make sure you’re on chase.com
Before you sign in, make sure you’re on the authentic chase.com website by checking your browser address bar to see if it has:
- A lock icon
- The Chase logo
This information might look different depending on the browser you’re using. When a third party has verified the site you're trying to access, you'll see a message on the site letting you know you're on a verified website.
Think you’ve shared your personal information?
Sign in to chase.com and check your account information. If you notice suspicious activity in your accounts, let us know right away using one of numbers on How to Report Fraud. If you think you've mistakenly given out personal information (such as your account number, password or PIN) in an email, text or website that might be fraudulent, call us right away. We’ll help secure your account.
And, if you’ve shared your username or password with a person or a service you don’t feel secure about, change them anytime in “Profile & settings.”
If you get an email that doesn't appear right, send it to firstname.lastname@example.org.
You can protect yourself and your accounts by recognizing and preparing for online banking threats. Here are a few ways to keep yourself and your information safe:
Be careful about giving out your username and passwords.
Giving anyone access to your accounts can put your financial information and your money at risk. This includes financial websites and apps that offer tools to help you manage your accounts, invest or prepare your taxes.
We work with some companies that allow you to enter your chase.com username and password directly into a secure chase.com window from their website or app. Once you’ve linked to these companies, you can see them under Linked Apps and Websites on chase.com, and remove access if you change your mind.
We continue to work with additional companies to provide that secure access. If you have given your Chase password to a company, but don’t see it under Linked Apps and Websites, you should:
- Know and trust the company that’s asking for your credentials
- Learn about their security practices
- Know what they plan to do with your information
- Change your chase.com password if you want to remove their access.
Be creative with your password
It's important to use a highly secure password for all your financial accounts. The most secure passwords combine letters, numbers and special characters. Never use your pet's name, your child's name or anything else that a fraudster could easily find out, like your address, phone number or birth date. For added security, remember to change your password regularly, and avoid using the same password for multiple sites or financial institutions.
We also recommend using an email provider that asks you to verify your identity in multiple steps.
For more information, sign in and go to the “Passwords & Other Sensitive Information” section of the Digital Services Agreement. To change your username or password anytime, sign in and go to “Profile & settings” on chase.com.
Be careful on social media
It’s better to be cautious about the information you share on social media. Don't use information from your social media account for your password.
We make our products and services secure, but there are things you can do to keep your accounts safe, too:
- Don't give your account numbers or any personal or financial information on the phone unless you initiate the conversation and you know the person or organization.
- Don't give personal information to any stranger, even someone claiming to be from Chase.
- Don't print your driver's license, phone or Social Security number on your checks.
- Report lost or stolen checks immediately, and we’ll stop payment on the check numbers you report. When you get new checks, look through them to make sure none of them were stolen in the mail.
- Store your new and canceled checks in a safe place.
- Tell us right away if you get any suspicious phone inquiries asking for your personal or account information, or if you see anything suspicious in your account activity or on your statement.
- To help keep thieves from stealing your identity, destroy or store financial information securely (including bank statements, invoices, ATM and credit card receipts).
- Guard your PINs and passwords (hint: Don’t store them on your phone or write them on your card).
- Create secure PINs and passwords. Don't use birth dates, your Social Security or driver's license numbers, your address or any family names. Someone trying to steal your identity may have this information.
- If you use chase.com or one of our apps in public or on a public or shared computer, make sure you sign out when you’re done, and delete all cookies.
- Be careful when you use your device in public areas. Watch out for anyone looking to see what you’re doing.
Don't be fooled
Phishing is when an imposter tries to trick you into providing your personal information. They might impersonate us in an email, phone call or text, asking you to confirm your information or saying you’ve won something—and it might look legitimate. A few examples:
- You get an email that appears to be from a reputable company you know or do business with, like us. The email asks you to reply or go to a website that looks like chase.com, where you’ll be asked to give your username, password, account number, personal identification number (PIN), Social Security number or other personal information.
- You get a voice mail or text message telling you your bank account will be closed, frozen or terminated unless you call or go to a website, where you’ll be asked to give personal information.
Scams often try to create a feeling of urgency or alarm, by threatening to close off an account, or offering a security update—as soon as you provide your personal information. A few more common culprits are emails, phone calls or text messages that:
- Require you to give personal or account information directly on the email or on a website; some fraudsters use pop-up windows to ask for confidential information.
- Threaten to close or suspend your account if you don’t take immediate action.
- Invite you to answer a survey that asks for personal or account information.
- Say your account has been hacked, then asks for personal or account information.
- Tell you there are unauthorized charges on your account, then asks for personal or account information.
- Ask you to confirm, verify or update your account or billing information.
- Ask you to provide account information because someone wants to send you money.
- Claim you’re getting a refund.
- Say you’ve won a contest.
If you think you've received a suspicious email but you haven't acted on it, please forward it to email@example.com.
Think before you open
Don't open an email attachment, even if it appears to be from a friend or co-worker, unless you're expecting it or you’re absolutely sure you know what it contains.
Watch out for email subject lines or emails with a generic message like "check this out" or "thought you'd be interested in this." Make sure you know who sent the email before you open an attachment or click any links.
Set up free Account Alerts
We're always looking for ways to help you keep your accounts safe. Free Account Alerts are a great way to keep track of your finances to detect withdrawals you didn’t authorize or other suspicious account activity. You can sign up to get all types of alerts by text, phone or email. Set up Account Alerts
Get paperless statements
Paperless statements are an easy way to stay clutter-free and avoid losing statements in the mail. If you go paperless, you’ll get an email alerting you that a new statement is available on chase.com. You can see these statements anytime, from virtually anywhere. Go paperless now
Look over your credit reports
At least once a year, read through your credit reports carefully. You can request a free annual credit report from each of the 3 national credit reporting agencies, even if you don’t suspect any unauthorized activity on your account.
For your free annual report, visit AnnualCreditReport.com or call 1-877-FACTACT (1-877-322-8228). Or, request the reports directly from each agency:
- Equifax: 1-800-525-6285
- Experian: 1-888-397-3742
- TransUnion: 1-800-680-7289
Look out for credit inquiries from unfamiliar companies, accounts you never opened and unexplained debts. This can be a warning sign of fraud or identity theft.
Protect your equipment
Install anti-virus and firewall software on your computer and keep it up to date.
Be cautious about offers for free anti-virus software; make sure you get your software from a reputable company. Look for anti-virus software that scans incoming communications and files for viruses, removes or quarantines viruses and updates automatically.
A firewall is software or hardware designed to block unauthorized access to your computer. It's especially important to run a firewall if you have a cable modem or DSL line or other broadband connection, because they’re targeted often. Many current operating systems come with a built-in firewall, which you have to turn on.
Safeguard your business
If you own a business, it's important to:
- Maintain appropriate internal controls, including separation of duties. For example, be sure that the people who reconcile accounts are different than the people who make payments.
- Periodically assess your risk and evaluate your internal controls, including reviewing your users and the permissions you give them. Your system administrator can establish user permissions and online transaction limits for each of your users.
- Regularly check your transactions and statements for any unauthorized activity. We post your transaction details on Chase Commercial Online so you can monitor and control them—including transactions that originate online and through other channels, such as checks you've written or withdrawals you've made.
- Take advantage of our online Positive Pay and Reverse Positive Pay Services to help you monitor and control checks clearing against your accounts.
- Customize your Account Alerts so you’ll get notified when certain account activity takes place.