DON'T GET LURED IN BY E-MAIL SCAMS! Hundreds of consumers have found themselves the victims of an e-mail scam known as "phishing."  It involves high-tech fraudsters who pretend to be legitimate financial institution or credit card company.  Hiding behind the anonymity of the Internet, the fraudsters send out "official-looking" e-mails designed to trick consumers into divulging financial and personal information such as account numbers, passwords, user names, Social Security Numbers, and other sensitive data.  In most cases, the e-mail claims there is an account problem or warns of a possible account fraud threat.  Either way - the whole idea is to convince the consumer there is an immediate need to update their financial information. If you receive an e-mail from Baraga County Federal Credit Union requesting financial information or any other personal or sensitive data: Treat the e-mail with suspicion. Do not reply to the e-mail or respond by clicking on a link within the e-mail message.  Baraga County Federal Credit Union will never ask you to provide any kind of confidential or financial details via an e-mail request. Contact Baraga County Federal Credit Union as soon as possible to report the suspicious e-mail.  You can reach us by calling (906)524-6151 or (906)353-8833. Also, please remember to never give out your personal information over the phone or internet.

Our Credit Union is constantly concerned about our member’s critical information and privacy. With this in mind, we have the following security services installed on our Internet server:

• Each server is behind a Firewall. This UNIX based hardware product blocks critical ports and IP addresses on servers from external attack and access.
• Each server runs proprietary software that constantly monitors the servers for unauthorized use and attempts to "hack" into information. Administrators are contact when forced attacks are committed, and countermeasures can be applied to stop these instances.
• All administrative activity requires user login and authentication. All administrative updates are logged into files that can be reviewed later.
• All servers come with a Global Verisign Certificate (RSA) for digitally encrypted communications between the Web server and your member. Information passed in applications cannot be decrypted by third parties attempting to "pick" information being passed across the Internet backbone.
• All servers run the latest version of Apache Web Server, considered the strongest and most secure Web server software on the market.