Online Security
2-Step Verification
Strengthening security with 2-Step Verification
As online attacks continue to grow both in number and sophistication, it’s more important than ever to have secure controls in place for your accounts.
2-Step Verification (2SV) is now available to all KCCU MemberDirect® online and mobile banking users and will offer you an additional layer of security to your online banking experience. 2-Step Verification is designed to better protect you against unauthorized access and misuse of your account if your credentials are compromised.
2-Step Verification offers our members:
- Enhanced security – 2SV strengthens your secure login, making it more difficult for fraudsters to access your accounts. 2SV can help prevent phishing, cyber-attacks, identity theft and other types of fraud.
- Convenience – Setup for 2SV is quick and easy. By simple verification of your identity through a personal device, you will boost access control and create a more secure login.
- Peace of mind – Of course, one of the most important benefits of enabling 2SV is the confidence you’ll gain, knowing your online accounts have an extra layer of protection.
What is 2-Step Verification?
2-Step Verification (also referred to as 2-Factor Authentication or Multi-Factor Authentication) is a simple process of identity verification delivered through a second layer of sign-in security. It replaces the current static identification questions and answers with a single-use verification code for your secure log in. The verification code is delivered to you by text message or email directly to the mobile phone or email inbox that you registered in your initial set up. All you need to do is retrieve the code from your text messages or email, input and submit it to complete your sign in. Once the code is entered and submitted, you can proceed to your online or mobile banking activity. If you don’t enter the verification code, access to online or mobile banking will be denied.
How does 2-Step Verification work?
- Once 2-Step Verification has been activated on your account, in addition to using your Branch, Member Number, and Personal Access Code (PAC) to sign in, you also will need to enter a verification code to sign in.
- When you log into your online banking or the mobile app with your usual credentials, you’ll be presented with a verification code entry screen that advises you that a one-time use verification code has been generated and sent to the text number or email address your provided when you initially activated 2SV. This provides the second layer of security as it sends the verification code only to your device or email.
- Enter the one-use verification code sent to you to and submit it for verification on the verification code entry screen.
- Authentication is complete if the verification code is verified, and you can proceed with your digital banking activities.
- If an incorrect code is entered more than three times, the account will be locked as a security measure. You will need to contact your branch to validate your identity and have your account unlocked.
How do I activate 2-Step Verification?
When the feature becomes available, easy to use instructions will be provided to assist you with set up. When you set up 2SV you will be required to verify a trusted personal device, such as your mobile phone or email to received future verification codes. After entering your cell phone number or email you’ll be sent a one-use code through the method (cell phone or email) you selected for identity verification. You will be required to enter the verification code you received and sign into your online or mobile banking.
2-Step Verification will only be required when necessary, such as a login from an unknown device.
Will 2SV send me a code every time I log in?
No. The online banking system will determine when further authentication (2SV) is required. Certain situations where a further authentication might be required are (but not limited to):
- Logging in from a new device (Computer, phone, tablet, etc.)
- Logging in for the first time in a long time (2 months, 3 months, etc.)
Can I choose to skip 2SV when logging in?
Members can select the Not Now button to defer their enrollment into 2SV for a certain period however, once the grace period is exceeded, you will be required to enroll with an email address or cell phone number to receive their verification code and login.
How to set up 2-Step Verification
Frequently asked questions about 2-Step Verification
How to reset your Personal Access Code (PAC) for online banking
Online Banking Alerts
KCCU ®MemberDirect Online Banking Alerts
Alerts provide you with an additional layer of security by notifying you via text message or email when there have been certain changes to your online account. You can also set up alerts to help you keep you on track of your finances by being reminded of scheduled payments, investment and loan maturities and even letting you know when your account has a low balance. You set up what you want to be reminded of.
Alerts are free to use but we do recommend checking with your service provider about applicable data and text rates.
You can set up and edit alerts for almost any scenario through your online banking profile. Here is a list of alerts that are offered to our members:
Security Alerts
New Payee Added
This alert notifies you when a new bill payment vendor account is added to your online banking account.
Personal Access Code (PAC) Changed
This alert notifies you that your online PAC has been changed.
Online Banking Account Locked Out
Incorrect PAC – This alert notifies you that access to online banking has been locked because the number of attempts to sign in exceeded the number allowed.
Online Banking Account Locked Out
Incorrect response to Security Question – This alert notifies you that access to online banking has been locked because someone has entered an incorrect answer to the security question exceeding the maximum.
Online Login
This alert notifies you anytime a login has occurred.
INTERAC® e-Transfer recipient added
This alert notifies you when a new Interac e-Transfer recipient has been added.
INTERAC® e-Transfer online payment authorized.
Balance and Activity Alerts
- My Balance
- Low Balance
- Deposit
- Withdrawal
Payment Alerts
- Insufficient funds
- Scheduled payment or Transfer May Fail
- Scheduled Payment Failed
- Scheduled Transfer Failed
Investment Alerts
- Term Deposit Maturing
- Loan or Mortgage Payment Due
- Loan or Mortgage Maturing
- Safety Deposit Box Renewal
Member Services Alerts
New Message Available – This is an alert that notifies you when you have received an enhanced personal message in online banking.
How to Sign up for Alerts
- Log into KCCU ®MemberDirect Online Banking on a trusted computer.
- Select Messages and Alerts from the left-hand shortcuts navigation bar.
- Select Register for Alerts.
- Add an email contact, phone contact (or both) and follow the instructions received in the confirmation email or text.
- Next, select account nicknames and choose the alerts you would like to receive from the menu provided.
- Ensure the check box beside the contact (email address and/or mobile phone) to receive the alert has been checked by choosing Manage Alerts and selecting the alerts you wish to receive. Click Submit
- You’re all set!
Questions and Answers
You don’t need to use any text message commands to set up alerts through KCCU online banking. You simply choose ahead of time what alerts you would like to receive, and you will receive a text or email if any of those account activities occur.
Mobile alerts will be sent soon after the activity takes place in your account. Delivery of the alerts will vary depending on your carrier.
In addition to receiving your Alerts via e-mail or text, you can also review the last 30 days of Alert history on Internet Banking. Just click on the Alerts History link on the Alerts Page. You can also mange your alerts by editing the contact information, account nicknames or by choosing different alerts to be received. Access all these functions from the Manage Alerts tab.
Sign into KCCU Internet Banking and edit your Alerts Contact Information to include your new mobile number or e-mail.
Note: Each time a contact is added or modified you must Edit all of the active alerts and check the appropriate contact box. If the box is not checked, the new contact will not receive an e-mail or text alert.
Contact your service provider to suspend your service. Contact your credit union if you have any concerns about the security of your account.
If you are a Rogers or Fido customer, you may be asked to subscribe to an email-to-text service to avoid having to text ‘read’ each time you want to view your Alerts on your mobile phone. There may be a fee for this service, so please contact your carrier for more details on their email-to-text plans.
To stop receiving all alerts:
- Log in to KCCU online banking.
- Select Messages and Alerts from the left-hand shortcut navigation bar.
- Click on Manage Alerts Contacts and Mobile Nicknames and delete your contact details (your mobile phone number or email address) to stop all alerts.
To stop receiving some alerts:
- Log in to KCCU online banking.
- Select Messages and Alerts from the left-hand shortcut navigation bar.
- Click on Manage Alerts and select only the alerts you wish to stop receiving.
®MemberDirect is a registered trademark owned by Canadian Credit Union Association, used under license.