Go-ID Token Security

 

Q: What is Go-ID Token Security?
A: Go-ID is a service that adds an additional layer of security to your online account.  When transferring money out of your accounts via ACH, EFTPS, or Wire you will be prompted to enter a six-digit numeric code.  This six-digit code is provided by your Go-ID token, a key chain sized device that generates a new unique number every 60 seconds.

Q: How does it work?
A: When transferring funds out of your account, you will be prompted to enter a six-digit code from the Go-ID token prior to sending of the ACH, EFTPS or Wire. 

This six-digit number is provided by your Go-ID token - a key chain sized device that generates a new number every 60 seconds.  It is an unpredictable password that is good for only one use and then automatically changes itself.

You will be expected to enter your Go-ID code each time you execute an ACH, EFTPS, or Wire.  This way even if your credentials fall into the wrong hands, they will not be able to move money out of your account without the six-digit code.

Q: Why do I need Go-ID Token Security?
A: The Go-ID token strengthens your level of online protection.  Beyond a simple password, Go-ID improves the ability to confirm that you are who you say you are, and helps prevent hackers and identity thieves from moving money fraudulently.
 

Q: How do tokens protect against Trojans and Phishing attacks?
A: Trojans can sometimes capture keystrokes and thereby capture passwords.  Phishing attacks are used to deceive users into thinking they're entering confidential data on a secure, reliable page.  Since the pass code displayed on the token is useable only once, the keystroke logger and phishers cannot pass on a useable code.  Tokens generate a new pass code every 60 seconds; it is dynamic, not static, and therefore useless to hackers, even if captured. 

Q: What other benefits do tokens offer?
A: Once activated by the user, tokens can be used from any computer.  Users do not need to know the token pass code until it is required for use. 

Q: How does the website know what number is showing on my Go-ID token?
A: Every Go-ID token is unique to its owner.  The "random" number that you see on the display screen at any given point is generated by a mathematical algorithm.  From the moment you first activate your device the computer knows where you are in the algorithm at any point in time.  When you enter your Go-ID code, the computer runs a simple check to make sure all the information matches.
 

Q: When I use Go-ID, what will I need to do differently than I do now?
A: Once activated, you will be prompted to enter the unique six-digit code displayed on you Go-ID token each time you send an ACH, EFTPS, or Wire.

Q: Do I need this for my online account to be protected?
A: As online banking becomes a more popular channel for people to actively manage their finances and engage in other transactions, online users become a more attractive target for those that wish to commit fraud.  As a result, the safeguards you use should match the type and extent of transactions your business conducts online.
Q: I already have antivirus and a personal firewall.  Why do I need this?
A: We are glad to hear you use antivirus and a personal firewall.  Be sure that you keep both software programs up-to-date for the best possible protection against viruses, Trojans, and hackers.  Go-ID helps protect against other kinds of threats - phishing, email scams, as well as keystroke loggers and other spyware.  
Q: Does Go-ID keep me protected from all threats online?
A: Just as a lock on the front door does not prevent a burglar from climbing through a window, no one security solution addresses all the ways in which you need to protect your business online.  Regulatory bodies, such as the FTC and the FDIC, suggest that online banking users have up-to-date antivirus and firewalls installed and activated on their PCs.  Additionally, an increasing number of organizations are recommending that businesses use an additional layer of security, such as Go-ID, dual authorization, and isolated PCs. 
Q: What if I lose my Go-ID token?
A: If you lose your Go-ID token please contact customer service as soon as possible so that we can deactivate the token, and get a replacement issued.
Q: Do I have to have my Go-ID token every time I send an ACH, EFTPS, or Wire?
A: Yes, once you activate you Go-ID token each time you transfer funds via ACH, EFTPS, or Wire, you will be prompted to enter a six-digit code.  It is the consistency of having to provide this code that is unpredictable and unique to you that makes this layer of security so strong.
Q: How do I activate my Go-ID token?
A: To activate your Go-ID token, log into the website as you normally would.  Once you are logged into your account, go to the Admin screen.  Click the "Manage Go-ID Tokens" on the left side of the screen and then "Activate Go-ID Token." You will be asked to answer some questions about your token.  Once activated, the token can be used within a few moments.

Q: How do I deactivate my Go-Id token? A: To deactivate a Go-ID token, you will need to contact customer service.  This should only be done if the device is lost or stolen.

Q: Can my business get more than one token?
A: Yes, businesses can request additional tokens.  The first token is free, additional tokens cost $5.00 

Q: What system requirements are there?
A: Almost none, Go-ID tokens work with any computer operating system and web browser that can access your account.
Q: Who will be issued a Go-ID token?
A: All Union First Market Bank business online banking customers who utilize ACH, EFTPS, or Wire functionality will be required to use this authentication process.
Q: What is two-factor authentication?
A: Two-factor authentication is a process that confirms a user's identity using two secure and independent factors.  In this scenario the customer possesses "something they know" and "something they have."  The "something they know" is the login and password information, while the "something they have" is the token which generates a verification password. 
Q: Why is additional security beneficial?
A: Online fraud has become increasingly sophisticated with the expansion and proliferation of Trojans, phishing, and spyware.  By adding two-factor authentication, Union is improving the protection of our online systems for the customers who are often targeted (ACH, EFTPS, & Wire) by individuals attempting to commit fraud. 

Q: How will I get my Go-ID token?
A: Union will mail the tokens to the company administrator on file. 

Q: How do I get additional Go-ID tokens?
A: To get additional tokens please contact your Treasury Services representative or Customer Service. 

Q: Are the Go-ID tokens mandatory?
A: Yes, Union is making the use of Go-ID tokens mandatory in order to provide the highest level of security available to our customers. 

Q: What if I incorrectly type the Go-ID token password?
A: If you try to execute an ACH, EFTPS, or Wire and enter an incorrect Go-ID password you will receive an error message, and be prompted to try again.