Skip to main content
  • About
  • Cyber Security Hub
Select Image

NDCU Cyber Security & Fraud Resource Hub

Make sure you feel confident at home, work and on the go with our cyber security best practices.  

Cyber security is a community effort

At Nelson & District Credit Union, we have robust security systems in place to protect your financial data. But, to reinforce that security, it’s also important that you stay vigilant and protect your personal information wherever you go. 


Add our enhanced security features

What is 2-Step Verification?

2-Step Verification (2SV) sends you a verification code by email, text, or automated voice call to confirm your identity as you log into online banking. 

Select Image

Why use 2SV? 

  • Reinforced security – It adds an extra layer of security to your login, beyond your Personal Access Code.  
  • Easy to implement – It’s easy to set up via your online banking or mobile app. 
  • Simple to use – It doesn’t add any time to your login, requiring only seconds to complete.  
How to get set up


More 2-Step Verification features 

Step-Up Transactions 

Add 2SV for extra verification of higher value transactions, like big payments. 

Device Binding  

Add devices to a trusted list, so they don’t prompt 2SV as often.  

Self-Serve PAC Reset  

Change your Personal Access Code online with 2SV for identity verification. 

What are Activity Alerts?

Alerts notify you by text or email about key activity in your account, so you can verify it and take action if needed.

Select Image

Why use Alerts? 

Real-time monitoring – It quickly notifies you of any unusual banking activity, helping you block potential fraud fast.
Better financial control – It keeps you informed about your finances to avoid overdraft fees and declined transactions.  

Simple to set up – It’s easy to set up and manage via your online banking or mobile app.  

Alert options available


New Payee Added 

Notifies you when a new payee has been added to your account.  

Personal Access Code (PAC) Changed 

Notifies you when your PAC has been changed.  

Online Login  

Notifies you when an online login has occurred.     

Interac e-Transfer® contact added   

Notifies you when an Interac e-Transfer contact has been added.   

Online Banking Account Locked Out - Incorrect PAC   

Notifies you when your online banking has been locked after the maximum failed attempts to login.     

Online Banking Account Locked Out - Incorrect response to Login Verification    

Notifies you when your online banking has been locked after the maximum failed attempts to verify your identity.      

Important note: We will never ask for your account number, passwords, or sensitive information in any of our alerts to you.

Quick tips for staying secure


Wi-Fi hotspots are great for browsing the web. But make sure you don’t use them for online shopping or banking. Public Wi-Fi rarely has the security and encryption in place to protect your data properly, which means you can’t be sure who might see your activity online.  

So it’s best to do your digital banking using your own secure home network or, if you’re on the go, use your cellular data plan.

It’s essential not to reuse passwords for important accounts, like your digital banking. This ensures that, if a password for another website is discovered, your financial information still remains secure.  

We also recommend that you avoid using personal information like birthdates and loved ones’ names or common words (e.g. password) and strings of numbers (e.g. 12345) in your NDCU Personal Access Code (PAC).  

At NDCU, to ensure its strength, we require all PACs to: 

  • Be between 9 and 30 characters long (no spaces) 
  • Include numbers, upper and lowercase letters 
  • Contain at least one of the following special characters: @ # $ ! ? 

And you cannot repeat a PAC you’ve used in the past.

Fraudsters are constantly finding ways to try and access systems. Providers combat this by releasing regular security patches to address any new vulnerabilities or cyber security risks.  

As a result, it’s important to keep your browsers, devices, and anti-virus software up to date. So these new features immediately start protecting your systems.

You wouldn’t tell a burglar the passcode to your alarm system. Sharing too many personal details on social media can be the same thing since fraudsters can use the information.  

Some key details to avoid sharing include:  

  • Date of birth 
  • Name of your first pet 
  • Where you went to school  
  • Family connections  

These details may seem harmless, but they’re also often used to verify your identity by various institutions.


  • Check your bank statements each month, so you spot any unusual activity fast.  
  • Don’t simply throw away paperwork. If it contains personal information, shred or destroy the document.  
  • Review your credit report annually to ensure there’s no unauthorized activity or incorrect information. 
  • Don’t keep unnecessary personal information, like multiple identity cards, in your wallet or purse.  
  • Cover the keypad when entering your debit card PIN in a shop or at an ATM. 
  • Store important documents, like financial records and identity documents, in a secure location.  

Stop. Think. Connect.

Get more tips and advice on everything from securing your banking to protecting your personal information online.  

Select Image

How to spot a digital scam

Typos & bad grammar 

Legitimate sources rarely make mistakes with their content. If a website, email, or text is poorly written, it’s a clear warning sign to be cautious of a fraud attempt.

Intense urgency  

Don’t respond too fast when you see a sudden great deal or threatening alert. Fraudsters use psychological tricks like these to make us act before thinking.

Unsolicited contact   

You get a notification or message from a company you know but haven’t used recently. Be wary, as fraudsters will often try to impersonate organizations you trust.

Abbreviated links    

A fraudster’s aim is often to get you to click a link and share personal details. So make sure you always check that any links you receive match where they claim to be from.

NDCU fraud prevention tips

Learn our six key tips for protecting yourself against spoofing, smishing and phishing scams.

Select Image

Learn more tips to keep you safe online


Other resources you may find helpful 

Get Cyber Safe

A federal government resource, sharing simple steps you can take to protect yourself online.

Select Image

Cyber Security Toolkit

A guide from the Canadian Bankers Association to help you spot and avoid cyber threats.

Select Image

The Little Book of Scams

A breakdown of common digital scams to watch out for by the Competition Bureau of Canada.  

Select Image