Multi-Factor Authentication Reference Guide

Multi-Factor Authentication

Reference Guide

Multi-Factor Authentication (MFA)

Required for All Customers

Once MFA is activated, you will log onto VIPbanker™ using your Login ID and Password.

You will then be prompted to:

1. Select your Temporary Secure Access Code delivery preference

A temporary, random access code will then be created for you. This temporary access code will remain valid for 15 minutes and will be delivered in the manner you specified. Delivery should only take a few minutes. This temporary access code will be valid for only one computer. If you wish to register another computer, you will need to request an access code from that computer.

If you receive this code via telephone, VIPbanker™ will call you with a generic message indicating that

you have requested a temporary access code and will then provide the code. For security purposes, this message will not indicate what the code should be used for, nor will it be left on voicemail.

If you receive the code via email, a message will be delivered to your email address. The email will be sent from [email protected]. Please configure any spam filters or “white lists” to accept emails from this address. The email will include the code but not the purpose of its use.

If you receive the code via SMS text, a message will be delivered to your cellular phone. The SMS text will be sent from PacWest Bank.

Multi-Factor Authentication (MFA)

2. Once you receive this temporary access code,

3. Once the code is validated, you can register your browser.

“Activate this computer for later use”, a “cookie” will be placed on your computer. Use this option

to register a home or work computer that is used exclusively by you. Selecting this option will prevent you from having to go through this registration process the next time you log in to VIPbanker™. Click on Continue.

NOTE: You must have your browser set to enable cookies to gain access. Do not allow your browser to clear this cookie when you log off or shut down your computer. If you do not currently allow cookies, please be sure to allow cookies from Pacific Western VIPbanker™:

https://secure53.onlineaccess1.com/pacificwesternBankOnline/Authentication/Login.aspx

Multi-Factor Authentication (MFA)

4. Select “Give me one-time access only” (do not activate this computer)

when you are using a public computer (i.e., at a hotel, in a library, etc.).

5. Once registration is complete,

Multi-Factor Authentication (MFA)

The Challenge Code feature allows you to gain one-time access to VIPbanker™

when you are unable to receive a secure access code through standard methods (i.e., you do not have access to your email account or you are away from your home or business phone). To use this feature, you must log in through the MFA process at least once. During a multi-factor authenticated session, you can create a challenge code found in the Preferences menu under Security.

You will then see a set of tabs; click on Challenge Code. Input a code that

meets the requirements listed to the right of the screen. You may not use your password; the challenge

code must be unique. Once you have input your code, click on Submit Challenge Code.

The next time you log in to

VIPbanker™ from a different

computer, you will see input of your Challenge Code as a delivery option. Once you click on

Continue, you will be

prompted to input your code. Click on Continue

once more and you will be directed to your Account Overview page.

Challenge Code

Internet scams are increasing. Two common scams are Phishing and Pharming.

Phishing is an internet scam that involves an email which appears to be from a legitimate company,

bank, or government agency. The email typically warns of a potential problem with your account and requests that you follow a link and provide personal or account information to update your information. You should never reply to these emails, open any attachments, or follow any of the links provided.

If you believe an email to be legitimate, you should contact the company using your usual contact information.

Pharming is a type of fraud that involves redirection from a legitimate site to a site that appears to

be legitimate, but has been created by fraudsters in an attempt to gain your personal or account information.

To ensure that you are being directed to our site from the computer(s) you use most often, you can set a phishing phrase within VIPbanker™. This phrase will be displayed to you on the login screen to verify

you are on our site.

To set your phishing phrase from within VIPbanker™, go to Security under Preferences.

You will then see a set of tabs, click on Phishing Phrase. Input a phrase or word that is easy for you

to remember and click on Submit My Phrase.

Phishing Security

The next time you visit VIPbanker™ from your usual computer; you will see that phrase over the login

fields. If you see the phrase, you know that you are logging in to VIPbanker™. If you don’t see the

phrase when logging in from your usual computer, contact us immediately at 1-800-350-3557.

NOTE: If you use two different computers, you will need to set the phishing phrase on each computer. If multiple users are accessing the same computer, they will see the phrase of the user to whom the computer is registered.

Support

If you require assistance or have questions, please contact us at 1 (800) 350-3557 or (760) 432-1210 Monday through Thursday from 8:00 a.m. to 5:00 p.m. PST and Friday from 8:00 a.m. to 6:00 p.m. PST.

Phishing Security