Online Banking Security and Bank Fraud Protection

The information you provide to us online is protected by Secure Socket Layer (SSL) technology. SSL is the leading security protocol for data transfer on the internet. This technology scrambles your account information as it moves between your browser and Popular's computer systems. When information is scrambled, or encrypted in this way, it becomes nearly impossible for anyone other than Popular to read it. This secure session helps protect the safety and confidentiality of your information when you bank with us online.

If you do not bank online with Popular, we do not collect, capture, or retain personally identifiable information when you are just browsing and testing these scenarios. By offering you this level of privacy, we believe you will be more likely to find the products and services that fulfill your banking needs and goals.

• SECURITY. To help protect our customers from security threats, we utilize the following approach, which you hereby agree to. You acknowledge that these guidelines are a commercially reasonable method of providing security against unauthorized payment orders or other transactions and that these procedures are not for the detection of error. 
  • Identification of customers when logging on to the applicable service will consist of multi-factor authentication that utilizes user names and passwords, plus either pictures and phrases and/or challenge questions. If you indicate a computer you are logging on to is safe and private, we will identify the IP address used for that log in during future log ins using that computer and IP. Once identified in future log ins, this will be considered one step of the multi-factor authentication process and the pictures and phrases and/or challenge questions may not be asked. It is your sole responsibility to identify safe and private systems where you would like IP authentication to be used. This authentication is not to be used on public computers, but any breach to a system where you have requested IP identification be used, whether private or public, is still solely your responsibility and any transactions performed due to such a breach are also your sole responsibility. We reserve the right to modify the identification process from time to time to implement new measures that are recommended in the industry to combat new or increased threats.
  • To help enhance your security, you must follow these general safety guidelines:
    • Never leave your computer or other access device (e.g., mobile phone) unattended while logged on to any of the applicable services.
    • Memorize your "Credentials" (user name, password and/or challenge questions, as applicable). Do not keep them written down.
    • Change your Credentials regularly.
    • Choose Credentials that are not easy to guess. For your user name you must use a minimum of 8 characters and a maximum of 10 characters with a combination of at least 2 numbers and 2 letters. For your password you must use a minimum of 8 characters and a maximum of 20 characters with a combination of at least 1 number and 1 letter. Credentials cannot include spaces, cannot include a character that repeats more than 2 times in a row and cannot contain invalid characters such as: single quotation mark (‘), backslash (\), greater-than symbol (>), or less-than symbol (<). Credentials are case sensitive, so if you use capital letters when you create them you must use the capital letters each time you log in. Do not use names of family members, pets, common character sequences (i.e., 123abc), proper names, geographic locations, personal details such as a Social Security number or birthday, etc.
    • Never disclose your Credentials to any other person, including family and friends. Your Credentials are for your personal use and should be kept confidential by you. If someone identifies him/herself as our employee and asks for your Credentials, that person is an imposter. We will never request you disclose your online banking Credentials to us.
    • Do not save passwords on your computer or any other access device (e.g., mobile phone). Do not keep them written down.
    • Check your statements and review your banking transactions promptly, thoroughly and regularly. Report errors or problems immediately to us.
• Should you receive a suspicious e-mail or telephone request for information that purports to be from Popular Bank, Popular Inc. or any of its affiliates (collectively, "Popular"), you must immediately notify your banker or call us directly at 1-800-274-5696.
• You are responsible to install, update, maintain and properly use industry standard security products that are appropriate for you, such as the following:
  • Desktop firewall used to prevent unauthorized access to your network
  • Updated anti-virus protection used to prevent your computer or other access device from being victimized by the latest viruses and trojans.
  • Updated anti-spyware protection used to prevent spyware from providing potential tracking information about your web activities.
  • Operating system and desktop applications updated with the latest patches when they are available, particularly when and if they apply to a known exploitable vulnerability.
  • A product that indicates the web site you are on, or an internet browser that indicates the site name. Check your statements and review your banking transactions promptly, thoroughly and regularly. Report errors or problems immediately to us.