SECURITY CENTER
The short version: we will never call and ask you for a code
Most account takeovers start with a convincing phone call, not a hacked server. Here is exactly how Summit protects your money, how we contact you, and what to do the moment something looks wrong.
Your protection
What is running behind your account
All of it is included. None of it costs extra.
Two-factor authentication
Turn it on once in digital banking and every new device has to prove itself with a one-time code or a passkey. We strongly prefer an authenticator app or a passkey over text messages, because SIM swaps are real.
Alerts you control
Set a push or email alert for any transaction over an amount you choose, for every card-not-present charge, for balance thresholds, and for password or address changes. Alerts are the cheapest fraud detection there is.
Card controls in the app
Freeze a card the second you misplace it and unfreeze it when it turns up in a coat pocket. You can also block international use, online purchases, or ATM withdrawals per card.
Round-the-clock monitoring
Our processor scores every card authorization in real time. If a charge looks out of pattern we text you before it posts, and you reply yes or no. No reply means we decline it and call.
Zero liability on fraud
If your Summit debit or credit card is used without your permission and you tell us promptly, you are not out the money. Provisional credit usually lands within two business days of the claim.
Federal insurance
Your deposits are federally insured by the NCUA to at least $250,000 per depositor, per ownership category. That backing has not changed since we opened in 1948.
How we contact you
Four things Summit will never do
Fraud calls work because they sound official and urgent. Our real callers are neither. If a call breaks any of the rules below, hang up and dial us back at (800) 555-0148. We will not be offended.
What we do instead: send a fraud text you can reply to, message you inside digital banking, mail a letter, or call from a number you can verify by hanging up and calling us back.
If it already happened
What to do when you suspect fraud
Speed matters more than certainty. Call us even if you are only half sure.
Freeze the card yourself
Open the Summit app and switch the card off. This takes ten seconds and stops new charges while you figure out what happened. It does not cancel the card.
Call the 24-hour line
Dial (800) 555-0166 any hour of any day. Tell the agent what you saw. If money already left, say so first so they can attempt a recall before the batch settles.
Change your credentials
Reset your digital banking password from a device you trust, turn on two-factor if it was off, and sign out all other sessions. Change the password on the email tied to your account too.
File the claim and watch the account
We open a written dispute and usually post provisional credit within two business days. Set a transaction alert at $1 for the next 60 days so nothing slips past you.
Know the pattern
The three scams we see most
The spoofed fraud department
Caller ID shows our real number. They confirm a fake charge, then ask you to read the code we just texted. That code is a password reset. Hang up and call back.
The payment app reversal
Someone claims they sent you money by mistake and asks you to send it back. The original payment was funded with a stolen card, so it gets pulled and your refund is gone.
The overpaid check
A buyer, employer, or landlord sends a check for more than the amount owed and asks you to wire back the difference. Funds availability is not the same as a good check.
Security questions members ask
Someone called from your number. Was it really you?
Caller ID can be faked in seconds, so the number proves nothing. Hang up and call (800) 555-0148 yourself. If the first call was genuine, the agent will see the note on your account and pick right back up.
Am I liable if I gave a scammer my one-time code?
Usually not, but tell us immediately. Regulation E covers unauthorized electronic transfers, and reporting within two business days keeps your exposure lowest. Waiting past 60 days after a statement is where members get hurt.
Should I use text codes or an authenticator app?
An authenticator app or a passkey. Text codes are better than nothing, but a criminal who convinces your mobile carrier to move your number can receive them. Passkeys cannot be phished or read aloud.
How do I know a Summit email is real?
We never send links that ask you to sign in. If an email wants you to log in, ignore the link and open the app or type our address yourself. Real notices are also waiting for you in your secure message inbox.
Do you sell my information?
No. As a not-for-profit owned by its 412,000 members, we have no shareholder to sell data for. See the privacy policy for the full list of what we share, which is essentially service providers and legally required reporting.
What if I lose my phone with the banking app on it?
Call us and we will sign out every device on your profile. The app itself stores no account numbers, and it will not open without your device passcode, face, or fingerprint.
Summit Federal Credit Union, founded 1948. Federally insured by NCUA. Equal Housing Opportunity Lender. This is a demonstration website; phone numbers, policies, and figures shown are illustrative only.
See something off? Call now, apologize never.
The 24-hour card and fraud line is (800) 555-0166.