Skip to footer
Bank-Level Protection

Online Security and Fraud Protection

Looking after you is the work we take most seriously. See how BestCitizenBank protects your money and your details with layered security, 256-bit encryption, and fraud monitoring that never sleeps.

256-bit SSL encryption

Your data is scrambled as it travels

Multi-factor authentication (MFA)

A second step when you sign in

Fraud monitoring, day and night

Alerts the moment something looks off

Zero liability

Covered if money moves without your say-so

How We Keep Your Online Access Safe

We use up-to-date security controls and automated monitoring so your money and your personal details stay private.

Encryption From End to End

Everything you do with BestCitizenBank — signing in, moving money — is encrypted with 256-bit Secure Sockets Layer (SSL/TLS) protocols, so nobody can step in and read your details.

  • HTTPS on every page
  • Sessions time out when you step away

Multi-Factor Authentication (MFA)

MFA adds a vital second layer of protection. Sign in from a new device, or do something sensitive like adding a payee, and we'll ask for a one-time passcode (OTP) or a face or fingerprint check.

  • Codes by text message or authenticator app
  • Sign in with your face or fingerprint

Alerts the Moment Something Happens

Get a push notification, an email, or a text when a payment goes over the limit you set, when your password changes, or when someone tries to sign in from a device we don't recognize.

  • Alert limits you set yourself
  • Lock your card instantly in the app

Spotting Threats Before They Land

Our automated monitoring watches your account around the clock, looking for spending that doesn't fit your habits, sign-ins from unexpected places, and early signs that someone is trying to take over your account.

  • Automated blocking around the clock
  • We may pause your account if something looks wrong
The One Rule to Remember

We Will Never Ask for Your Password or OTP

BestCitizenBank will never call, email, or text you asking for your online access password, your PIN, or a one-time passcode (OTP). If someone claims to be from BestCitizenBank and asks for any of those, hang up immediately.

Check that the address bar reads https://mail.bestcitizenbnk.com before you type in your details.
Use a long, unique password that mixes letters, numbers, and symbols.

How to Report Something Suspicious

If you spot activity you don't recognize, or you think a message is a phishing attempt, tell us right away using one of the routes below.

Call our fraud team, any hour

Tell us about a lost or stolen card, a charge you don't recognize, or a suspicious call.

Report a phishing email

Forward the suspicious email, or a screenshot of the text, to our security team.

Forward the Email

Lock your card in the app

Switch your debit or credit card off with a tap from your mobile app settings.

Manage Your Card Locks

Online Security Questions

Answers to the questions we hear most about staying safe online.

Sign in right away and change your password under Profile > Security Settings. If you can't get into your account, call our support team any time on 1-800-555-BANK and we'll lock it down for you.
Everything you send to us is encrypted with SSL/TLS, but public Wi-Fi networks aren't always secure. When you're away from home, we suggest using a Virtual Private Network (VPN) or switching to your mobile data.
Under federal rules and our zero-liability promise, you won't be held responsible for card activity or online international payments you didn't authorize, as long as you report it as soon as you notice.

Take a Minute to Check Your Settings

Sign in to turn on two-factor authentication, set your payment alert limits, or update your password.