Prevention & Safe Browsing

The weakest line in any online system is individual home computers and mobile devices. Members must ensure the computer they use to access their accounts has the security features required in their account agreement. Keep in mind in regards to online scams, if it sounds too good to be true, it probably is. If you believe you have been a victim of fraud or a financial crime, it is your responsibility to contact the TMECU as soon as possible.

Downtown Branch: 416-392-6868

Etobicoke Branch: 416-622-9300

TMECU also believes in a proactive approach to security to minimize any risks to your financial information. Take a look at some tips and good habits to have while banking online or through our app.


Like keys to your car or home keep you secure from intruders, your PAC and PIN keep your banking secure.

Personal Access Code (PAC) – Your PAC is your personal access code or word used with Direct Services to access your Account. You cannot access online banking until you have been given a PAC. You have the ability to change your PAC to a code that is easy to remember when you log in.

Personal Identification Number (PIN) – used for the automated teller machines (ATM)’s and in stores, it is a four-digit code that is easy to remember.

These passwords are both needed to log into online banking, especially from an unknown IP address. It is your responsibility to protect these passwords in order to protect your banking information. Please see the following tips when it comes to securing your passwords.

  • Password Selection - Never select a password that is obvious or easy to guess. An example would be a password based on personal information like your birthday, phone number, address, social insurance number or information about your friends and family.
  • Do not share your PAC or PIN or any other passwords with anyone, especially online or on the phone. You should not even give out this information to the police.
  • Do not write down your password or store it in a file on your computer.
  • Never give out your password on a voicemail or through an email.
  • Change your passwords on a regular basis, roughly every 90 days. Although TMECU will never ask you for your password for online banking over the phone or through email. We will ask personal questions only you know the answers to instead.
  • The best passwords are at least 12 characters long, have both upper and lower letters, numbers and symbols.
  • Be careful who observes you when entering your password.


Online stores are becoming more and more popular, allowing people to purchase goods from all over the world. Here are some ways to ensure a safe shopping trip online.

  • Confirm your anti-virus software is up-to-date and that you have a firewall in place to safeguard from potential attacks.
  • Check your browser's encryption status, making sure it supports at least a 128-bit encryption. This encryption prevents financial criminals from obtaining your credit card number. The data is scrambled before being sent to the online shop or in banking.
  • Ask yourself, do you trust this website? Is there a strong reputation or brand, have you shopped online there before without any issues?
  • Check reviews online about a website's credentials, complaint and refund services. Some comparison sites include Epinions or Bizrate.
  • Make sure you are only giving out information that’s necessary for the online transaction to be completed. This includes your credit card number, address, telephone number, and shipping address.
  • Check the websites address in the address bar on your browser, if the address begins with “https” instead of “http” the website is secure.


Most fraud emails do what is called phishing. Phishing is where internet scammers try to obtain your personal information like usernames, passwords, banking information and credit card details through email or instant messaging. The fraudulent will send an email which will appear to be from a financial institution and will then ask to click a link and log into your banking to verify your account information. These are non-legitimate versions of online banking sites.

Phishing emails may include:

  • Warnings about account closures or alarmist content.
  • Requests to update your information
  • Offers to register for a new service
  • Offers for pre-approved credit cards
  • Free virus protection programs
  • Poor spelling or grammar
  • Notices you’ve won a prize and you have to pay a fee to claim it

Phishing can also be used for identity theft, these websites will ask you what your mother’s maiden name or social security number. TMECU will never send you emails or communications asking you to verify or provide your online banking details. The best way to protect yourself is to never use a link provided in an email to access your online banking. Or scan emails with anti-virus software before opening.

If you are receiving emails that appear to be from the TMECU and look suspicious contact your local branch immediately.


When using public computers, it is important that valuable personal information secured from financial criminals. Using public networks like hotels, libraries, cafes, or airports do have a risk, especially for online banking. Here are some tips to help you keep safe on a public network.

  • Do not save your login information, always click “log out” instead of closing the browser. Many programs will have cookies that help make banking more convenient for our users, remembering passwords or usernames. Never save your login credentials on a public computer.
  • Do not leave your computer unattended with sensitive information on the screen. Log off and close all programs before walking away.
  • Erase your tracks or history on your internet browser.
  • Watch for snoops – be careful who observes you entering your password to your computer or mobile phone.
  • Sign up for banking alerts for your email and/or text messages to stay notified of changes to your account.
  • The most effective way to avoid hackers is to not enter your private information on a public computer or public network to begin with and wait till you are at home to look through your e-statements.


When you move, it is important to notify us of your change of address. If your mailing information isn't up-to-date, statements or letters that contain personal information will continue to be sent to your former address.


You may prefer to eliminate paper statements altogether, avoiding any possibility of mail theft. Eliminate paper documents, go electronic and be secure while doing it. Our e-Statements are a digital archive of your monthly banking activity than can be downloaded as a PDF from our secure online banking site.


When you are finished with your banking session, always log out by clicking the "Log Out" button, as opposed to simply closing the browser window. To help protect your information, your online banking session will end automatically if there has been no activity for 20 minutes or if your visit lasts longer than 60 minutes. If your session has timed out, no further transactions can be made until you log in again. This time-out feature helps protect your accounts from unauthorized access if your PC is left unattended or if you have forgotten to log out.


When you spend time on the Internet, your browser stores information, such as the websites you visit, the images and files you view, and your personal information, including passwords and login details. This data is held on your computer's hard drive and is known as 'cache.' Even though you may have logged out and closed your browser, this information may remain accessible. You can protect your data by clearing your browsing history regularly. This can be done in a few easy steps:


Click on the 'Tools' tab (or use the 'Ctrl-Shift-Delete' shortcut)

  1. Select 'Delete Browsing History'
  2. Choose the options you wish to erase and click 'Delete'


Click on the 'History' tab (or use the 'Ctrl-Shift-Delete' shortcut)

  1. Select 'Show All History' and/or
  2. Choose the time frame you wish to erase and click 'Delete'


Click on the 'History' tab

  1. Select 'Show all History'
  2. Choose the period you wish to erase and click 'Clear History'


Delete all your data:

  1. In the top-right corner of Chrome, click the Chrome menu.
  2. Select More tools > Clear browsing data.
  3. In the dialog that appears, select the checkboxes for the types of information that you want to remove.
  4. Use the menu at the top to select the amount of data that you want to delete. Select beginning of time to delete everything.
  5. Click Clear browsing data.

Delete specific items from your browsing data:

Instead of deleting entire categories of your browsing data, you can pick specific items to delete.


Some web browsers have a feature that allows you to browse the Internet without the browser storing information, such as the sites you visit, the images you see and videos you watch. This feature is sometimes used by people who share the same computer. Private browsing is a temporary option and must be selected in order for it to be activated. Private browsing, however, does not give you immunity to spyware or make you anonymous. It is still possible for your Internet service provider, employer or the websites you visit to track your online activity.


Frequently reviewing your paper and/or electronic account statements ensures that you spot any incorrect or fraudulent transactions as soon as they occur. If your card has been skimmed (when the card's magnetic stripe and PIN are fraudulently copied by embedded devices at ATMs or point-of-sale devices) or unauthorized transactions have been made, you will want to catch this as soon as possible. Every time you receive an account statement and verifies you made all the transactions.


Receive, manage and pay your bills through Canada Post's free online service. To sign up, create an account and scroll through the list of partners to find which bills you can receive with Epost. More than 100 organizations are supported as "Mailers," including telecommunications and credit card companies and government agencies. You can also store your bills and statements securely on epost for up to seven years.


Find Branch/ATM

Enter address, postal code or branch name