DRB Security Center
Protect your money, your identity and your peace of mind
DRB provides steps for personal safety, account security and ID theft protection.
ATMs, card payments, online and mobile banking make life easier. They also mean you need to protect your debit cards, PINs, phone and computer, along with your personal safety. This page explains how, in plain steps.
Worried right now?
Stop and call us first
A real person will help you check if something is real. There’s never a penalty for calling.
What can we help you with?
Choose a topic to jump straight to the answer.
The one rule to remember
Stop. Hang up. Call us.
- 1
Stop
If someone is rushing or scaring you, that’s the warning sign. Real problems can wait five minutes.
- 2
Hang up
End the call, close the email or ignore the text. Don’t click, reply or call a number they gave you.
- 3
Call us
Dial DRB yourself at 203-656-3500 or the number on the back of your card.
DRB will never ask you to:
If anyone claiming to be from DRB asks for any of these, it’s a scam. Every time.
- Share a code, PIN or password, including a one-time code we texted you
- Move your money to “keep it safe” by wire, transfer or Zelle®
- Withdraw cash or buy gold and hand it to a courier at your door
- Pay with gift cards or crypto, or use a crypto ATM
- Install an app so we can see or control your phone or computer
- Keep a secret or lie to a bank teller about why you need money
Quick check
Is this a scam?
Answer six quick questions about the call, email or text you received. One “Yes” means treat it as a scam.
-
1
Did they contact you first, out of the blue?
-
2
Are they rushing you, threatening you, or saying a loved one is in trouble?
-
3
Do they want a code, PIN, password, or your Social Security or Medicare number?
-
4
Do they want payment by gift card, crypto, wire, Zelle®, cash or gold?
-
5
Did they tell you to keep it secret, or what to say to your bank?
-
6
Do they want you to install an app or let them into your computer?
Your result will appear here as you answer.
How to spot a scam · Phone calls
If you get a call you weren’t expecting
Scammers can fake any caller ID, even from DRB, the police or Medicare. A familiar number doesn’t mean a real call.
Never do this on a call
- Don’t read back a code sent to your phone. That code unlocks your account.
- Don’t give your Social Security, Medicare, card or account number.
- Don’t press a number or say “yes” to a recorded message.
- Don’t download an app or let them “connect” to your device.
- Don’t stay on the line while you drive to the bank or ATM.
- Don’t follow advice to lie to your bank teller. Real agencies never ask that.
Do this instead
- Say “I’ll call you back,” then hang up. You don’t have to be polite.
- Find the real number yourself: back of your card, a statement or the official website.
- Call that number and ask if the request is real.
- Talk to someone you trust before you send money.
- Let unknown numbers go to voicemail. Real callers leave messages.
- Ask your phone carrier about free call-blocking tools.
Good to know: The IRS, Social Security and Medicare contact you by mail first. They won’t call to threaten arrest or demand payment.
How to spot a scam · Email
Six signs of a fake email
Fake emails copy real logos and colors. Each number in this example matches a warning sign in the list.
- 1Strange sender address. The name says DRB, but the address after the @ isn’t drbank.com.
- 2Panic in the subject line. Deadlines and threats are meant to stop you from thinking.
- 3A generic greeting. Your bank knows your name.
- 4Threats, errors and odd wording. Typos are common, though some fakes look polished.
- 5A button or link. The words don’t show where it goes. On a computer, rest your mouse on it. On a phone, press and hold.
- 6A request for private details. No real company asks for your PIN or full card number by email.
Got one? Don’t click or reply. If it used DRB’s name, call us at 203-656-3500.
How to spot a scam · Website links
How to read a web address
Fake sites use look-alike addresses. The part just before the first single slash ( / ) shows who owns the site.
The padlock isn’t proof. Scam sites can show a padlock and “https” too. It only means the connection is private, not that the site is honest.
Type it or bookmark it. Go to drbank.com by typing it yourself or using a saved bookmark, or open the DRB Mobile app.
Be careful with search ads. Fake bank sites sometimes appear at the top of search results. Use your bookmark instead.
Text messages
Fake texts look like everyday alerts
- Common ones: an unpaid toll, a package that couldn’t be delivered, a “fraud alert” from your bank, or a “wrong number” chat from a friendly stranger.
- Don’t tap links or reply, not even “STOP.”
- If it claims to be DRB, open our app or call us to check.
Pop-up warnings
Real virus warnings never include a phone number
- A flashing screen says your computer is infected and tells you to call “Microsoft,” “Apple” or your bank.
- Don’t call the number. Microsoft, Apple and DRB never put a phone number in a pop-up.
- Close the browser. If it won’t close, turn the computer off and back on.
- Never let a stranger connect to your computer remotely.
Know the latest scams
Scams we’re seeing right now
Every scam has two tells: pressure to act fast, and a payment that’s hard to undo. Learn the patterns below.
$15.9B
lost by U.S. consumers to fraud in 2025 (FTC)
$7.7B
lost by Americans 60 and older (FBI)
$2.1B
lost to fake tech support (FBI)
$893M
lost to scams using AI (FBI)
Phone · Text
Fake bank fraud department
“This is DRB fraud. Someone is using your card.” They ask for the code we just texted you, or tell you to move money to a “safe” account.
What to do: Hang up and call us yourself.
Pop-up · Phone · In person
“Phantom hacker” and courier pickups
Callers posing as tech support, then your bank, then a government agency say your savings are at risk. They have you withdraw cash or buy gold, then send a courier.
What to do: Never hand cash or gold to anyone. Call us before any large withdrawal.
Pop-up · Phone
Fake tech support
A pop-up or caller says your computer has a virus and asks to connect to it. Some offer a “refund,” then claim they sent too much.
What to do: Don’t call or let them connect. Restart your computer.
Phone · Mail · Email
Government imposters
Someone from the “IRS,” “Social Security,” “Medicare” or “police” says you owe money or your benefits are suspended, and threatens arrest.
What to do: Hang up and call the agency’s official number.
Phone
Grandparent and AI voice scams
A voice that sounds just like your grandchild says they’re in jail or hurt and need money now. AI can copy a voice from a short online video.
What to do: Hang up and call them on their usual number. Use a family code word.
Online · Social media
Romance scams
An online sweetheart builds trust over weeks. They can never meet or video chat, then an emergency comes up that needs money.
What to do: Never send money to someone you haven’t met in person.
Text · Social media
Investment and crypto scams
A new online friend, often from a “wrong number” text, shares a can’t-lose crypto or trading app. Early “profits” look real, but you can’t withdraw.
What to do: Check the firm on FINRA BrokerCheck. Guaranteed returns are a lie.
Text
Toll and delivery texts
“E-ZPass: you owe $4.15. Pay today to avoid a fine.” The link goes to a copycat site that steals your card number.
What to do: Don’t tap. Check your account on the official site.
Mail · Phone · Email
Prizes, lotteries and fake checks
You “won,” but must pay fees first. Or a check arrives for more than you’re owed, with a request to send back the difference.
What to do: Real prizes are free. Never send money back from a check.
Check fraud and mail theft
Checks are stolen from mailboxes, chemically “washed,” rewritten and cashed.
What to do: Mail checks inside the post office, use a gel pen and review your account often.
Build good habits
Everyday protection
A few simple habits stop most fraud before it starts. Choose the tips that fit you.
Guard your paperwork
Shred these before you throw them away:
- Bank statements
- Credit card applications or bills
- Any mail about your job or finances
- Expired credit cards
Never give out your Social Security number unless you made the contact and know who you’re dealing with.
Lock down your logins
- Protect all passwords. Use a different one for banking and email.
- Turn on two-step verification wherever you can.
- Don’t open emails or attachments from unknown senders.
- Keep your phone and computer updated and locked.
- Skip public Wi-Fi when you bank.
Keep an eye on your money
- Review every bank statement and credit card bill for charges you don’t recognize.
- Turn on account alerts in the DRB Mobile app.
- Only use Zelle® with people you know. Payments can’t be cancelled once sent.
- Check your credit report regularly. Here’s how.
Stop fake payment requests
Business email compromise cost U.S. businesses over $3 billion in 2025. It usually starts with one routine-looking email.
- Confirm any new or changed payment instructions by phone, using a number you already have.
- Be cautious of urgent, confidential requests from executives, vendors or title companies.
- Require two-step verification on all company email.
Use DRB’s fraud tools
- Payee Positive Pay flags checks that don’t match what you issued.
- ACH Positive Pay lets you approve or return unexpected debits.
- Require two people to approve wires and ACH batches.
- Review who has online banking access every quarter.
Make security a team habit
- Reconcile accounts daily, not monthly.
- Train staff to spot phishing and fake invoices, and to speak up fast.
- Never let callers remote into company computers.
- Store scanned checks securely, then destroy them on a set schedule.
- Back up data offline to limit ransomware damage.
Protect your identity
Identity theft
Identity theft is when someone uses your name, Social Security number or accounts to borrow, buy or file taxes.
Warning signs
- Charges or withdrawals you don’t recognize
- Bills or collection calls for accounts you didn’t open
- Statements or expected mail stop arriving
- You’re turned down for credit unexpectedly
- The IRS says a return was already filed in your name
Freeze your credit. It’s free.
A freeze stops anyone from opening new credit in your name. It won’t hurt your score, and you can lift it any time you apply for a loan or card.
Contact each bureau below separately. Obtain a copy of your credit report periodically, free from all three at AnnualCreditReport.com (opens in a new tab).
Equifax
Experian
Look out for each other
Protecting older adults
Americans 60 and older lose more to scams than any other age group. Talking about it openly is the best protection.
If you’re 60 or older
- It’s always OK to say “I need to talk to my family first.”
- Pick one trusted person you’ll call before sending any money.
- Agree on a family code word for emergency calls.
- Feeling embarrassed? Call anyway. Scams happen to smart, careful people.
If you’re helping a loved one
- Watch for new secretive “friends,” large withdrawals or gift card purchases.
- Notice if they seem anxious about the phone or computer.
- Offer help without judgment so they’ll come to you next time.
Cut out and keep by your phone
Stop. Hang up. Call DRB.
203-656-3500 · 800-361-5363
We never ask for codes, PINs or passwords. We never send couriers. We never ask you to move money to keep it safe.
If something’s wrong
Think you’ve been scammed? Act fast.
You’re not in trouble and you’re not alone. Report it quickly for the best chance of stopping a payment.
- 1
Call DRB
We’ll help secure your accounts and try to stop payments.Local203-656-3500Toll-free800-361-5363 - 2
Contact the police
If you suspect there might be a problem, file a report right away and keep a copy for your records. - 3
Call your card companies
Then place a fraud alert or freeze with each credit bureau. - 4
Report it to the FTC
Visit IdentityTheft.gov (opens in a new tab) for a recovery plan, or call the Identity Theft Hotline.877-IDTHEFT877-438-4338
If you gave out a password or code
Call us first, then change that password and any account that uses the same one. Turn on two-step verification.
If someone connected to your computer
Disconnect from the internet, call us, and have a trusted technician check the device before you bank on it again.
If you sent money online or by wire
Call us right away, then file a report at IC3.gov (opens in a new tab), the FBI’s cybercrime center. Hours matter.
More trusted resources
Official sites for reporting fraud and learning more.