Security Center

Here, safety always comes first

Discover the range of trusted security measures we employ so that you can bank with peace of mind.

Keeping your accounts and money safe and sound

In today’s online world, it’s vital that you have the tools and take the necessary steps to keep your information safe and secure. And we’re here to help.

Account security

Your financial information is one of the most important things you can keep secure, and our goal is to provide the protection you need to bank with confidence. Client security is our top priority, and every associate is held to strict privacy and information security rules.

Encryption technology

Our website and app use strong encryption technology to protect your username, password and personal account information. To ensure you are on a web page with encryption, look for “https://” and a lock symbol in your web browser.

Fraud detection

We monitor data in order to detect fraud and unauthorized use. If we notice suspicious activity on your account, we may contact you by phone, text, email or mail to confirm you have authorized that purchase.

Web Safety Guarantee

We can’t emphasize enough how dedicated we are to making sure you trust us with your money. So we let our guarantee do the talking. Our Web Safety Guarantee provides protection for certain lost or misdirected funds and bill payment fees.x

Our associates

We believe we are defined by how we behave and never compromise the integrity and high ethical standards we expect from our associates. You can rest assured that we have policies and procedures in place regarding the way we expect associates to protect your confidential information (including your account and personal information), as well as guidelines to restrict how we use and share information for certain processes and transactions.

Privacy measures

Everbank understands and shares our Customers’ concerns regarding the privacy of their data. We’ve published policies, procedures, and instituted employee training and communication programs designed to protect your information. The following are some examples of how we protect your information:

  • We restrict access to Personal Information to only those persons who need to know the information such as processing or servicing client accounts
  • We perform due diligence on our vendors and other third parties doing business with us and require adherence with applicable privacy and security laws
  • Maintaining physical, electronic and procedural safeguards designed to comply with applicable federal and state privacy laws

For further details, please refer to our Notice of Online Privacy Practices

ID theft coverage

Those who become victimized by identity theft often face significant personal stress and the potential for financial loss. For our clients with an EverBank debit card, if you ever become a victim of identity theft, you may qualify for up to $1,000 in reimbursement coverage for certain identity theft-related expenses.

Certain terms, conditions and exclusions apply. For further details, please refer to our Guide to Benefits.

Business fraud detection and protection

When it comes to online banking security, our goal is to make sure your business is covered at every contact point. We utilize a multi-layered approach to help protect you against fraud and identity theft, and to make sure our own systems are just as secure.

Business Online Banking safety and security

Our Business Online Banking secure banking platform provides multiple security features, including strong encryption technologies, account number masking and authentication methods that can help prevent cross-site scripting (hacking).

Two-factor authentication

We’ve added an extra layer of security to your account login experience with a two-factor authentication feature, which can help stop unauthorized access to your account. We will employ this security measure at times when our system detects a potential threat. This feature utilizes two different components to log in—a password and a token or authentication code. For companies using our wire or ACH services two-factor authentication is required at every login.

Stop payment

Using the Business Online Banking platform, you can conveniently issue a stop payment on a single or multiple checks from anywhere with Internet access—24 hours a day, 7 days a week—to help prevent fraud from a lost or stolen checkbook.

ACH positive pay

Within the Business Online Banking platform, our ACH positive pay service features real-time management, including the ability to update rules for incoming ACH debits, review and return ACH debits that are presented as exceptions, and give instructions for payments and returns.

Check positive pay

Also within the Business Online Banking platform, this service allows businesses to upload a ‘checks issued’ file that identifies a check’s routing number, account number, check number, check amount and payee information. If the details don’t match when a check is presented for payment, a list of exceptions will be presented to you within Business Online Banking, allowing for the determination of which checks will be paid or returned.

Take the right steps to protect your money

There are a variety of things you can do to enhance the protection of your EverBank accounts. Take a look at the ways you can help increase your online and mobile banking security.

Protect your accounts

Learning and using smart online safety practices can help keep threats of identity theft and fraud at bay. A good place to start is to remember that you should never share your account User ID or Password with anyone, and don’t save your Password in your browser. Here are a few more tips:

  • Use a strong, unique password for your EverBank online account.
  • Enable two-factor authentication via your security profile.
  • If you receive an email that appears to be from EverBank that is filtered into your junk folder, leave it there.
  • Never send confidential information through unsecured email, fax or texts.
  • Try to use an email provider that asks you to verify your identity in multiple steps.
  • Be careful with what you share on social media.
Set up free account alerts

Account alerts are a great way to keep track of your finances to detect withdrawals you didn’t authorize or other suspicious account activity. Alerts can help you monitor your account balance and transactions, and inform you of recent changes so you can take action immediately to help avoid fraud or unexpected charges.

Sign up through online banking to receive alerts by email or text message.

Guard your identity

Identity theft is a fast-growing crime, and many times it happens before you even realize it. So here are some ways you can take precautions to minimize your risks:

  • Review your statements for unusual transactions or suspicious charges.
  • When using the TIAA mobile app, set up push alerts and be sure to review and respond to alerts promptly.
  • Be sure to keep your contact information current (including your cell phone number and email address).
  • Create a unique default ID for your internet router and change the password to make it more difficult for hackers to access your network.
  • Also make sure your personal phone, computer and router are kept up to date with patches including firmware. 
Review your credit reports

Even if you don’t suspect any unauthorized activity on your account, it’s a good practice to carefully review your credit reports at least once a year. You can request a free annual credit report from each of the three national credit reporting agencies. You can request all three reports at once, or space them out throughout the year.

Shield your computer

There are a variety of ways you can lessen the risks of fraud when using your computers and laptops. Remember, the best offense is a good defense when it comes to your online financial security.

  • Only download software or applications from well-known or reputable sources, such as Apple, Google Play and Microsoft. Check the logos, developer names and reviews to spot fake applications. Scammers count on users being too busy to see differences that can make fake software easier to spot.
  • Install operating system and software updates (sometimes called patches or service packs).
  • Turn off Wi-Fi and Bluetooth services when you’re not using them, and avoid using public Wi-Fi for financial transactions unless you use a secure, private connection, like VPN software.
  • Back up your data regularly. If you use online or cloud storage, be sure you understand your provider’s privacy and security policies and keep your access codes safe.
  • Use the administrator login on your home computer only for creating new users and installing software. If you use administrator accounts when browsing the internet, banking or reading email, the risk of malicious code entering your computer without detection is much greater. Create standard user accounts for yourself and everyone in your family to limit your exposure.

Secure your mobile phone

More and more, we are all handling sensitive personal and financial information on our mobile phones. While it may be a convenient way to accomplish daily tasks, it’s also another avenue for scammers and fraudsters to try and steal your information and/or identity. So, it’s imperative that you remember to apply the following security measures to your mobile life:

  • When using the TIAA mobile app, set up push alerts and be sure to review and respond to alerts promptly.
  • Always lock your phone and open via a security code/PIN, fingerprint scan, or facial recognition.
  • Enable remote wipe and “find my phone” features to make sure you’re covered if your phone is lost.
  • Only download software or applications from well-known or trusted sources—and never click a link from an unknown source or sender.
  • Install system and software updates (sometimes called patches or service packs).
  • Turn off Wi-Fi and Bluetooth services when you’re not using them, and avoid using public Wi-Fi for financial transactions unless you use a secure, private connection, like VPN software.
  • Never root or jailbreak your own mobile device to gain access to unofficial applications. This practice may lead to security vulnerabilities and the inability to apply future software updates from the vendor.

Avoid scams

Fraud schemes are on the rise, and scammers have been known to use a variety of different methods to try to obtain personal information, including the use of emails and telephone calls. Here are a few tips to help you protect your personal information from telephone or email phishing scams:

  • If you receive a suspicious call, text or email from someone claiming to be from EverBank, do not respond, click links or open attachments. If this has happened to you, contact us right away at 1.888.882.3837.
  • Do not provide your personal secure information to an unsolicited caller. We will never initiate a call asking you to provide your full account number, online/mobile banking passwords, PINs or complete Social Security number over the phone, except limited instances when we are returning a call at your request.
  • Never respond to a phone call or voice mail service asking you to verify account information or reactivate a bank service, even if the caller recites some of your account information to you. They may have obtained the information from another source and are enticing you to provide additional details that would help them access your accounts.
  • Do you think you’ve been the victim of a scam? Report your experience to the FTC and/or to the FBI’s Internet Crime Complaint Center. Be as descriptive as possible and provide as many specific details as you can.

Take steps to protect your business

We employ a variety of security measures to help keep your business information secure. But there are some things you can do as well to further enhance your company’s safety online. Take a look at the following tips and actions you can take.

Practice information security every day
  • Ensure you and your employees keep your online access credentials secure. If you suspect that any of your usernames, passwords, tokens, security codes and/or PINs have been lost or stolen, change them and contact us immediately. At any time, you can direct us to disable a password and issue a new one.
  • Report any unauthorized access or suspicious activity on an account immediately.
  • Never leave your computers or mobile devices unattended while logged in to the EverBank website. Always log out when finished.
Helpful tips
  • Don’t use account information such as username, passwords or account numbers when creating account nicknames.
  • Watch out for suspicious websites and computer activities. Most malware does its best to stay hidden. If your machine is infected, your computer may run slower than normal.
  • Avoid unsolicited email attachments and website links. Infected items can come from anyone, including colleagues.
  • Don’t use unfamiliar portable computer storage media. USB memory sticks, CD-ROM/DVDs and portable hard drives can carry malware and other security risks.
  • Implement a dual control policy where applicable. This is when one person initiates and a second must approve before funds may be transferred out of the account(s).
  • Never log in to your account via a public computer or network. Always use a private computer and network for financial transactions.
  • Limit access to your network. Allow only specific devices to access your wireless network. If you want to provide free Wi-Fi for your customers, set up a second, public network—separate from the network for your business devices.
  • Establish an EverBank security code. This code helps us verify your identity and is required when contacting us with questions or changes to an account.
  • Periodically review the security measures you are taking and take steps to increase them, if necessary.
Email, text and phone tips
  • Never email account numbers or other sensitive information. Instead, log in to the Business Online Banking platform, and use our secure email service, which allows you to safely communicate with EverBank through the Contact Us option.
  • Set up email and text account alerts in Business Online Banking. Sign up under the administration tab to receive notifications about transfer activity, balance changes and other transactions.
  • Keep your online access credentials private. If we call you, we won’t ask for them, but we will ask for a security code, or a user ID if you have multiple accounts. If you are uncomfortable with us contacting you, end the call and contact a Business Banking Specialist.
Web browsing safeguards
  • Take the time to install security updates and patches to keep programs, browsers, and antivirus software current.
  • Use a secure website to enter sensitive data, and always check for https:// in the browser address bar along with the lock icon.

Stop business email compromise attacks

Business email compromise or BEC is a sophisticated email scam in which the fraudster compromises legitimate business email accounts through social engineering or computer intrusion techniques (such as malware) for the end goal of stealing money and/or sensitive information.

Put your financial information on lockdown

One way to keep your information secure is to be proactive and protect yourself with smart technology and safe practices. Use these tools and tips to help fend off security threats before they happen.

Two-factor authentication

We’ve added an extra layer of security to your account login experience with a two-factor authentication feature, which can help stop unauthorized access to your account. We will employ this security feature at times when our system detects a potential threat. You also have the option to enable two-factor authentication every time you log in.

What is two-factor authentication?

With two-factor authentication, you will use two different components to log in to your account—your password and a temporary identification code sent via text or phone call. This makes two-factor authentication a more effective way to secure your account access rather than just using a password alone, and it makes it more difficult for criminals to access your accounts.

Enable additional security
  • Log in to your account
  • Choose the profile icon with your initials in the top right corner
  • Select ‘Security preferences’ and expand the ‘Enable 2-step identity verification’ section
  • Enable one of the 2-step verification options to use every time you log in
  • Save your changes

Custom account alerts

Keeps tabs on your account with real-time email and text alerts. Choose the ones you find helpful, and we’ll send you alert notifications when something is happening with your account such as upcoming payments, unusual spending or withdrawals. You can change your preferences at any time.

Set up your alerts
  • Log in to your account
  • Choose the profile icon with your initials in the top right corner
  • Select ‘Communication preferences’
  • From the banking tab scroll down to the ‘Additional alerts’ section and expand ‘Set additional alerts’ to customize your alert options

Paperless statements

Enrolling in paperless statements is a quick and easy way to enhance your financial security. Your sensitive financial information will be no longer be sent through the mail, which can help reduce the chances of identity theft from stolen paper documents. Enroll today to start securely viewing your documents online.

Enroll in paperless statements
  • Log in to your account
  • Choose the profile icon with your initials in the top right corner
  • Select ‘Communication preferences’
  • From the banking tab you will see a ‘Delivery method’ section where you can select your preferred delivery option
View your statements online
  • Log in to your account
  • Select the ‘Statements & docs’ button next to your name on the account summary page

We respect your right to privacy and work hard to protect it

EverBank is dedicated to providing you with a high level of security and privacy when it comes to your personal and financial information. Take a look at the more detailed description of our privacy practices below to see how we collect and share data. If you have additional questions regarding the privacy of your personal information, contact us.

Notice of Online Privacy Practices

This notice describes the privacy practices of EverBank and its subsidiaries and applies to anyone who visits our website. It explains how we may collect information from you digitally and how we protect and use that information.

Consumer privacy notice

The EverBank, NA Consumer Privacy Notice governs how we can use information you provide us. The notice includes the reasons financial companies can share their customers’ personal information, the reasons we choose to share and whether you can limit this sharing.

Web Safety Guarantee

Strong and Secure

We can’t emphasize enough how dedicated we are to making sure you trust us with your money. So we let our guarantee do the talking. Our Web Safety Guarantee provides protection for certain lost or misdirected funds and bill payment fees.x

Help center

When you have security concerns, take action

Use these helpful resources to get in touch or learn more ways to you can keep your information safe and secure.

Information compromised?

Report lost or stolen items immediately.

Checks: 1.888.882.3837
Debit cards: 1.888.882.3837
Credit cards: 1.800.738.2615

Keep tabs on your credit

Periodically reviewing your credit report can help you catch signs of identity theft and fraud. Request a free credit report from one or all of the national credit reporting agencies.

Government protections

See what the federal government is doing to protect your financial identity and privacy.

Login

While we are now EverBank, your accounts continue to be serviced by TIAA at this time. Please log in with your usual credentials.
User ID
Password

Register | Forgot User ID | Forgot Password

Credit Cards

LoanCare

Web Safety Guarantee

Your safety is our priority

Our Web Safety Guarantee adds an extra layer of protection to your online security, so you can bank with peace of mind.x Our guarantee provides 100% protection for any funds in your consumer or business deposit accounts that are lost due to unauthorized Online Use or an EverBank mistake. We also cover fees for late bill payments if your payment doesn’t arrive by the delivery date shown in the online bill payment calendar. To qualify for coverage, you’ll need to:

  • Ensure you (or your employees) keep your online access credentials to yourself. Do not share them with anyone. If you suspect that your username, password, token, security code and/or PIN have been lost or stolen, change them and contact us immediately. At any time you may ask us to disable your password and issue a new one to you.
  • Report any unauthorized access or suspicious activity on your account immediately.
  • You (or your employees) should never leave computers or mobile devices unattended while logged in to the EverBank website; always log out completely when finished. To notify EverBank of unauthorized activity, please call Client Solutions or Business Support.

For more information about your responsibilities, please see the Web Safety Guarantee section in the Terms and Conditions booklet that pertains to you.