Dear Sterling Bank Customer:

Do not respond to any unsolicited request for any personal information such as credit card number, check/debit card number/pin or account numbers. Below are the various ways that criminals are committing fraud.

PHISHING/SMSISHING refers to the use of e-mail and/or text messages in an attempt to obtain personal, confidential information, such as Online Banking usernames, passwords, account information, credit card numbers or check/debit card numbers and PINs. These fraudulent e-mails and cell phone text messages may look as if they came from Sterling or another bank. Some of these e-mails contain links to fake websites that mimic the Sterling or other bank Websites. Other e-mails provide a phone number to a person who, when called, asks for this same personal information. This type of fraud scam is commonly referred to as "phishing".

VISHING refers to the use of voicemail messages in an attempt to fraudulently obtain personal and financial information. In these messages, recipients are told that their account at a particular bank has been deactivated and are asked to call a specific telephone number, where a recorded message gives instructions to leave your name and credit card number. We advise that you do not call, or leave a message.

WHAT TO DO IF YOU RECEIVE ATTEMPTS TO OBTAIN INFORMATION
Sterling Bank will never ask for such information in an unsolicited e-mail request, phone call or by mail. Never provide personal information, including bank account number, online banking password, Social Security number, check/debit card or credit card number in response to an unsolicited request.

If you receive an e-mail or any other unsolicited communication that claims to be from Sterling Bank and requests personal or business banking information, it is a fraud. Do not respond, do not click on any links provided, and do not call any phone numbers. Sterling Bank will never use an unsolicited e-mail request this information. Please forward any such e-mails to infosec@banksterling.com.

HOW TO RECOGNIZE A SCAM
The following are some suggestions to help you recognize various scams:

• Be suspicious of any urgent requests for personal information for a security audit or survey or which contains threats to close your account.
  
• Be suspicious of unsolicited requests for Online Banking username(s), password(s), account information, credit card number (s) or check/debit card numbers and PINs.
  
• Be suspicious of requests to share personal and financial information.
• Never use links in an unsolicited e-mail to access a web page.
• Do not fill out forms in e-mail messages asking for personal financial information.
• Regularly check your online account and your bank, credit and debit card statements to make sure all transactions are legitimate.

If you have questions about inquiries or requests pretending to be from Sterling Bank, please call 888-777-8735 or your Sterling Banking Center.

Thank you.