The Security Center

Online safety tips

What should you be aware of when it comes to online safety? Here are some basics to consider.

Avoid E-mail Fraud

E-mail can be a source of danger. Many Internet scams today involve e-mail messages that appear to come from a trusted source, but are not trustworthy. Additionally, e-mail attachments can be harmful because they can contain viruses.

How do I know if the e-mail is a fake?

• The e-mail claims to be from TD AMERITRADE requesting that you change your password by clicking on a link. It may even threaten to suspend your account if you do not do this.
• The e-mail claims to be from a person in authority requesting a copy of a password file, UserId, Social Security number, or banking information.
• The e-mail asks you to verify your TD AMERITRADE account information by clicking on a link and filling in a form.
• Right click on the link in the e-mail and select properties. If the section under URL Address contains an '@' symbol or does not appear to be a tdameritrade.com address then it is likely fraudulent.

  Examples of this are below (try right hovering your mouse over the link and check the Web address that appears)

  TDAmeritrade.com

  TdAmeritrade.com

Here are some ways to protect yourself from e-mail fraud:

• Do not reply to any e-mail asking for personal information
• Use antivirus software and keep it updated
• Scan all attachments with a virus detection program before downloading.
• Use spam filters to weed out spam e-mail, and cut down the number of possible viruses sent to your inbox. Look for spam settings in your options or preferences.
• Do not visit links sent by e-mail as these can lead to "spoof" sites--sites made to look legitimate and designed to collect your personal information. One way to check this is to re-enter the URL into your browser, instead of clicking the link.
• Do not open or reply to spam e-mail which can prompt more spam to be sent to your inbox.
• Turn off the "preview pane" as this allows some viruses to be executed even if you never actually open the e-mail.
• Report suspicious e-mail to a TD AMERITRADE client services representative.

Create Secure Passwords

Choosing your password well and keeping it a secret are key steps to safeguarding all of your online transactions. To create a password that is more difficult to guess, use a combination of letters and numbers for passwords you create (i.e. Kr1st0pHer, 4funcallC3po, Il9vemyd1g). Certain passwords are easier to compromise, so try to avoid these common pitfalls by creating secure passwords.

• Don't base your password on personal information
• Don't use a word found in the dictionary as your password.
• Avoid substituting a zero for the letter "o" and vice versa.
• Don't use your UserID or logon name as your password.
• Don't use obvious passwords like "test" or "password".
• Don't use simple number sequences like "12345" or a series of duplicate numbers like "11111".
• Don't keep the same password longer than 30 days.

TD AMERITRADE does not permit the use of special characters (e.g. #, *, ^, etc.) in passwords.

Check the Security Setting

A Secure Socket Layer (SSL) is an additional layer of security that many sites use. You can check whether the site you are on has an SSL in effect by checking for two things:

• Look at the Web site address. If you are on a secure site, the address will include https:// instead of http://. The extra "s" stands for secure.
• Look at the bottom of your browser for a lock or key icon. This indicates a secure connection. Each secure site comes with a digital certificate, establishing its legitimacy. To view the certificate, double click on the lock or key.