Security Center

Positive Pay is an automated monitoring service that helps detect altered or unauthorized payments by comparing the checks or ACH items you issue against items presented to Chain Bridge Bank, N.A. Any mismatches appear in your online dashboard for review before posting.

Available Options (complimentary for commercial clients)

These services add an important layer of protection but require timely client review of exception items to be effective. They are offered at no charge to commercial clients.

To enroll or adjust your parameters, contact your Relationship Officer or Treasury-Management professional.

Dual Control and Approval Levels

For outgoing wires, ACH payments, and Bill Pay transactions, Chain Bridge Bank, N.A. strongly recommends dual control — one user initiates a transaction and another independently reviews and approves it. The Treasury-Management platform supports multi-level approvals (up to four) for organizations that require additional oversight or segregation of duties.

Paper checks remain a familiar payment method but carry increased risk of mail theft, alteration, and counterfeiting. Electronic payment options — such as ACH transfers, wire transfers, and online bill pay — offer stronger authentication and tracking features, yet no channel is entirely risk-free.

When Using Any Electronic Channel

• Assign unique credentials to each authorized user; never share logins or tokens.
• Implement dual control or multi-level approvals for all outgoing payments.
• Verify new or changed payment instructions using strong-authentication methods such as passkeys, authenticator apps, or FIDO2 security keys — never by text message or automated call.
• Reconcile transactions daily, investigate exceptions promptly, and report suspicious activity to the Bank without delay.

Protecting User Credentials

Even with MFA, compromised credentials remain a leading cause of unauthorized access.

To safeguard your treasury-management credentials:

• Create long, unique passphrases rather than short, complex passwords.
• Do not reuse or share passwords across systems or via email or chat.
• Store credentials securely in an approved password manager or vault; never in browsers.
• Assign individual user IDs tied to job roles.
• Change passwords promptly when compromise is suspected or after employee departure.
• Enable MFA, passkeys, or FIDO2 keys where supported — these are far stronger than passwords alone.
• Never approve a payment or code request unless you initiated the transaction.

Note: The Bank’s security framework and controls are based on federal guidance and industry standards. Each client is responsible for maintaining appropriate internal controls.

Chain Bridge Bank, N.A. requires MFA for online and mobile banking sign-in and for initiating wires and ACH transactions through Treasury Management. MFA adds another proof of identity beyond a password to confirm that only authorized users can transmit payment instructions.

Best Practices

• Use authenticator apps, passkeys, or FIDO2 security keys for every login and payment approval.
• Avoid text (SMS) or voice codes; they can be intercepted or spoofed.
• Never share codes or approval requests with anyone — even if they claim to represent the Bank.
• Approve requests only when you initiate the transaction.
• Maintain secure devices: keep software updated and lock screens when unattended.

Note: MFA is one layer of defense. Clients remain responsible for maintaining credential-protection and internal-control practices appropriate to their risk environment.

Attackers use email (phishing), text messages (smishing), and phone spoofing to impersonate banks or trusted individuals. Fraudsters often spoof legitimate bank numbers —including Chain Bridge Bank, N.A.’s own — and impersonate employees. Caller ID cannot be relied upon.

These scams create urgency or fear to trick victims into revealing credentials or approving fraudulent transactions.

Common Warning Signs

• A call or message claiming to be from the Bank demanding immediate action or secrecy.
• Slightly altered email addresses or domain names.
• Unfamiliar payment instructions or last-minute account-number changes.
• Requests for credentials, codes, or remote access.
• Unexpected attachments, links, or QR codes.

If You Suspect Fraud

• Do not click links or download attachments. Hover to verify the destination.
• Do not trust caller ID. Hang up immediately.
• Verify independently by calling 703-748-2005 or using the official Get in Touch page on chainbridgebank.com.
• Preserve evidence for your IT team and notify the Bank immediately.

Taking proactive steps now helps reduce exposure to payment fraud and credential compromise.

Immediate Actions

• Activate Check and ACH Positive Pay with Payee Name Verification.
• Use electronic payments wisely and confirm payment instructions independently.
• Require dual control for all outgoing payments.
• Use strong authentication — authenticator apps, passkeys, or FIDO2 keys.
• Protect credentials and remove access promptly when roles change.
• Educate staff about phishing, smishing, and spoofing schemes.
• Monitor and reconcile accounts daily.
• Review cyber-insurance coverage and understand what losses it does or does not cover.

Most cyber incidents exploit social engineering. The Bank employs layered security controls to deter unauthorized activity, but no system is foolproof. Clients are responsible for protecting devices, credentials, and internal processes.

This information is provided for educational awareness only and does not constitute legal, financial, or insurance advice.