Banking Sign In
Identity Theft

Identity Theft is the most popular and profitable form of consumer fraud.  It occurs when someone steals your personal information, such as your name, Social Security number, credit card number or other identifying information, to commit fraud or other crimes.  Although there is no way to completely protect yourself from identity theft, being diligent in protecting your private information is a great start.  Check out the links below to get started.

Password Security

What is a STRONG password? Quite simply, password strength is a measure of how easily a password can be guessed, by either humans or computers. A “strong” password contains a combination of letters, numbers, and characters that are difficult to predict. Below are a few links with more detailed recommendations on how to create a secure password.

Elder Financial Exploitation

Unfortunately, elder financial exploitation is a fast-growing form of abuse of seniors and/or adults with disabilities.  And 90% of abusers are family members or trusted persons such as caretakers, neighbors, and friends/acquaintances.  Financial exploitation can take many forms such as taking advantage of joint bank accounts, overcharging for services, grandparent scams, and lottery scams.  The following links provide more information to educate yourself and protect your loved ones.

Online Shopping Safety

From the convenience of one-click ordering to the lure of next-day delivery, online shopping has grown tremendously over the last few years.  But online shopping isn’t just good for consumers and businesses, it’s good business for fraudsters and cyber criminals.  Check out the links below to learn how to protect yourself when shopping online.

Fraud Alerts and Reporting

Stay up-to-date with the most current frauds and scams by visiting the links below.

And use the following sites to report a fraud or scam to the authorities.

Federal Trade Commission:

Illinois Attorney General’s office:

Better Business Bureau:

Out of Band Authentication (OOBA)
What is out of band authentication (OOBA)?

Out-of-band authentication (OOBA) is a form of multifactor authentication. OOBA provides additional verification to validate your identity and/or acknowledge certain online banking transactions through an entirely separate channel.  By requiring the entry of a unique passcode using a mobile or landline telephone, fraud can be prevented if an unauthorized user learns your user ID and password. It also ensures that you are notified if an unauthorized user attempts to access your account information or complete a transaction without your knowledge.

How does OOBA security protect my financial information?

OOBA verifies your identity by using a separate device (i.e., your mobile or landline phone). OOBA provides added security by helping to ensure that even if a fraudulent user gains all login credentials to your online banking account, a transaction cannot be completed without access to your phone.

How will OOBA contact me?

While creating your online banking profile, you were asked to enter your device and phone number. When you attempt to log in to digital banking or perform a transaction that requires additional verification, Farmers & Merchants State Bank will send a message to a device you select.  You may select to receive a phone call, text message, or mobile app push via Duo Mobile.

How does OOBA work?
  1. Sign into digital banking as normal at or through your mobile app.
  2. Now you will be required to begin setup. Click on the “Let’s Get Started” button that appears.
  3. First you will be prompted to add a device to your profile if you haven’t already. Enter your phone number and the nickname of the device you wish to associate with it. (If you set up multiple phone numbers on your profile for OOBA use, the nicknames will display in a drop-down list for easy reference.)
  4. Then it will ask if you’d like a text or phone call to confirm the number you just entered.
  5. Now you will enter the code you received via text or phone call and click “Verify Device” to continue. Never share this code with anyone!
  6. Now every time you login you will be asked to verify your login with either a mobile app push, text, or phone call to a device you select.
How do I use Duo Mobile?
  1. You may enroll in the Duo Mobile app to allow a push notification to be sent to your cell phone to accept/deny login instead of entering a code.  You may skip the Duo Mobile setup by clicking “Skip This Step” at the bottom of the screen, and your set-up will be complete.
  2. Select the “Use Duo Mobile” option.
  3. Click the “Download Mobile App” link.  This will take you to the app store.
  4. Click to allow the link to open, then download and install the Duo Mobile app.
  5. Once installed, go back to the text message and click the “Activate the Duo Mobile App” link to open the Duo Mobile app. Now you will agree to allow push notifications.
  6. Once you agree, you will be asked to name the account, and Farmers & Merchants State Bank will be prefilled.  Save this account name and go back to your F&M app or login.
  7. OOBA and Duo Mobile setup are now complete. You may choose to “Add Another Device” or to “Complete Setup.” If you choose to add another device, you will be prompted to complete setup on that device.
  8. Now every time you log in you will be asked to verify your login with either a mobile app push (if opted into Duo Mobile), text, or phone call.
Can I bypass this security feature?

By selecting “Remember Device” on your login screen, you can bypass the OOBA requirement at login on that device for 60 days.  This selection is device specific, so if you select “Remember Device” on your mobile phone in the app, OOBA will still be required on any other device (i.e., your laptop, etc.).  If you clicked “Remember Device” but would like to again be prompted for a code, please call us to reset your OOBA requirement.