Spot the scams
No genuine message from us will ever ask for your full password or a security code; treat any that does as a scam and contact us directly.
The UMB Direct security center provides commercial organizations with the tools, controls, and best practices necessary to defend corporate deposits and maintain strict financial data integrity.
Select RSA soft-token authentication or hardware token support under your administrative profile security preferences.
Turn on automated alerts for wire transfers, balance changes, login verification events, and profile updates.
Set your preferred automatic session timeout duration and verify your list of recognized trusted devices.
Send transaction reviews or report suspicious activity through secure messaging to confirm safe delivery.
The report is free at intervals, and disputes carry a fixed investigation deadline.
Deposit-account behaviour is reported to specialty agencies that most people have never heard of.
This is the mechanic behind overpayment and "send back the difference" scams: the money looks real, is spent, and the reversal lands on the depositor.
Give an unfamiliar check time to come back before relying on the money.
You are entitled to know why a dispute was refused and to see what the decision rested on.
A notice can be given verbally, but written confirmation may be required and a written record is worth keeping in any case.
Where the investigation runs long, provisional credit has to be given so the disputed money is back in the account while the work continues.
Beyond the final deadline the cap disappears, which is the strongest reason to read statements.
Access protections at UMB Direct differ by product and channel — use published UMB Direct support paths for the latest guidance.
Report promptly after noticing the loss and the exposure stays at the lowest tier.
Waiting longer moves the cap up a band.
Reminders
No genuine message from us will ever ask for your full password or a security code; treat any that does as a scam and contact us directly.
Using a long, unique passphrase for online banking — and not reusing it anywhere else — is one of the best protections you have.
A new year is a natural time to look over recurring charges and cancel anything you no longer use.
Year-end donations are worth documenting — save the receipt and verify the charity is legitimate first.