Security Center

How Sascu Protects Your Accounts

security operates on a defense-in-depth model — multiple independent protections that work together so no single vulnerability can compromise your accounts.

At the front line, Sascu requires strong authentication for every login attempt. Every online banking session begins with a username and password verification, then proceeds to a secondary identity check — either a one-time code delivered to your registered mobile device, a push notification via the mobile app, or biometric confirmation using your device's fingerprint or facial recognition sensor. This multi-factor approach means that even if someone obtains your password, they cannot access your account without also possessing your authenticated device.

Sascu encrypts all data transmitted between your browser or mobile app and Sascu servers using 256-bit SSL/TLS encryption — the same standard used by government agencies and major financial institutions. Data stored within Sascu systems is protected by additional encryption at rest, meaning account records, transaction histories, and personal identifying information remain unreadable even if physical storage media is compromised. Sascu undergoes annual independent security audits and regular penetration testing by third-party cybersecurity firms to verify that these controls perform as designed.

Behind the scenes, fraud monitoring systems analyze transaction patterns continuously, looking for anomalies that may indicate unauthorized activity. Sudden large withdrawals, purchases in distant locations, repeated failed login attempts, or transactions that deviate from your established patterns trigger immediate review by the fraud team. members can strengthen these protections by configuring custom account alerts — notifications sent by text, email, or push message whenever a transaction exceeds a dollar amount you choose, when your balance drops below a specified threshold, or when a new device attempts to access your account.

Sascu Security Features

Every account includes these security protections at no additional cost.

Sascu Data Privacy Practices

Sascu treats member information as confidential — we do not sell personal data or share it with unaffiliated third parties for marketing purposes.

Sascu collects only the information necessary to provide financial services, process transactions, and comply with federal regulations. Member data — including account balances, transaction records, Social Security numbers, and contact information — is stored on secured servers with access limited to authorized Sascu personnel whose job functions require that access. employees undergo background checks before hire and complete annual privacy and security training.

Sascu shares member information with third parties only in specific, limited circumstances: to process transactions (such as wire transfers or check clearing), to comply with legal requirements (such as court orders or regulatory examinations), to report to credit bureaus as permitted by law, and to service providers who perform essential functions under contract with Sascu. These service providers are contractually bound to maintain the confidentiality and security of Sascu member data and are prohibited from using it for any purpose beyond the contracted service. Sascu does not sell, rent, or trade member personal information to any outside organization.

Members can review and update their privacy preferences through the online banking settings panel. Annual privacy notices are delivered to all members describing current data practices and member rights under federal and state law. These protections are governed by regulations enforced by the Consumer Financial Protection Bureau and federal credit union privacy rules.

Recognizing and Reporting Sascu Fraud

Knowing how to identify suspicious communications helps members avoid scams that target credit union account holders.

Sascu will never contact you by phone, email, or text message to ask for your online banking password, full Social Security number, debit card PIN, or the one-time authentication code sent to your device. Any unsolicited communication requesting this information — even if it appears to come from a Sascu phone number or uses Sascu branding — is fraudulent. Scammers can spoof caller ID and create convincing fake emails; when in doubt, hang up and call Sascu directly at (555) 234-6789 using the number on the back of your debit card.

If you suspect unauthorized activity on your account, report it immediately by calling member services at (555) 234-6789 or by sending a secure message through the online banking portal. fraud specialists are available during business hours to investigate and help you secure your account. Under federal regulations, your liability for unauthorized debit card transactions is limited to $50 if you report the loss within two business days of discovering it — and many account types carry zero-liability protection for unauthorized charges.