Protect your Personal and Financial Information

Stay up to date on different kinds of fraud – and fraud prevention tips – so you can help protect your personal and financial information. 

See How M&T Protects You >

Understanding Common Scams

Learn about recent scams on the Federal Trade Commission website.

Scammers look to gain access to your sensitive account information during times of heightened fear and confusion. Most recently, they are using messaging associated with the COVID-19 pandemic as a lure to solicit your account information. Some examples include:

  • Unemployment Fraud - Recent scams involve false claims for unemployment benefits using personal information of individuals who have not filed claims.
  • Fake Websites – Cyberthieves are creating websites that collect your personal information under the guise of providing you with important Coronavirus updates.
  • Government and Health Organization Emails – Scammers disguising themselves as organizations, like Centers for Disease Control (CDC) and World Health Organization (WHO), are contacting individuals by email regarding a range of topics such as Coronavirus cures, account validation for stimulus checks, and attachments touted to be necessary paperwork for unemployment benefits, or confirmation for stimulus payments.

As scammers become more sophisticated, it is important to understand the signs of fraud and best security practices. The most chosen delivery method of these scams is through Phishing: emails, texts, or phone calls claiming to be from reputable sources tricking you to fall victim to their scams.

These fraud techniques are designed to mislead you into providing personal information such as:

  • Account numbers
  • PINs
  • Social Security numbers
  • Login credentials (username and password)
  • Answers to security questions (your mother’s maiden name, for example)

Recognizing Official M&T Bank Communications

Please be aware, M&T will never notify you over the phone, through email, or text message to:

  • Tell you that your account has been “locked” or “restricted"
  • Ask you to "verify" or "confirm" your personal information
  • Request your PIN, passcode, account details, and/or your Social Security Number

It is M&T Policy that we do NOT initiate a request for personal information via email. Unless you initiate the contact or we are completing an application for you, M&T will NOT request personal information.

If you get these or similar requests from any organization, please do not respond.

Recognizing a Scam

Keep an eye out for deceptive text messages and emails, that appear to be from a trustworthy source. Help protect yourself against fraud with these simple DOs and DON’Ts:

  DOs:

  DON’Ts:

  • Check the sender’s name for familiarity and authenticity. Does the email address or phone number match who the sender is claiming to be? 
  • Never provide any account or login credentials to unsolicited emails, texts, or phone calls.
  • Check for grammatical errors in emails and text messages. Does the message contain misspelled names or words?  
  • Never click on links or open attachments within electronic communications when in doubt or if they appear to be suspicious.
  • Check for a threatening message. Does the message warn you that your account has been hacked or locked? Does it claim that your personal information is at stake?
 
  • Check for suspicious attachments and refrain from opening. Does the message contain an attachment that you didn’t request?
 

What to Do if You Suspect Fraud

Forward any suspicious emails to phishing@mtb.com that appear to be from M&T and request that you click on a link to enter your login credentials or personal information. If you are in doubt, delete the text, forward the email to us, or hang up the call.

If you believe you have been a victim of fraud related to your M&T accounts, notify us immediately at 1-800-724-2440 (24 hours a day, 7 days a week), so we can take action to help you.

Be Proactive

To help protect your personal and financial information, here are some preventive tips that you can start implementing today:

  • Review your password strength. It is recommended to use a different username and password for your bank in the event one of your other online accounts is hacked. 
  • Make sure your personal information, like your mobile phone number and email address, is up to date so that M&T can quickly reach you if we notice suspicious activity.
  • Learn about EZShield for your personal accounts, that can help protect your identity and receive expert protection tips, timely breach news, and fraud alerts.
  • Stay notified and secure with M&T Alerts through M&T Online and Mobile Banking. Track balances and get warnings about personal account activity via email, text, or app notification. 
EZShield Identity Protection for M&T Bank customers is a product offered and serviced by EZShield, Inc. through their arrangement with Deluxe Enterprise Operations LLC. M&T Bank is not legally affiliated with Deluxe Enterprise Operations LLC or EZShield, Inc.; and M&T Bank makes no representations or warranties as to their products, privacy policies or security policies. The product attributes and/or pricing may be different than other products offered by Deluxe Enterprise Operations LLC and/or EZShield, Inc. M&T Bank may receive compensation from Deluxe Enterprise Operations LLC and/or EZShield, Inc. regarding M&T customers who participate in this service.
Suspicious activity alerts notify customers of certain potentially fraudulent activity on their M&T Card. M&T Bank is not liable for any losses customers may incur due to an alert not being delivered. Alerts are designed to be a helpful account management tool, but they do not identify all potential fraudulent activity and are not a substitute for security and fraud precautions including, but not limited to, verifying statements and being aware of your outstanding payments and available balance. For your protection, "suspicious activity" and "card PIN change" email alerts cannot be disabled.
General Limitations: No one can prevent all identity theft. EZShield Identity Protection is not insurance. Certain terms, conditions and restrictions apply. The services are currently available only to adult individuals who reside in the US or Canada or its territories.
Please refer to the "TERMS AND CONDITIONS OF USE DIRECT TO CONSUMER EZSHIELD SERVICES" for more information.
Unless otherwise specified, all advertised offers and terms and conditions of accounts and services are subject to change at any time without notice. After an account is opened or service begins, it is subject to its features, conditions and terms, which are subject to change at any time in accordance with applicable laws and agreements. Please contact an M&T representative for full details.
EZShield Identity Protection for M&T Bank customers is a product offered and serviced by EZShield, Inc. through their arrangement with Deluxe Enterprise Operations LLC. M&T Bank is not legally affiliated with Deluxe Enterprise Operations LLC or EZShield, Inc.; and M&T Bank makes no representations or warranties as to their products, privacy policies or security policies. The product attributes and/or pricing may be different than other products offered by Deluxe Enterprise Operations LLC and/or EZShield, Inc. M&T Bank may receive compensation from Deluxe Enterprise Operations LLC and/or EZShield, Inc. regarding M&T customers who participate in this service.
Suspicious activity alerts notify customers of certain potentially fraudulent activity on their M&T Card. M&T Bank is not liable for any losses customers may incur due to an alert not being delivered. Alerts are designed to be a helpful account management tool, but they do not identify all potential fraudulent activity and are not a substitute for security and fraud precautions including, but not limited to, verifying statements and being aware of your outstanding payments and available balance. For your protection, "suspicious activity" and "card PIN change" email alerts cannot be disabled.