Security Verification Codes

Learn when to expect a passcode from BECU, how to use them with our systems and representatives, and how to protect yourself from scammers trying to get your code.

How Security Verification Works

You may receive a unique code by email or text message when certain conditions are met, such as logging in to your Online Banking account. To verify your identity, you need to provide the passcode before it expires.

Because this code is sent directly to your email address or phone number, you should be the only one who has access to it. This is what make OTPs an effective security feature. Like a key in a door, when used correctly the code “unlocks” whatever you are attempting to access.

We will never contact you and ask for a one-time passcode. If someone calls you and asks you to share your one-time passcode with them, do not respond, even if they say they are from BECU. End the call immediately. If you believe the criminal has access to your BECU accounts, report it to us immediately at 800-233-2328.

When To Expect Security Verification Code Requests from BECU Systems

Sensitive digital banking activities that might trigger an OTP from a BECU system include:

Logging in to Online Banking
Activating cards in your digital wallet
Changing Zelle^® settings, including enrollment
Modifying debit card settings in Online Banking
Opening an encrypted email from BECU
Changing your password
Requesting a business online wire
Setting up Business Bill Pay
Making purchases online with BECU debit or credit cards

When To Expect Security Verification Code Requests from BECU Representatives

BECU representatives may send you a one-time passcode and ask you to read it back, but only when you contact us to initiate sensitive account activity, like changing your ATM access limits or wiring large sums. The OTP helps confirm your identity before proceeding with your request. This can happen when you call us, visit a BECU location, meet with Video Banking consultants or message us in Online Banking or the mobile app.

We will never contact you and ask for an OTP.

Member-initiated activities where a BECU representative might send and verify a one-time passcode include:

Some video banking interactions
A high-risk transaction
Wire transfers
Limit increases and decreases
A note on your account that warns the representative about previous fraud attempts, suspicious activity, or a failed verification request

Security Verification Scams

Unfortunately, many scams involve criminals convincing their targets to share one-time passcodes. The tactics they use can be convincing and appear genuine at first. They might pose as employees from our Fraud Department or call from a “spoofed” phone number that makes it look like BECU is calling. That's why it's important to learn the differences between legitimate requests made by BECU and fake requests made by scammers.

If someone contacts you and attempts to obtain your one-time passcode, do not respond. If you believe the criminal has access to your BECU accounts, report it to us immediately at 800-233-2328.

Learn more about social engineering scams.

Recognizing Fake Requests

We will never call, email or text you and ask for a one-time passcode, and we will never ask you to send your one-time passcode to us using a text message or third-party messaging app. The only time BECU systems or representatives may ask for a one-time passcode is when you initiate the contact on a sensitive request.

Here are some other signs that a request might be fake:

You weren't expecting to receive a security verification request.
The request asks you to hurry or pressures you with consequences.
The request contains grammatical errors, typos or strange word choices.
The request is accompanied by requests for other personal information, not just your one-time passcode.
The request came from a suspicious telephone number.

Safeguarding Against Fake Security Code Requests

If you receive a suspicious request, do not respond. If you're unsure whether the request is legitimate, you should verify directly with BECU by calling 800-233-2328.

Never share your one-time passcode with anyone unless you're sure the request is from BECU, and not a scammer posing as BECU.
Never call phone numbers or click links provided in unsolicited and other suspicious messages.
Examine website addresses (URLs) and websites meticulously to ensure you're in the right place before entering your one-time passcode.
Look for an "s" in the https:// portion of the web address. An unsecure website will not have the "s" and may not be safe to use.

Report Security Concerns

During regular business hours: Call 800-233-2328, Monday-Friday, 7 a.m. to 7 p.m., Saturday, 9 a.m. to 1 p.m. Pacific Time. For TTY support, dial 711 to access the Telecommunications Relay Service (TRS).
Send a message in Online Banking or the mobile app. Monday-Friday, 7 a.m. to 7 p.m., Saturday-Sunday, 9 a.m. to 6 p.m. Pacific Time.
BECU debit card after hours: Call 888-241-2510 or 909-941-1398 (collect outside U.S.).
BECU credit card after hours: Call 866-820-2999. For credit card TTY support 24/7, call 888-918-7323.