The Bottom Line
Small business is important to Central Oregon, and to Mid Oregon. Find tips and resources for business, and information about Mid Oregon’s commercial services and business members.

Kickstart Your Financial Health
As the new year begins, take this opportunity to conduct a financial checkup. Just as we prioritize our health, we should also invest time in our financial well-being.
A solid financial plan gives you direction and measures your progress. Reviewing last year’s financial goals can help you see what was effective and what needs to change for better outcomes this year.
Below are a few tips to kickstart your financial health:
Start with a Savings Goal: To reach optimum financial health, start by setting a clear savings goal. Mid Oregon’s Saver’s Club Certificate is the perfect tool to help you save for your goals. Don’t forget you can grow your savings by automating deposits into your savings account and consistently contributing—even small amounts can add up over time.
Track your spending habits: This awareness is the first step in making smarter financial choices. Mid Oregon’s Digital Banking offers free Financial Checkups to help you assess your financial situation and make informed decisions.
Know your score: Take advantage of Mid Oregon’s free My Credit Score located in Digital Banking and receive anytime, anywhere access to your credit score, as well as key information from your credit report. Reviewing your credit report and score is essential to your 2025 financial health.
Expand your financial intelligence: Learn about budgeting, investing, and smart debt management. Visit Mid Oregon’s blog at blog.midoregon.com for more informative articles. You can also increase your financial knowledge by attending our educational workshops held throughout the year.
By taking proactive steps to assess and improve your financial health, you can enter the new year feeling confident and empowered. Regardless of your financial situation, your Mid Oregon team is here to help you every step of the way—please stop by, call, or visit us at midoregon.com.

Best Practices to Fend off Phishers and ID Thieves
Identity thieves seem to be around every corner these days. The can grab your info and cause a lot of harm quickly. With the rapid rate of change in the world of technology, how does the average person keep up and protect themselves?
Managing your personal sensitive data is exhausting these days but there are some things you can do as a matter of practice to keep yourself safe. Like getting ready for your day in the morning, these things should become habit.
The top three things you should be doing for your cybersecurity practice are:
- Two-factor Authentication
- Freezing credit/adding credit alerts
- Never “Copy & Paste” your passwords across accounts
You can do a lot of little things that will add up as a stronger barrier between you and the cybercriminals that want to do you harm. Here are some additional ‘habits’ that you can add to your cybersafety routine:
Phishing: If you didn’t initiate, don’t take the bate
Beware of absolutely every contact coming your way in a conversation you didn’t start. Anytime someone pops into you inbox, be skeptical. No matter who the message claims to be from. Whether it comes in the form of a phone call, an email, a text message, or carrier pigeon. If you didn’t initiate it, don’t click. Go to the source and verify.
Passkeys: new and easy
The newest tool in our cybersecurity toolkit is the Passkey. Passkeys are a way to log into an account that is not a password. Passkeys are designed to give users an option to using a passwordless sign-in. They are easy to use but must be an option given by the entity you are signing in to.
Biometrics (with caution)
Biometrics is a tool that used a person’s physical or biological characteristics, such as a finger print or face, to verify identity. Used as “one more layer” of security, it can be a useful tool to prevent breaches. However, the FTC (Federal Trade Commission) has warned that biometric information can be misused. Keep in mind, biometrics used for surveillance is much different than when used for security.
Mid Oregon provides a valuable resource for enhancing your online security. We invite you to explore our Stickley on Security section within the Security and Fraud Center. This platform offers timely articles covering a range of digital security topics, along with informative videos. Additionally, you can subscribe to receive news and alerts via email, ensuring you stay informed with the latest updates to keep your financial accounts secure in the digital landscape.
Read additional blog articles on cyber security and fraud.
As a reminder, Mid Oregon will never initiate a call asking for personal or account information via phone, text, or email.

What You See Is Not What You Get; Phishing Attack Skips Email Security Measures
Four minute read time.
It’s no surprise that phishing is still prevalent in the cyber world. In fact, it remains the top way malware gets onto devices, and it still excels at getting people to give up their personal information. Phishing scams aim to deceive individuals into sharing sensitive information such as passwords, payment card details, or all other kinds of personal data. Some of this data you wouldn’t even think is all that useful to someone trying to scam you.
The fact is, any piece of information a cybercriminal has about you can be put to use in some sort of scam. That’s why they are so persistent at attempting to get to all the information possible. And as we are staying on top of the attacks better now, they are also getting better at fooling us.
A New Phishing Scam
Most often, we see links in email or in text messages that encourage us to click them. However, in a recent scam, Check Point security is warning about the use of images. It’s quite clever because we typically can spot phishing by finding errors in grammar, graphics, or use of the language. But images are not looked at. In this particular scam, the image may appear to come from a big retailer, such as Amazon or Target, promising special perks.
Here are some valuable tips to avoid falling victim to phishing scams:
Be Vigilant and Verify
Be skeptical of all unsolicited emails, messages, or phone calls asking you to click a link or image or ask for personal information. Legitimate organizations typically do not request sensitive data via email or other insecure channels. Even if they do, back out of the request and log into your accounts to check for these notifications rather than clicking something in a message.
Verify the authenticity of the sender by confirming email addresses, domain names, and website URLs. Cross-reference any suspicious requests or offers by contacting the organization directly using their official contact information. Don’t reply directly to, or click on any links, in one of these messages. The hackers are waiting for you on the other end.
Strengthen Password Security
Create strong, unique passwords for each of your accounts and change them regularly. Enable two-factor authentication (2FA) whenever available, as it adds an extra layer of protection by requiring a secondary verification method, such as a code sent to your phone. However, if you have the option to use a hardware key, an authenticator app, or key fob that generates random codes, choose one of those over email or text codes.
Educate Yourself
Stay informed about the latest phishing techniques and scams. Be cautious of common phishing red flags; such as poor grammar, urgent requests for personal information, or offers that seem too good to be true. These do still exist and aren’t slowing down.
Three well-known phishing scams
There are numerous phishing scams and endless versions of many of them. Following are a few that come around on a regular basis, albeit in various forms.
“Nigerian Prince” or Advance Fee Fraud
This scam typically involves an email from someone claiming to be a wealthy individual or a government representative seeking assistance in transferring funds. The victim is enticed to provide their personal information or financial details in exchange for a promised share of the money.

PayPal or Financial Institution Impersonation
Scammers send emails impersonating well-known payment processors or banks, requesting users to update their account information or confirm suspicious transactions. Victims are directed to fraudulent websites that collect their login credentials and sensitive data.

Phishing Emails from Tech Companies
Cybercriminals send emails pretending to be from tech giants like Google or Microsoft, informing users of compromised accounts or the need to verify their information. These emails often contain links to fake login pages designed to harvest login credentials.

Never get in a rush. It’s never so urgent that you can’t take a bit of time to verify if it’s a real request. Actual urgent situations require a phone call to you or 911, not an email message. If it’s really that important, they won’t take time to wait on an email reply. Take the time you need to make sure you’re not getting snagged by a phishing hook.
Mid Oregon provides a valuable resource for enhancing your online security. We invite you to explore our Stickley on Security section within the Security and Fraud Center. This platform offers timely articles covering a range of digital security topics, along with informative videos. Additionally, you can subscribe to receive news and alerts via email, ensuring you stay informed with the latest updates to keep your financial accounts secure in the digital landscape.
Read additional blog articles on cyber security and fraud.
As a reminder, Mid Oregon will never initiate a call asking for personal or account information via phone, text, or email.
Article provided by Stickley on Security