CAFT Best Practices
Enhancing Cyber Security
Enhancing Cyber Security
Customer Automated Funds Transfer, or CAFT, is a web-based platform compatible with most accounting software. It empowers businesses to manage payments efficiently, whether through direct deposits like payroll and accounts payable, or the collection of payments, including loans, accounts receivables, strata/condo fees, donations, and club fees/dues.
Key Points to Know: As CAFT operates in a web-based environment, it's important to be aware of potential cybersecurity risks, particularly if the computer system of your business or employees becomes compromised.
Here's what to do if you observe unusual activity:
- Check the CAFT Activity Log and History File information.
- Contact your financial institution for guidance.
- Change your CAFT password immediately.
- If you suspect a compromise, follow your company's security procedures.
For further information and support, please refer to:
- Your financial institution
- Get Cyber Safe: www.getcybersafe.gc.ca
- Canadian Anti-Fraud Centre: www.antifraudcentre-centreantifraude.ca
Stay vigilant and follow these best practices to safeguard your CAFT transactions and protect your business from cyber threats.
As a CAFT user, you have a vital role in maintaining the security and integrity of your financial transactions. Ensure you:
- Safeguard your passwords and User IDs.
- Manage CAFT transactions diligently.
- Verify file totals before processing.
- Release files promptly.
- Regularly review CAFT email notifications.
- Monitor the Activity Log and History File.
- Verify all NAFT reports.
- Confirm account settlements with the settlement register (AFTR0010).
- Keep your financial institution informed of any changes to Originator information.
- Report any unusual activity to your financial institution immediately.
- Check the CAFT Activity Log and History File information.
- Contact your financial institution.
- Change your CAFT password.
- If you have been compromised, follow the security procedures of your company.
You can take proactive steps to prevent transaction errors, theft, or fraud. Consider:
- Learning about cyber security.
- Implementing internal controls, such as segregation of duties, dual authorization, and setting CAFT limits.
- Reviewing transaction files for accuracy.
- Monitoring CAFT email notifications.
- Reconciling your banking transactions daily.
- Discussing Social Engineering coverage with your insurance provider.
Here are more recommendations to fortify your cyber security:
- Create strong passwords and never share your User ID or password.
- Use 2-factor authentication wherever possible.
- Lock or log out of your computer when unattended.
- Avoid accessing sensitive financial information using open/free Wi-Fi networks.
- Refrain from clicking on links or attachments from unexpected emails.
- Always use the login page directly on your browser to access your account or online service.
- Limit administrative rights on users' workstations to prevent malware downloads.
- Keep your computer's virus protection and security software up to date.
- Familiarize yourself with your institution's account agreement and your business's liability coverage for fraud.