Updates to Cooperative.com Registration Process; Social Engineering Protection Tips

Efforts by bad actors continue to evolve and become more sophisticated. NRECA takes the protection of its member co-op and benefit plan participant data very seriously and continuously evaluates industry standards and our associated policies to ensure the continued safety of this data.

As part of these efforts, this week we are updating the cooperative.com registration process to include an additional step designed to aid in verifying the identity of the individual creating an online account.

During the registration process, the individual will be required to enter a code sent to their primary phone number on file with NRECA. This phone number will be provided in the participant’s record submitted by their benefits administrator upon enrollment. The code will be sent via text if the number on file is a mobile device or via an automated call if the number is a landline. If the phone number needs to be updated for purposes of registration, NRECA will direct the caller to the benefits administrator to verify the individual’s identity and update their record on the NRECA Employee Benefits website.* To do so, click on the “Employees” megamenu and “Update Address & Contact Info” option.

To aid your co-op’s employees with the registration process, please share the cooperative.com registration guide. Additionally, you may wish to consider evaluating your co-op’s identification verification procedures to include these industry best practices when receiving requests to change or update email addresses, phone numbers, mailing addresses, or login credentials. Specifically, procedures should incorporate enhanced verification if staff note:

• Unusual activity involving dormant or rarely accessed accounts;
• A caller attempting to act on behalf of another individual without proper authorization;
• Callers who cannot confidently verify required identifying information;
• Multiple failed registration, login, or verification attempts;
• Inconsistencies between the caller’s information and information on file; or
• Urgent or pressured requests to bypass standard procedures.

If these or other red flags are identified, please pause the transaction, do not make changes to the participant record or account and pursue further identity validation steps.

We appreciate your continued diligence and partnership as we work to protect participant information and strengthen safeguards around the NRECA Employee Benefits website and benefits-related processes.

If you or your participants have any questions about the registration process or notice unusual account activity, please call the Member Contact Center at 866.673.2299. Representatives are available Monday through Friday 7 a.m. to 7 p.m., Central time.

*Benefits administrators are unable to update a participant’s mobile phone number. If this number was entered incorrectly, benefits administrators should contact NRECA’s Member Contact Center for assistance. Upon successfully creating their account, participants can update their contact information online.