Common use of LIABILITY FOR UNAUTHORIZED USE Clause in Contracts

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has been lost, stolen, or used without your permission, or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize it, if you do not notify us within 60 days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn of the loss or theft of your PIN and/or Password, you can lose no more than $50 if someone used those codes and withdrew the funds without your permission. If you do not contact us as stated above within two (2) business days of when you learned of the loss or theft of those codes, and we can prove that we could have stopped someone from performing other unauthorized transactions, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not make, tell us at once. If you do not tell us within sixty (60) days after the statement or electronic statement information was made available to you, you may not get back any money you lost after the sixty (60) days, if we can prove that we could have stopped someone from taking the money if you had told us in time. If a good reason, such as a hospital stay or a long trip, kept you from telling us, we will extend the time periods

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, I will notify you should know the steps you must take. Tell us AT ONCE immediately if you I believe that your online banking PIN or my User ID and/or Password has been lost, stolen, or used without your permission, or if you believe that become known to an electronic fund transfer has been made without your permission, for example, using information from your checkunauthorized person. Telephoning is the best way of keeping my possible losses to a minimum. If you believe I suggest that an unauthorized electronic fund transfer has been made from your Deposit Accountor payment may have occurred, call or write us at you may require me to sign an affidavit. I could lose all the phone number or address shown at the end money in my deposit account(s) accessed through EagleBank Online Banking (plus my maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if any) if I don't inform you do not notify us that my User ID and/or Password has become known to an unauthorized person. If I tell you within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you I learn of the loss or theft of your PIN and/or Passwordtheft, you I can lose no more than $50 50.00 if someone an unauthorized person used those codes and withdrew the funds my User ID Password to access EagleBank Online Banking without your my permission. If you I do not contact us as stated above tell you within two (2) business banking days of when you after I have learned of the loss or theft of those codesthat my User ID and/or Password has become known to an unauthorized person, and we you can prove that we I could have stopped someone from performing other unauthorized transactionsusing my User ID and/or Password without my permission if I had told you, you I could lose be liable for as much as $500500.00. If your HSA Deposit Account Also, if my statement shows electronic funds transfers you that I did not make, tell us at onceI will notify you immediately. You may require me to provide my complaint in the form of an affidavit. If you I do not tell us you within sixty (60) 60 days after the statement or electronic statement information was made available mailed to me, I could be held responsible for all unauthorized transfers and withdrawals that occurred between the end of the 60-day period and the time I actually notified you, you may not get back any money you lost after and if the sixty (60) days, if we can prove that we transactions could have stopped someone from taking the money been prevented if you had told us in timebeen notified. If a good reason, reason (such as a hospital stay long trip or a long trip, hospital stay) kept you me from telling usyou, we you will extend the time periods.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer You are liable for all authorized use of any Card issued under this agreement regardless of the credit limit or the party using it. You also may be liable for the unauthorized use of your Card as follows: 1) If you tell us after learning of the loss or theft of the Card, your liability for unauthorized transactions using the Visa system is made from your HSA Deposit Account without your authorizationZero; and 2) For Card transactions through a non-Visa network, you should know Visa Commercial Cards, Visa or Plus ATM, or any ATM transactions, or to Cards issued outside the steps you must take. Tell us AT ONCE United States, (a) if you believe that your online banking PIN or Password has been lost, stolen, or used without your permission, or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write tell us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize it, if you do not notify us within 60 days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn after learning of the loss or theft of the Card, your PIN and/or Password, you can lose no more than liability for unauthorized transactions is $50 50.00; (b) if someone used those codes and withdrew the funds without your permission. If you do not contact tell us as stated above within two (2) business days of when you learned of the loss or theft of those codes, days; your liability for unauthorized transactions is $500.00 and we can prove that we could have stopped someone from performing other unauthorized transactions, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not make, tell us at once. If (c) if you do not tell us within sixty (60) days after the statement or electronic statement information was made available to youmailed, you may not get back any money you lost after the sixty (60) days, if we can prove that we could have stopped someone from taking the money if had you had told us in time. The term “unauthorized” does not include any transaction from which you receive a benefit or any transaction by a person with actual, implied, or apparent authority to use the Card. We may require you to provide a written statement regarding claims of unauthorized transactions. If a good reasonwe determine that you have been grossly negligent or fraudulent in the handing of your account or Card, your liability may increase. These rules do not apply to other electronic transfers. You will not be liable for unauthorized use that occurs after you notify us orally at 000.000.0000 or 800.443.6887, or in writing to FAIRWINDS Credit Union, Attn: Payment Services, 0000 X. Xxxxxxx Xxxxx Xxxxxxx, XX 00000. You agree to cooperate with us in the recovery of any amounts advanced based on such as a hospital stay or a long trip, kept you from telling us, we will extend the time periodsunauthorized use.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorizationTelephone Us at once at (000) 000-0000 or (000) 000-0000 or write Us at the address shown in this Agreement if You believe Your Card, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN PIN, or Password has Access Code have been lost, lost or stolen, or used without your permission, or if you You believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit AccountTo report a lost or stolen Visa Debit Card, PIN, Access Code, or any combination thereof after hours, on weekends and holidays, Visa Debit Card Accountholders must call (000) 000-0000. When reporting a lost or write us at stolen Card, PIN, Access Code, or any combination thereof, You must provide all pertinent information including, but not limited to, Your Card number. Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify us within 60 days after you receive your HSA statement or electronic statement informationapplicable). If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” You tell Us within two (2) business days of when you after You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) 2 business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your Visa Debit Card as long as You report the loss or theft of Your Visa Debit Card within 2 business days. If You report such loss or theft after 2 business days, or provide proper notification of other unauthorized Visa Debit Card transactions, Your liability for unauthorized use will not exceed $50.00. • Tell Us Your name and Account number. • Describe the error or the transfer You are unsure about, and explain as clearly as You can why You believe it is an error or why You need more information. • Tell Us the dollar amount of the suspected error. If You tell Us orally, We may require that You send Us Your complaint or question in writing within 10 business days. We will determine whether an error occurred within 10 business days after We hear from You and will correct any error promptly. If We need more time, however, We may take up to 45 days to investigate Your complaint or question. If We decide to do this, We will credit Your Account within 10 business days for the amount You think is in error, so that You will have use of the money during the time it takes Us to complete Our investigation. If We ask You to put Your complaint or question in writing and We do not receive it within 10 business days, We may not credit Your Account. We will tell You the results within three business days after completing Our investigation. If We decide that there was no error, We will send You a written explanation. You may ask for copies of the documents that We used in Our investigation. If We have credited Your Account with funds while investigating an error, We will charge Your Account for those funds if We conclude no error has occurred. In this provision, all references to 10 business days will be 20 business days if Your notice of error involves an electronic fund transfer that occurred within 30 days after the first deposit to Your Account was made and all references to 45 business days will be 90 business days if Your notice of error involves an electronic fund transfer that: (a) was not initiated within a state; (b) resulted from a point- of-sale debit card transaction; or (c) if Your notice of error involves an electronic fund transfer that occurred within 30 days after the first deposit to Your Account was made.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has been lost, stolenTelephone Us at once at (000) 000-0000, or used without your permissionwrite to Us at the address shown in this Agreement if You believe Your Card or PIN have been lost or stolen, or if you believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify applicable). If You tell us within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your VISA Debit Card as long as You report the loss or theft of Your VISA Debit Card within two business days. If You report such loss or theft after two business days, or provide proper notification of other unauthorized VISA Debit Card transactions, Your liability for unauthorized use will not exceed $50.00. These exceptions do not apply to transactions originating at an ATM or from Your gross negligence and/or fraudulent use of Your VISA Debit Card. the address shown in this Agreement as soon as You can, if You think Your statement or receipt is wrong or if You need more information about a transaction listed on the statement or receipt. We must hear from You no later than 60 days after We send You the first statement on which the problem or error appeared.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer You are liable for all authorized use of any Card issued under this agreement regardless of the credit limit or the party using it. You also may be liable for the unauthorized use of your Card as follows: 1) If you tell us after learning of the loss or theft of the Card, your liability for unauthorized transactions using the VISA® system is made from your HSA Deposit Account without your authorizationZero; 2) For Card transactions through a non-VISA® network, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN VISA® Commercial Cards, VISA® or Password has been lost, stolenPlus ATM, or used without your permissionany ATM transactions, or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at to Cards issued outside the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itUnited States, if you do not notify tell us within 60 days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn after learning of the loss or theft of the Card, your PIN and/or Passwordliability for unauthorized transactions is $50.00; 3) For ATM transactions, you can lose no more than your liability for unauthorized transactions is $50 500.00 if someone used those codes and withdrew the funds without your permission. If you do not contact tell us as stated above within two (2) business days of when you learned of the loss or theft of those codes, days; and we can prove that we could have stopped someone from performing other unauthorized transactions, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not make, tell us at once. If 4) if you do not tell us within sixty (60) days after the statement or electronic statement information was made available to youmailed, you may not get back any money you lost after the sixty (60) days, if we can prove that we could have stopped someone from taking the money if had you had told us in time. The term “unauthorized” does not include any transaction from which you receive a benefit or any transaction by a person with actual, implied, or apparent authority to use the Card. We may require you to provide a written statement regarding claims of unauthorized transactions. If a good reasonwe determine that you have been grossly negligent or fraudulent in the handing of your account or Card, your liability may increase. These rules do not apply to other electronic transfers. You will not be liable for unauthorized use that occurs after you notify us orally at 000-000-0000 or 0-000-000-0000, or in writing to FAIRWINDS Credit Union, Attn: Payment Services, 0000 X. Xxxxxxx Xxxxx, Xxxxxxx, XX 00000. You agree to cooperate with us in the recovery of any amounts advanced based on such as a hospital stay or a long trip, kept you from telling us, we will extend the time periodsunauthorized use.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know You will notify the steps you must take. Tell us AT ONCE Bank immediately if you believe that your online banking PIN or User ID, Password has been lostand any other security codes (collectively, stolenthe "Codes") have become known to an unauthorized person, or used without have been lost or stolen. The best way to keep your permission, possible losses to a minimum is to telephone or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your checke-mail the bank (See Section "N"). If you believe suggest that an unauthorized electronic fund bill payment or transfer has been made from may have occurred, we may require you to sign an affidavit concerning the details. Your liability for unauthorized use is limited by Regulation "E" (which implements the Electronic Fund Transfer Act) and Regulation "Z" (which implements the Truth in Lending Act) which provide: 1. You could lose all the money in your Deposit Accountdeposit account(s) accessed through this Banking Service (plus your maximum overdraft line of credit, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize it, any) if you do not notify us within 60 days after you receive inform the Bank that your HSA statement Codes have become known to an unauthorized person or electronic statement informationhave been lost or stolen. If you report a transaction involving your HSA to tell us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when after you learn of the loss or theft of your PIN and/or Passwordtheft, you can lose no more than $50 50.00 if someone used those codes and withdrew the funds an unauthorized person uses your Codes to access this Banking Service without your permission. 2. If you do not contact us as stated above tell the Bank within two (2) business days of when after you have learned of the loss that your Codes have become known to an unauthorized person or theft of those codeshave been lost or stolen, and we can prove that we could have stopped someone from performing other unauthorized transactionsusing your Codes to access this Banking Service without your permission if you had told us, you could lose be liable for as much as $500500.00. 3. If Also, if your HSA Deposit Account statement shows transfers ACCESSonline transactions that you did not make, tell us at onceyou will notify the Bank immediately. We may require you to provide your complaint in the form of an affidavit. If you do not tell us within sixty (60) days after the statement or electronic statement information was made available mailed to youyou at your address as it appears on our account records, you may not get back any money you have lost after the sixty (60) days, days if we the Bank can prove that we could have stopped someone from taking the money if you had told notified us in time. If a good reasonHowever, such as a hospital stay or a long trip, kept you from telling us, do agree to indemnify us against any losses we will extend the time periodssustain related to this Banking Service and not prohibited by Government Regulations.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer You are liable for all authorized use of any Card issued under this agreement regardless of the credit limit or the party using it. You also may be liable for the unauthorized use of your Card as follows: 1) If you tell us after learning of the loss or theft of the Card, your liability for unauthorized transactions using the VISA® system is made from your HSA Deposit Account without your authorizationZero; 2) For Card transactions through a non-VISA® network, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN VISA® Commercial Cards, VISA® or Password has been lost, stolenPlus ATM, or used without your permissionany ATM transactions, or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at to Cards issued outside the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itUnited States, if you do not notify tell us within 60 days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn after learning of the loss or theft of the Card, your PIN and/or Passwordliability for unauthorized transactions is $50.00; 3) For ATM transactions, you can lose no more than $50 your liability for unauthorized transactions is$500.00 if someone used those codes and withdrew the funds without your permission. If you do not contact tell us as stated above within two (2) business days of when you learned of the loss or theft of those codes, days; and we can prove that we could have stopped someone from performing other unauthorized transactions, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not make, tell us at once. If 4) if you do not tell us within sixty (60) days after the statement or electronic statement information was made available to youmailed, you may not get back any money you lost after the sixty (60) days, if we can prove that we could have stopped someone from taking the money if had you had told us in time. The term “unauthorized” does not include any transaction from which you receive a benefit or any transaction by a person with actual, implied, or apparent authority to use the Card. We may require you to provide a written statement regarding claims of unauthorized transactions. If a good reasonwe determine that you have been grossly negligent or fraudulent in the handing of your account or Card, your liability may increase. These rules do not apply to other electronic transfers. You will not be liable for unauthorized use that occurs after you notify us orally at 000-000-0000 or 0-000-000-0000, or in writing to FAIRWINDS Credit Union, Attn: Card Services, 0000 X. Xxxxxxx Xxxxx, Xxxxxxx, XX 00000. You agree to cooperate with us in the recovery of any amounts advanced based on such as a hospital stay or a long trip, kept you from telling us, we will extend the time periodsunauthorized use.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from If you notify us of the loss, theft, or unauthorized use of your HSA Deposit Account without your authorizationCard or other devices which we supply to you, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has been lost, stolen, or used without your permission, or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will not be responsible liable for any unauthorized electronic fund transfer from use for purchases processed though Visa/Plus provided you were not grossly negligent or fraudulent in handling your Deposit AccountCard and you provide us with a written statement regarding your unauthorized Card claim, even if you did otherwise the liability limits set forth will apply. For ATM and PIN transactions not authorize it, if you do not notify us within 60 days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn of the loss or theft of your PIN and/or Passwordprocessed through VISA/Plus, you can lose no more than $50 if someone used those codes and withdrew the funds accessed your account without your permission. If you do not contact don’t tell us as stated above within two (2) business days of when after you learned of the loss or theft of those codesunauthorized use, and we can prove that we could have stopped someone from performing other unauthorized transactionsaccessing your account without your permission if you had told us, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not makeunauthorized transfers, tell us at once. If you do not tell us within sixty (60) 60 days after the statement or electronic statement information was made available mailed to you, you may not get back any money you lost after the sixty (60) days, 60 days if we can prove that we could have stopped someone from taking the money if you had told us in time. If a good reason, reason (such as a long trip or hospital stay or a long trip, stay) kept you from telling us, we will extend the time periodsperiod. If you believe your card or PIN has been lost or stolen or that someone has transferred or may transfer funds from your account without your permission, call the number below, or write to: Team One Credit Union, Attn: Plastics Department, PO Box 1260, Saginaw, MI 48606. Any person, who is permitted by you, either by express or implied permission, to use your card would be able to withdraw all of the money in your account. We refer to such persons as authorized users, and you agree that all authorized users may withdraw funds from your accounts with your card. You agree that you will not use your account, or any devices that access your account, in any illegal manner, and/or for any illegal purpose, including, but not limited to illegal internet gambling.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer You are liable for all authorized use of any Card issued under this agreement regardless of the credit limit or the party using it. You also may be liable for the unauthorized use of your Card as follows: 1) If you tell us after learning of the loss or theft of the Card, your liability for unauthorized transactions using the VISA® system is made from your HSA Deposit Account without your authorizationZero; 2) For Card transactions through a non-VISA® network, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN VISA® or Password has been lost, stolenPlus ATM, or used without your permissionany ATM transactions, or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at to Cards issued outside the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itUnited States, if you do not notify tell us within 60 days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn after learning of the loss or theft of the Card, your PIN and/or Passwordliability for unauthorized transactions is $50.00; 3) For ATM transactions, you can lose no more than your liability for unauthorized transactions is $50 500.00 if someone used those codes and withdrew the funds without your permission. If you do not contact tell us as stated above within two (2) business days of when you learned of the loss or theft of those codes, days; and we can prove that we could have stopped someone from performing other unauthorized transactions, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not make, tell us at once. If 4) if you do not tell us within sixty (60) days after the statement or electronic statement information was made available to youmailed, you may not get back any money you lost after the sixty (60) days, if we can prove that we could have stopped someone from taking the money if had you had told us in time. The term “unauthorized” does not include any transaction from which you receive a benefit or any transaction by a person with actual, implied, or apparent authority to use the Card. We may require you to provide a written statement regarding claims of unauthorized transactions. If a good reasonwe determine that you have been grossly negligent or fraudulent in the handing of your account or Card, your liability may increase. These rules do not apply to other electronic transfers. You will not be liable for unauthorized use that occurs after you notify us orally at 407-277- 5045 or 0-000-000-0000, or in writing to FAIRWINDS Credit Union, Attn: Payment Services, 0000 X. Xxxxxxx Xxxxx, Xxxxxxx, XX 00000. You agree to cooperate with us in the recovery of any amounts advanced based on such as a hospital stay or a long trip, kept you from telling us, we will extend the time periodsunauthorized use.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorizationTelephone Us at once at (000) 000-0000 or (000) 000-0000 or write Us at the address shown in this Agreement if You believe Your Card, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has Access Code have been lost, lost or stolen, or used without your permission, or if you You believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify us applicable). If You tell Us within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use of Your VISA Debit Card as long as You report the loss or theft of Your VISA Debit Card within two business days. If You report such loss or theft after two business days, or provide proper notification of other unauthorized VISA Debit Card transactions, Your liability for unauthorized use will not exceed $50.00. These exceptions do not apply to: (a) transactions that originate at an ATM; or (b) transactions that originate from Your gross negligence; or (c) transactions that originate from Your fraudulent use of Your VISA Debit Card; or (d) transactions processed through non-VISA networks (e.g. ACCEL/Exchange, Debit MasterCard, COOP, NYCE, PULSE and STAR) without cardholder PIN validation.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has been lost, stolenTelephone Us at once at (214) 319- 3100, or used without your permissionwrite to Us at P.O. Box 660077, Dallas, TX 75266-0077 if You believe Your Card or PIN have been lost or stolen or if you believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify applicable). If You tell us within 60 2 business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) 2 business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Also, if Your statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you You do not tell us Us within sixty (60) 60 days after the statement or electronic statement information was made available mailed to youYou, you You may not get back any money you You lost after the sixty (60) days, 60 days if we We can prove that we We could have stopped someone from taking the money if you You had told us Us in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your VISA Debit Card as long as You report the loss or theft of Your VISA Debit Card within 2 business days. These exceptions do not apply to: (a) transactions that originate at an ATM; or (b) transactions that originate from Your gross negligence; or (c) transactions that originate from Your fraudulent use of Your VISA Debit Card; or (d) transactions processed through non-VISA networks without cardholder PIN validation.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN Telephone Us at once at (000) 000-0000 or Password has been lost, stolenVISA Card Services at (000) 000-0000, or used without your permissionwrite to Us at the address shown in this Agreement, if You believe Your Card or PIN have been lost or stolen or if you believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify applicable). If You tell us within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you transactions that You did not make, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the statement or electronic statement information was made available to youperiodic statement, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your Debit Card as long as You report the loss or theft of Your Debit Card within two business days. These exceptions do not apply to: (a) transactions that originate at an ATM; or (b) transactions that originate from Your gross negligence; or (c) transactions that originate from Your fraudulent use of Your Debit Card; or (d) transactions processed through non-VISA networks without cardholder PIN validation.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know Telephone Us at once at the steps you must take. Tell us AT ONCE telephone number shown in this Agreement or write to Us at the address shown in this Agreement if you You believe that your online banking Your Card or PIN have been lost or Password has been lost, stolen, or used without your permission, stolen or if you You believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify us applicable). If You tell Us within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you transactions that You did not make, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the statement or electronic statement information was made available to youperiodic statement, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use of Your Debit MasterCard as long as You report the loss or theft of Your Debit MasterCard within two business days. These exceptions do not apply to: (a) transactions that originate at an ATM; or (b) transactions that are Pinned; or (c) transactions that originate from Your gross negligence; or (d) transactions that originate from Your fraudulent use of Your Debit MasterCard; or (e) instances in which You have reported two or more occasions of unauthorized use during the preceding 12 month period.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorizationTelephone Us at once at (000) 000-0000 or (800) 952-PGCU or write Us at the address shown in this Agreement if You believe Your Card, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has Access Code have been lost, lost or stolen, or used without your permission, or if you You believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify us applicable). If You tell Us within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your Debit Card as long as You report the loss or theft of Your Debit Card within two business days. If You report such loss or theft after two business days, or provide proper notification of other unauthorized Debit Card transactions, Your liability for unauthorized use will not exceed $50.00. These exceptions do not apply to: (a) transactions that originate at an ATM; or (b) transactions that originate from Your gross negligence; or (c) transactions that originate from Your fraudulent use of Your Debit Card; or (d) transactions processed through non-VISA networks (e.g. ACCEL/Exchange, Debit MasterCard, COOP, NYCE, PULSE and STAR) without cardholder PIN validation.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made You may have to bear the loss of money taken from your HSA Deposit Account in any transaction or series of transactions initiated by using the Access Codes. You could lose all the money in your account. How much of the loss you will have to bear will depend on when we are given a notice that your Access Code has been lost or stolen or are given a notice, or become aware of circumstances, indicating that a transaction through the Services involving your HSA Deposit Account has been or may be initiated by using your Access Codes without your authorization, you should know the steps you must takeauthorization (see Section 7). Tell us AT ONCE if you believe that your online banking PIN Access Code or Password has Card Data have been lost, lost or stolen, or used without . Call us at 1-877-472- 1070 to provide such notice. Telephoning is the best way of keeping your permission, or if you believe that possible losses down. To the extent a transaction is an electronic fund transfer has funds transfer, under the Federal Reserve Board’s Regulation E, if we are given the notice or become aware of those circumstances within 2 business days after the date you learn of the loss, theft or possible unauthorized transaction, you will have to bear (subject to limitations under Federal law) as much as $50 of the loss. If we are NOT given the notice or do NOT become aware of those circumstances within those 2 business days and we can show that we could have stopped the taking of the money had we been made without your permissiongiven the notice during those 2 business days, for example, using information from your checkyou will have to bear (subject to limitations under Federal law) as much as $500 of the loss. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize it, if you do not notify report the unauthorized transaction to us within 60 days after the date we send or deliver the statement to you, you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA will have to us at bear (subject to limitations under Federal law) as much as $500 of the telephone number or address shown at loss occurring before the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business those 60 days of when you learn of the loss or theft of your PIN and/or Passwordand, you can lose no more than $50 if someone used those codes and withdrew the funds without your permission. If you do not contact us as stated above within two (2) business days of when you learned of the loss or theft of those codes, and we can prove show that we could have stopped someone from performing other the taking of the money had the unauthorized transactionstransaction been reported to us during those 60 days, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not make, tell us at once. If you do not tell us within sixty (60) days all of the loss occurring after the statement or electronic statement information was made available to you, you may not get back any money you lost after the sixty (60) end of those 60 days, if we can prove that we could have stopped someone from taking the money if you had told us in time. If For a good reason, reason (such as a long trip or hospital stay or a long trip, kept you from telling usby you), we will extend the time periods. You agree to assist us in our efforts to recover any funds that were paid without your permission or consent. You may also have other rights and responsibilities related to your Commerce Bank HSA Deposit Account as described in the Deposit Account Agreement provided to you at account opening.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorizationCardholder will not be liable for the unauthorized use of the credit card, you should know provided Cardholder notifies Issuer, orally or in writing, of the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has been lostloss, stolentheft, or used without your permission, or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize it, if you do not notify us within 60 days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn misappropriation of the loss card at: Team One CU Plastics Department and provided further that Cardholder has not been grossly negligent or theft fraudulent in the handling of your the cards. For ATM and PIN and/or Passwordtransactions not processed through VISA/Plus, you can lose no more than $50 if someone used those codes and withdrew the funds accessed your account without your permission. If you do not contact don’t tell us as stated above within two (2) business days of when after you learned of the loss or theft of those codesunauthorized use, and we can prove that we could have stopped someone from performing other unauthorized transactionsaccessing your account without your permission if you had told us, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not makeunauthorized transfers, tell us at once. If you do not tell us within sixty (60) 60 days after the statement or electronic statement information was made available mailed to you, you may not get back any money you lost after the sixty (60) days, 60 days if we can prove that we could have stopped someone from taking the money if you had told us in time. If a good reason, reason (such as a long trip or hospital stay or a long trip, stay) kept you from telling us, we will extend the time periodsperiod. If you believe your card or PIN has been lost or stolen or that someone has transferred or may transfer funds from your account without your permission, call the number below, or write to: Team One Credit Union, Attn: Plastics Department, XX Xxx 0000, Xxxxxxx, XX 00000. If ten or more cards are issued for use by employees of a single business or other organization, there is no limited Cardholder's liability for any unauthorized use that occurs before Cardholder notifies Issuer as provided herein: the business or organization may only impose liability on its employees for unauthorized use of a card as authorized by Federal Law and Regulations.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know the steps you must take. Tell You will notify us AT ONCE immediately if you believe that your online banking PIN password has become known to an unauthorized person or Password if someone has been lost, stolen, transferred money or used made payments without your permission, or if you believe . You understand that an electronic fund transfer has been made without calling us in such cases is the best way of keeping your permission, for example, using information from your checkpossible losses to a minimum. If you believe suggest that an unauthorized electronic fund transfer has been made from or bill payment may have occurred, we may require you to sign an affidavit verifying such occurrence. You understand that you can lose all the money in your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible deposit accounts (including any funds accessible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize it, covering insufficient funds) accessed through Online Banking if you do not notify inform us within 60 days after you receive that your HSA statement or electronic statement informationpassword has become known to an unauthorized person. If you report a transaction involving your HSA to tell us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) 2 business days of when after you learn of the loss or theft of your PIN and/or Passwordtheft, you can lose no more than $50 50.00 if someone an unauthorized person used those codes and withdrew the funds your password to access Online Banking without your permission. If you do not contact tell us as stated above within two (2) 2 business days of when after you learned of the loss or theft of those codeslearn that your password has become known to an unauthorized person, and we can prove that we you could have stopped someone from performing other unauthorized transactionsusing your password without your permission if you had told us, you could lose can be liable for as much as $500500.00. If your HSA Deposit Account statement shows electronic funds transfers that you did not make, tell you must notify us at onceimmediately. The Bank may require you to provide your complaint in the form of an affidavit. If you do not tell us about unauthorized transfers within sixty (60) 60 days after the your account statement or electronic statement information was made available is sent to you, you may not get back any money that you lost lose after the sixty (60) days, 60 day period if we can prove that that, had you told us about the unauthorized transfers on time, we could have stopped someone from taking the money if you had told us in timemoney. If a good reason, reason (such as a hospital stay lengthy vacation or a long trip, hospitalization) kept you from telling us, us we will extend the time periods.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorizationTelephone Us at once at (303) 471- 7625 or write to Us at 0000 Xxxxxxxxx Xxxx, you should know the steps you must take. Tell us AT ONCE Xxxxxxxxx, XX 00000 if you You believe that your online banking Your Card or PIN have been lost or Password has been lost, stolen, or used without your permission, stolen or if you You believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify us applicable). If You tell Us within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you transactions that You did not make, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the statement or electronic statement information was made available to youperiodic statement, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use of Your VISA Debit Card as long as You report the loss or theft of Your VISA Debit Card within two business days. These exceptions do not apply to: (a) transactions that originate at an ATM; or (b) transactions that originate from Your gross negligence; or (c) transactions that originate from Your fraudulent use of Your VISA Debit Card; or (d) transactions processed through non-VISA networks without cardholder PIN validation.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer You are liable for all authorized use of any Card issued under this agreement regardless of the credit limit or the party using it. You also may be liable for the unauthorized use of your Card as follows: 1) If you tell us after learning of the loss or theft of the card, your liability for unauthorized transactions using the Visa system is made from your HSA Deposit Account without your authorizationZero; 2) For card transactions through a non-Visa network, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN Visa Commercial Cards, Visa or Password has been lost, stolenPlus ATM, or used without your permissionany ATM transactions, or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at to cards issued outside the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itUnited States, if you do not notify tell us within 60 days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn after learning of the loss or theft of the Card, your PIN and/or Passwordliability for unauthorized transactions is $50.00; 3) For ATM transactions, you can lose no more than your liability for unauthorized transactions is $50 500.00 if someone used those codes and withdrew the funds without your permission. If you do not contact tell us as stated above within two (2) business days of when you learned of the loss or theft of those codes, days; and we can prove that we could have stopped someone from performing other unauthorized transactions, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not make, tell us at once. If 4) if you do not tell us within sixty (60) days after the statement or electronic statement information was made available to youmailed, you may not get back any money you lost after the sixty (60) days, if we can prove that we could have stopped someone from taking the money if had you had told us in time. The term “unauthorized” does not include any transaction from which you receive a benefit or any transaction by a person with actual, implied, or apparent authority to use the Card. We may require you to provide a written statement regarding claims of unauthorized transactions. If a good reasonwe determine that you have been grossly negligent or fraudulent in the handing of your account or Card, your liability may increase. These rules do not apply to other electronic transfers. You will not be liable for unauthorized use that occurs after you notify us orally at 000-000-0000 or 0-000-000-0000, or in writing to FAIRWINDS Credit Union, Attn: Card Services, 0000 X. Xxxxxxx Xxxxx, Xxxxxxx, XX 00000. You agree to cooperate with us in the recovery of any amounts advanced based on such as a hospital stay or a long trip, kept you from telling us, we will extend the time periodsunauthorized use.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know Telephone Us at once at the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has been lost, stolentelephone number shown in this Agreement, or used without your permissionwrite to Us at the address shown in this Agreement if You believe Your Card or PIN have been lost or stolen, or if you believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify applicable). If You tell us within 60 2 business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) 2 business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your MasterCard Debit Card as long as You report the loss or theft of Your MasterCard Debit Card within 2 business days. If You report such loss or theft after 2 business days, or provide proper notification of other unauthorized MasterCard Debit Card transactions, Your liability for unauthorized use will not exceed $50. These exceptions do not apply to transactions originating at an ATM or from Your gross negligence and/or fraudulent use of Your MasterCard Debit Card. IN CASE OF ERRORS OR IF YOU HAVE QUESTIONS ABOUT ELECTRONIC TRANSFERS. Telephone Us at the telephone number shown in this Agreement, or write to Us at the address shown in this Agreement as soon as You can, if You think Your statement or receipt is wrong or if You need more information about a transaction listed on the statement or receipt. We must hear from You no later than 60 days after We send You the first statement on which the problem or error appeared.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from You will be liable for unauthorized use of your HSA Deposit Account without Card to the extent allowed by applicable federal and state law. You agree that if you give your authorizationPIN and/or debit card to someone else to use, you should know are authorizing them to act on your behalf and you will be responsible for any use of the steps you must takecard by them. The following is a description of your liability for unauthorized use of your Card: Tell us AT ONCE if you believe that your online banking PIN or Password Card has been lost, lost or stolen, or used without . Telephoning is the best way of keeping your permission, or if you believe that an electronic fund transfer possible losses down. You could lose all the money in your accounts. If your Card has been made without your permission, for example, using information from your check. If lost or stolen and you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize it, if you do not notify tell us within 60 2 business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn of the loss or theft of your PIN and/or Passwordtheft, you can lose no more than $50 if someone used those codes and withdrew the funds your Card without your permission. If you do not contact NOT tell us as stated above within two (2) 2 business days of when after you learned learn of the loss or theft of those codesyour Card, and we can prove that we could have stopped someone from performing other unauthorized transactionsusing your Card without your permission if you had told us, you could lose as much as $500. If your HSA Deposit Account Also, if our statement shows transfers that you did not make, tell us at once. If you do not tell us within sixty (60) 60 days after the statement or electronic statement information was made available mailed to you, you may not get back any money you lost after the sixty (60) days, 60 days if we can prove that we could have stopped someone from taking the money if you had told us in time. If a good reason, reason (such as a long trip or hospital stay or a long trip, stay) kept you from telling us, we will may extend the time periods. Your liability may be more limited in certain cases under applicable state law. If you believe that your Card has been lost or stolen, or that someone has transferred or may transfer money from your designated accounts without your permission, call us at 000-000-0000 or 0-000-000-0000; or after business hours at 000-000-0000 or write to U1CU, Attn: eServices, 0 Xxxxx Xxxx Xx., Xxxxxx, XX 00000. Possession of a U1 Visa debit card is a privilege which may be revoked at any time. U1 may not replace a lost or stolen debit card if the lost or stolen card resulted in a financial loss to the Credit Union. If a replacement card is issued for lost, stolen or captured cards, your account may be assessed a fee for the replacement card. See General Fee Schedule.

LIABILITY FOR UNAUTHORIZED USE. In case an The following applies to electronic fund transfer is made from your HSA Deposit Account without your authorizationfunds transfers that debit a consumer’s Account, you should know the steps you must takeand does not apply to non- consumer Accounts. Tell us AT ONCE Telephone Us at once at (000) 000-0000 if you You believe that your online banking Your Card, PIN or Password has Access code have been lost, stolen, lost or used without your permission, stolen or if you believe that an electronic fund transfer has been made without your permission. Also if your statement shows transfers that you did not make including those made by card, for examplecode or other means, using information from your checkTELL US AT ONCE. If You should also call the number or write to the address listed above if you believe that an unauthorized electronic fund a transfer has been made using the information from your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from check without your Deposit Account, even if you did not authorize it, if you do not notify us within 60 days after you receive your HSA statement or electronic statement informationpermission. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” You tell Us within two (2) 2 business days of when you learn of the loss or theft of your PIN and/or Passworddays, you You can lose no more than $50 if someone used those codes and withdrew the funds uses Your Card, PIN or Access Code without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) 2 business days of when you learned after You learn of the loss or theft of those codesYour Card, PIN, or Access Code, and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card, you PIN or Access Code without Your permission if You had told Us, then You could lose as much as $500. Additionally, If your HSA Deposit Account Your periodic statement shows transfers you did not that You didn’t make, You will tell us Us at once. If you do not ; if You fail to tell us Us within sixty (60) 60 days after We mail You the statement or electronic statement information was made available to youperiodic statement, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your Debit Card as long as You report the loss or theft of Your Debit Card within two business days. If You report such loss or theft after 2 business days, or provide proper notification of other unauthorized Debit Card transactions. Your liability for unauthorized use will not exceed $500. These exceptions do not apply to transactions involving Your PIN or from Your gross negligence and/or fraudulent use of Your Debit Card.

LIABILITY FOR UNAUTHORIZED USE. In case You are responsible for all transfers you authorize using your EFT services under this Agreement. If you permit other persons to use an electronic fund transfer is made from your HSA Deposit Account without your authorizationEFT service, Card or access code, you should know the steps you must takeare responsible for any transactions they authorize or conduct on any of your accounts. Tell However, tell us AT ONCE at once if you believe that anyone has used your online banking PIN Account, Card or Password has been lost, stolen, or used access code and accessed your accounts without your permission, or if you believe that an electronic fund transfer has been made without authority. Telephoning is the best way of keeping your permission, for example, using information from your checkpossible losses down. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itFor VISA Check Card purchase transactions, if you do not notify us within 60 days after of your lost or stolen card, you receive may not be liable for any losses provided that you were not negligent or fraudulent in handling your HSA Card and you promptly provide us with a written statement or regarding your unauthorized Card claim. Otherwise the following liability limits will apply. For all other EFT transactions except electronic statement information. If check transactions, if you report a transaction involving tell us of the unauthorized use of your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” account within two (2) business days of when after you learn of the loss or theft of your PIN and/or Passwordaccess device, you can lose no more than $50 if someone used those codes and withdrew the funds accessed your account without your permission. If you do not contact tell us as stated above within two (2) business days of when after you learned learn of the loss or theft of those codesyour access device, and we can prove that we could have stopped someone from performing other unauthorized transactionsaccessing our account without your permission if you had told us, you could lose as much as $500. If Also, if your HSA Deposit Account statement shows EFT transfers that you did not makemake including made by Card, access code or other means, tell us at once. If you do not tell us within sixty (60) days after the statement or electronic statement information was made available mailed to you, you may not get back any money you lost after be liable for the sixty (60) days, following amounts if we can prove that we could have stopped someone from taking making the money transfers if you had told us in time. If a good reason, such as a hospital stay or a long trip, kept you from telling us, we will extend : (i) for unauthorized Check Card purchase transactions-up to the time periodslimits set forth above and

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has been lost, stolenTelephone Us at once at (517) 784- 7101, or used without your permissionwrite to Us at 0000 Xxxxxxx Xxxx, Xxxxxxx, XX 00000 if You believe Your Card or PIN have been lost or stolen or if you You believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify us applicable). If You tell Us within 60 2 business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) 2 business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Also, if Your statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you You do not tell us Us within sixty (60) 60 days after the statement or electronic statement information was made available mailed to youYou, you You may not get back any money you You lost after the sixty (60) days, 60 days if we We can prove that we We could have stopped someone from taking the money if you You had told us Us in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for the unauthorized use of a MasterCard- branded Debit Card as long as You used reasonable care in safeguarding Your Card from loss or theft and, upon becoming aware of such loss or theft, promptly report that loss or theft to the Credit Union. This exception does not apply to a transaction conducted with a Card that is: (a) issued to an entity other than a natural person; (b) issued for a commercial purpose, except to the extent that such exception shall apply to transactions conducted for a small- business program; and (c) issued to a person until such time as that person's identity is registered by or on behalf of the Credit Union in connection with such issuance, which registration may include customer identification program requirements.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know Telephone Us at once at the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has been lost, stolentelephone number shown in this Agreement, or used without your permissionwrite to Us at the address shown in this Agreement if You believe Your Card or PIN have been lost or stolen, or if you believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify applicable). If You tell us within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your VISA Check Card as long as You report the loss or theft of Your VISA Check Card within two business days. If You report such loss or theft after two business days, or provide proper notification of other unauthorized VISA Check Card transactions, Your liability for unauthorized use will not exceed $50.00. These exceptions do not apply to: (a) transactions that originate at an ATM; or (b) transactions that originate from Your gross negligence; or (c) transactions that originate from Your fraudulent use of Your VISA Debit Card; or (d) transactions processed through non-VISA networks (e.g. ACCEL/Exchange, Debit MasterCard, COOP, NYCE, PULSE and STAR) without cardholder PIN validation.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer You are liable for all authorized use of any Card issued under this agreement regardless of the credit limit or the party using it. You also may be liable for the unauthorized use of your Card as follows: 1) If you tell us after learning of the loss or theft of the Card, your liability for unauthorized transactions using the VISA® system is made from your HSA Deposit Account without your authorizationZero; 2) For Card transactions through a non-VISA® network, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN VISA® or Password has been lost, stolenPlus ATM, or used without your permissionany ATM transactions, or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at to Cards issued outside the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itUnited States, if you do not notify tell us within 60 days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn after learning of the loss or theft of the Card, your PIN and/or Passwordliability for unauthorized transactions is $50.00; 3) For ATM transactions, you can lose no more than your liability for unauthorized transactions is $50 500.00 if someone used those codes and withdrew the funds without your permission. If you do not contact tell us as stated above within two (2) business days of when you learned of the loss or theft of those codes, days; and we can prove that we could have stopped someone from performing other unauthorized transactions, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not make, tell us at once. If 4) if you do not tell us within sixty (60) days after the statement or electronic statement information was made available to youmailed, you may not get back any money you lost after the sixty (60) days, if we can prove that we could have stopped someone from taking the money if had you had told us in time. The term “unauthorized” does not include any transaction from which you receive a benefit or any transaction by a person with actual, implied, or apparent authority to use the Card. We may require you to provide a written statement regarding claims of unauthorized transactions. If a good reasonwe determine that you have been grossly negligent or fraudulent in the handing of your account or Card, your liability may increase. These rules do not apply to other electronic transfers. You will not be liable for unauthorized use that occurs after you notify us orally at 000-000-0000 or 0-000-000-0000, or in writing to FAIRWINDS Credit Union, Attn: Payment Services, 0000 X. Xxxxxxx Xxxxx, Xxxxxxx, XX 00000. You agree to cooperate with us in the recovery of any amounts advanced based on such as a hospital stay or a long trip, kept you from telling us, we will extend the time periodsunauthorized use.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorizationTelephone Us at once at the telephone number shown in this Agreement, you should know or write to Us at the steps you must take. Tell us AT ONCE address shown in this Agreement if you You believe that your online banking Your Card or PIN have been lost or Password has been lost, stolen, or used without your permission, or if you You believe that an electronic fund transfer has been made without your permission, for example, Yourpermission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best wayof keeping Your possible losses down. You could lose all of the end moneyin Your Account (plus Yourmaximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify applicable). If You tell us within 60 days 2 businessdays after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYourCard or PIN, you You can lose no more than $50 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) 2 business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your Card as long as You report the loss or theft of Your Card within 2 businessdays. If You report such loss or theft after 2 business days, or provide proper notification of other unauthorized Debit Card transactions, Your liability for unauthorized use will not exceed IN CASE OF ERRORS OR IF YOU HAVE QUESTIONS ABOUT ELECTRONIC TRANSFERS. Telephone Us at the telephone numbershown in this Agreement, or write to Us at the address shown in this Agreement as soon as You can, if You think Your statement or receipt is wrong or if You need more information about a transaction listed on the statement or receipt. We must hear from You no later than 60 days after We send You the first statement on which the problem or error appeared.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorizationTelephone Us at once at the telephone number shown in this Agreement, you should know or write to Us at the steps you must take. Tell us AT ONCE address shown in this Agreement if you You believe that your online banking Your Card or PIN have been lost or Password has been lost, stolen, or used without your permission, or if you You believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify applicable). If You tell us within 60 2 business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) 2 business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your Card as long as You report the loss or theft of Your Card within 2 business days. If You report such loss or theft after 2 business days, or provide proper notification of other unauthorized Debit Card transactions, Your liability for unauthorized use will not exceed $50. These exceptions do not apply to transactions originating at an ATM or from Your gross negligence and/or fraudulent use of Your Card. IN CASE OF ERRORS OR IF YOU HAVE QUESTIONS ABOUT ELECTRONIC TRANSFERS. Telephone Us at the telephone number shown in this Agreement, or write to Us at the address shown in this Agreement as soon as You can, if You think Your statement or receipt is wrong or if You need more information about a transaction listed on the statement or receipt. We must hear from You no later than 60 days after We send You the first statement on which the problem or error appeared.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorizationTelephone Us at once at the telephone number shown in this Agreement, you should know or write to Us at the steps you must take. Tell us AT ONCE address shown in this Agreement if you You believe that your online banking Your Card or PIN have been lost or Password has been lost, stolen, or used without your permission, or if you You believe that an electronic fund transfer has been made without your permission, for example, Yourpermission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best wayof keeping Your possible losses down. You could lose all of the end moneyin Your Account (plus Yourmaximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify applicable). If You tell us within 60 days 2 businessdays after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYourCard or PIN, you You can lose no more than $50 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) 2 business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your Card as long as You report the loss or theft of Your Card within 2 business days. If You report such loss or theft after 2 business days, or provide proper notification of other unauthorized Debit Card transactions, Your liability for unauthorized use will not exceed $50. These exceptions do not apply to transactions originating at an ATM or from Your gross negligence and/or fraudulent use of Your Card. IN CASE OF ERRORS OR IF YOU HAVE QUESTIONS ABOUT ELECTRONIC TRANSFERS. Telephone Us at the telephone numbershown in this Agreement, or write to Us at the address shown in this Agreement as soon as You can, if You think Your statement or receipt is wrong or if You need more information about a transaction listed on the statement or receipt. We must hear from You no later than 60 days after We send You the first statement on which the problem or error appeared.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know Telephone Us at once at the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has been lost, stolentelephone number shown in this Agreement, or used write to Us at the address shown in this Agreement if You believe Your Card or PIN have been lost or stolen. If You tell Us within two business days, You can lose no more than $50.00 if someone uses Your Card or PIN without your Your permission, or if you believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify applicable). If You tell us within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use for Your VISA Debit Card as long as You report the loss or theft of Your VISA Debit Card within two business days. If You report such loss or theft after two business days, or provide proper notification of other unauthorized VISA Debit Card transactions, Your liability for unauthorized use will not exceed $50.00. These exceptions do not apply to transactions originating at an ATM or from Your gross negligence and/or fraudulent use of Your VISA Debit Card. more information about a transaction listed on the statement or receipt. We must hear from You no later than 60 days after We send You the first statement on which the problem or error appeared.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made Telephone Us at once at (000) 000-0000 in Austin, (000) 000-0000 in Galveston or (000) 000-0000 from your HSA Deposit Account without your authorizationwithin the continental United States or write Us at P.O. Box 9350, you should know the steps you must take. Tell us AT ONCE Austin, TX 78766 if you You believe that your online banking Your Card, PIN or Password has Access Code have been lost, lost or stolen, or used without your permission, or if you believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify applicable). If You tell us within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to you, you may not get back any money you lost after on which the sixty (60) days, transfer appears,You could lose the entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use of Your Check Card as long as You report the loss or theft of Your Check Card. This exception does Galveston or (000) 000-0000 from within the continental United States or write Us at P.O. Box 9350, Austin, TX 78766 as soon as You can, if You think Your statement or receipt is wrong or if You need more information about a transaction listed on the statement or receipt. We must hear from You no later than 60 days after We send You the first statement on which the problem or error appeared.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer You are liable for all authorized use of any Card issued under this agreement regardless of the credit limit or the party using it. You also may be liable for the unauthorized use of your Card as follows: 1) If you tell us after learning of the loss or theft of the Card, your liability for unauthorized transactions using the VISA® system is made from your HSA Deposit Account without your authorizationZero; 2) For Card transactions through a non-VISA® network, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN VISA® or Password has been lost, stolenPlus ATM, or used without your permissionany ATM transactions, or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at to Cards issued outside the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itUnited States, if you do not notify tell us within 60 days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn after learning of the loss or theft of the Card, your PIN and/or Passwordliability for unauthorized transactions is $50.00; 3) For ATM transactions, you can lose no more than your liability for unauthorized transactions is $50 500.00 if someone used those codes and withdrew the funds without your permission. If you do not contact tell us as stated above within two (2) business days of when you learned of the loss or theft of those codes, days; and we can prove that we could have stopped someone from performing other unauthorized transactions, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not make, tell us at once. If 4) if you do not tell us within sixty (60) days after the statement or electronic statement information was made available to youmailed, you may not get back any money you lost after the sixty (60) days, if we can prove that we could have stopped someone from taking the money if had you had told us in time. The term “unauthorized” does not include any transaction from which you receive a benefit or any transaction by a person with actual, implied, or apparent authority to use the Card. We may require you to provide a written statement regarding claims of unauthorized transactions. If a good reasonwe determine that you have been grossly negligent or fraudulent in the handing of your account or Card, your liability may increase. These rules do not apply to other electronic transfers. You will not be liable for unauthorized use that occurs after you notify us orally at 000-000-0000 or 0-000-000-0000, or in writing to FAIRWINDS Credit Union, Attn: Payment Services, 0000 X. Xxxxxxx Xxxxx, Xxxxxxx, XX 00000. You agree to cooperate with us in the recovery of any amounts advanced based on such as a hospital stay or a long trip, kept you from telling us, we will extend the time periodsunauthorized use.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorizationTelephone Us at once at (000) 000-0000 or (800) 666- 0191, you should know the steps you must take. Tell us AT ONCE if you You believe that your online banking Your Card, PIN or Password has have been lost, lost or stolen, or used without your permission, or if you You believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. Prompt notification to the credit union is the best way of keeping Your possible losses down. You could lose all of the money in Your Account (plus Your maximum overdraft line of credit, if applicable). You can, if You think Your statement or receipt is wrong or if You need more information about a transaction listed on the statement or receipt. We must hear from You no later than 60 days after We send You the first statement on which the problem or error appeared. Tell Us (a) Your name and Account number; (b) the dollar amount of the suspected error, describe the error or the transaction You are unsure about, and explain as clearly as You can why You believe there is an error or why You need more information. We will determine whether an error occurred within 10 business days after We hear from You and will correct any error promptly. If you believe that We need more time, however, We may take up to 45 days to investigate Your complaint or question. If We ask You to put Your complaint or question in writing and We do not receive it within 10 business days, We may not credit Your Account. We will tell You the results within three business days after completing Our investigation. In this provision, all references to 10 business days will be 20 business days if Your notice of error involves an unauthorized electronic fund transfer has been that occurred within 30 days after the first deposit to Your Account was made from your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You and all references to 45 business days will be responsible for any unauthorized 90 business days if Your notice of error involves an electronic fund transfer that: (a) was not initiated within the United States; (b)resulted from your Deposit Account, even if you did not authorize it, if you do not notify us a point-of-sale debit card transaction; or (c) occurred within 60 days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn of the loss or theft of your PIN and/or Password, you can lose no more than $50 if someone used those codes and withdrew the funds without your permission. If you do not contact us as stated above within two (2) business days of when you learned of the loss or theft of those codes, and we can prove that we could have stopped someone from performing other unauthorized transactions, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not make, tell us at once. If you do not tell us within sixty (60) 30 days after the statement or electronic statement information first deposit to Your Account was made available to you, you may not get back any money you lost after the sixty (60) days, if we can prove that we could have stopped someone from taking the money if you had told us in time. If a good reason, such as a hospital stay or a long trip, kept you from telling us, we will extend the time periodsmade.

LIABILITY FOR UNAUTHORIZED USE. In case an The following applies to electronic fund transfer is made from your HSA Deposit Account without your authorizationtransfers that debit a consumer's Account, you should know and does not apply to non-consumer Accounts. Telephone Us at once at the steps you must take. Tell us AT ONCE telephone number shown in this Agreement, or write to Us at the address shown in this Agreement if you You believe that your online banking Your Card or PIN or Password has been lost, lost or stolen, or used without your permission, or if you You believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify us applicable). If You tell Us within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) business days of when you learned after You learn of the loss or theft of those codes, Your Card or PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use of Your VISA Check Card as long as You report the loss or theft of Your VISA Check Card within two business days. If You report such loss or theft after two business days, or provide proper notification of other unauthorized VISA Check Card transactions, Your liability for unauthorized use will not exceed $50.00. These exceptions do not apply to: (a) transactions that originate at an ATM; or (b) transactions that originate from Your gross negligence; or (c) transactions that originate from Your fraudulent use of Your VISA Check Card; or (d) transactions processed through non-VISA networks without cardholder PIN or written validation or authorization (VISA networks should be identified as such - if You are in doubt ask the merchant).

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from You will be liable for unauthorized use of your HSA Deposit Account without Card to the extent allowed by applicable federal and state law. You agree that if you give your authorizationPIN and/or debit card to someone else to use, you should know are authorizing them to act on your behalf and you will be responsible for any use of the steps you must takecard by them. The following is a description of your liability for unauthorized use of your Card: Tell us AT ONCE if you believe that your online banking PIN or Password Card has been lost, lost or stolen, or used without . Telephoning is the best way of keeping your permission, or if you believe that an electronic fund transfer possible losses down. You could lose all the money in your accounts. If your Card has been made without your permission, for example, using information from your check. If lost or stolen and you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize it, if you do not notify tell us within 60 2 business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you learn of the loss or theft of your PIN and/or Passwordtheft, you can lose no more than $50 if someone used those codes and withdrew the funds your Card without your permission. If you do not contact NOT tell us as stated above within two (2) 2 business days of when after you learned learn of the loss or theft of those codesyour Card, and we can prove that we could have stopped someone from performing other unauthorized transactionsusing your Card without your permission if you had told us, you could lose as much as $500. If your HSA Deposit Account Also, if our statement shows transfers that you did not make, tell us at once. If you do not tell us within sixty (60) 60 days after the statement or electronic statement information was made available mailed to you, you may not get back any money you lost after the sixty (60) days, 60 days if we can prove that we could have stopped someone from taking the money if you had told us in time. If a good reason, reason (such as a long trip or hospital stay or a long trip, stay) kept you from telling us, we will may extend the time periods. Your liability may be more limited in certain cases under applicable state law. If you believe that your Card has been lost or stolen, or that someone has transferred or may transfer money from your designated accounts without your permission, call us at 000-000-0000 or 0-000-000-0000; or after business hours at 000-000-0000 or write to U1CU, Attn: Card Services, PO Box 467, Dayton, OH 45409. Possession of a U1 Visa debit card is a privilege which may be revoked at any time. U1 may not replace a lost or stolen debit card if the lost or stolen card resulted in a financial loss to the Credit Union. If a replacement card is issued for lost, stolen or captured cards, your account may be assessed a fee for the replacement card and for a PIN replacement. See General Fee Schedule.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorization, you should know You must tell the steps you must take. Tell us AT ONCE Bank immediately if you believe that your online banking PIN password has become known or Password has been lost, stolen, or the Services were used without your permission, or by an unauthorized person. The Bank may require you to sign an affidavit if you believe that an electronic fund transfer has been made without report Suspected Unauthorized Use. Telephoning is the best way of keeping your permission, for example, using information from possible losses to a minimum. You could lose all the money in your check. If you believe that an unauthorized electronic fund transfer has been made from Accounts and the maximum credit available on your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itPersonal Overdraft line, if you do not notify us within 60 days after you receive your HSA statement or electronic statement informationinform the Bank of Suspected Unauthorized Use. If you report a transaction involving your HSA to us at inform the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” Bank within two (2) business banking days of when after you learn of the loss or theft of your PIN and/or PasswordSuspected Unauthorized Use, you can lose no more than $50 if someone used those codes and withdrew the funds without your permissionSuspected Unauthorized Use was unauthorized. If you do not contact us as stated above tell the Bank within two (2) business banking days of when after you learned of the loss or theft of those codesSuspected Unauthorized Use, and we can prove the Bank proves that we the Bank could have stopped someone from performing other unauthorized transactionsusing the Services without your permission if you had told the Bank, you could lose be liable for as much as $500. If your HSA Deposit Account statement shows transfers transactions using the Services that you did not make, you must tell us the Bank at once. If you do not tell us the Bank within sixty (60) days after the statement or electronic statement information was made available mailed to you, you may not get back any money you lost after 60 days if the sixty (60) days, if we Bank can prove that we the Bank could have stopped someone from taking the money if you had told us the Bank in time. If a good reason, reason (such as a hospital stay long trip or a long trip, hospital stay) kept you from telling usthe Bank, we the Bank will extend this time period. If you believe there is a Suspected Unauthorized Use of the time periodsServices, you should telephone the Bank at (000) 000-0000 or write to Farmers & Merchants Bank, 000 X Xxxx Xxxxxx, Xxxx, XX 00000 as soon as you can.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made You may have to bear the loss of money taken from your HSA Deposit Account in any transaction or series of transactions initiated by using the Access Codes. You could lose all the money in your account. How much of the loss you will have to bear will depend on when we are given a notice that your Access Code has been lost or stolen or are given a notice, or become aware of circumstances, indicating that a transaction through the Services involving your HSA Deposit Account has been or may be initiated by using your Access Codes without your authorizationauthorization (see Section 7). To the extent a transaction is an electronic funds transfer, under the Federal Reserve Board’s Regulation E, if we are given the notice or become aware of those circumstances within 2 business days after the date you learn of the loss, theft or possible unauthorized transaction, you should know will have to bear (subject to limitations under federal law) as much as $50 of the steps loss. If we are not given the notice or do not become aware of those circumstances within those 2 business days and we can show that we could have stopped the taking of the money had we been given the notice during those 2 business days, you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has been lost, stolen, or used without your permission, or if you believe that an electronic fund transfer has been made without your permission, for example, using information from your checkwill have to bear (subject to limitations under federal law) as much as $500 of the loss. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at the phone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize it, if you do not notify report the unauthorized transaction to us within 60 days after the date we send or deliver the statement to you, you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA will have to us at bear (subject to limitations under federal law) as much as $500 of the telephone number or address shown at loss occurring before the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business those 60 days of when you learn of the loss or theft of your PIN and/or Passwordand, you can lose no more than $50 if someone used those codes and withdrew the funds without your permission. If you do not contact us as stated above within two (2) business days of when you learned of the loss or theft of those codes, and we can prove show that we could have stopped someone from performing other the taking of the money had the unauthorized transactionstransaction been reported to us during those 60 days, you could lose as much as $500. If your HSA Deposit Account statement shows transfers you did not make, tell us at once. If you do not tell us within sixty (60) days all of the loss occurring after the statement or electronic statement information was made available to you, you may not get back any money you lost after the sixty (60) end of those 60 days, if we can prove that we could have stopped someone from taking the money if you had told us in time. If For a good reason, reason (such as a long trip or hospital stay or a long trip, kept you from telling usby you), we will extend the time periodsperiods of 2 business days and 60 days referred to in this Section a reasonable time. You agree to assist us in our efforts to recover any funds that were paid without your permission or consent.

LIABILITY FOR UNAUTHORIZED USE. In case an electronic fund transfer is made from your HSA Deposit Account without your authorizationTelephone Us at once at the telephone number shown in this Agreement or write Us at the address shown in this Agreement if You believe Your Card, you should know the steps you must take. Tell us AT ONCE if you believe that your online banking PIN or Password has Access Code have been lost, lost or stolen, or used without your permission, or if you You believe that an electronic fund transfer has been made without your permission, for example, Your permission using information from your Your check. If you believe that an unauthorized electronic fund transfer has been made from your Deposit Account, call or write us at Telephoning is the phone number or address shown at best way of keeping Your possible losses down. You could lose all of the end money in Your Account (plus Your maximum overdraft line of these Regulatory Disclosures under “UMB Contact Information.” You will be responsible for any unauthorized electronic fund transfer from your Deposit Account, even if you did not authorize itcredit, if you do not notify us applicable). If You tell Us within 60 two business days after you receive your HSA statement or electronic statement information. If you report a transaction involving your HSA to us at the telephone number or address shown at the end of these Regulatory Disclosures under “UMB Contact Information” within two (2) business days of when you You learn of the loss or theft of your PIN and/or PasswordYour Card or PIN, you You can lose no more than $50 50.00 if someone used those codes and withdrew the funds uses Your Card or PIN without your Your permission. If you do not contact us as stated above You fail to tell Us within two (2) business days of when you learned after You learn of the loss or theft of those codes, Your Card or losses down. You could lose all of the money in Your Account (plus Your maximum PIN and we We can prove that we We could have stopped someone from performing other unauthorized transactionsusing Your Card or PIN without Your permission if You had told Us, you then You could lose as much as $500500.00. If your HSA Deposit Account Additionally, if Your periodic statement shows transfers you that You did not make, including those made by Card, PIN or other means, You will tell us Us at once. If you do not You fail to tell us Us within sixty (60) 60 days after We mail You the first periodic statement or electronic statement information was made available to youon which the transfer appears, you may not get back any money you lost after You could lose the sixty (60) days, entire Account balance if we We can prove that we We could have stopped someone from taking the Your money if you You had told us given Us notice in time. If a good reason, valid reason (such as a long trip or hospital stay or a long tripstay) keeps You from giving Us notice, kept you from telling us, we We will extend the time periods. Exception: You will have no liability for unauthorized use of Your CME MasterCard Great Card as long as You report the loss or theft of Your CME MasterCard Great Card within two business days. If You report such loss or theft after two business days, or provide proper notification of other unauthorized CME MasterCard Great Card transactions, Your liability for unauthorized use will not exceed $50.00. These exceptions do not apply to transactions originating at an ATM or from Your gross negligence and/or fraudulent use of Your CME MasterCard Great Card.