Security Center


At Marcus, we make it a priority to protect your privacy and safeguard your account information. That’s why we’ve implemented a variety of services, features, and policies to help keep your Account secure.


Phishing is a term that describes the fraudulent use of electronic communications—most often email.  Phishing happens when someone attempts to gain access to your personal information for the purposes of identity theft.

Protect yourself

Phishers most often use email communications to encourage you to reveal your personal information. These emails falsely claim to be from a business or organization that you may deal with—for example, an Internet service provider, a bank, an online payment service, or even a government agency.    

Help us protect you

Never give out personal or financial information to anyone who asks you to update, validate, or confirm your account information. Only give out your information if you’re certain you are dealing with Marcus. If we have initiated contact with you, we will always give you the option to call us back at the phone number on our website so you can be certain you are speaking with Marcus.

Things to avoid if you suspect you are being phished

Avoid replying to emails that look suspicious, or that ask for personal information such as your Social Security Number, account number, or password.

Identity Theft

Identity theft is a crime in which someone wrongfully obtains access to your personal information and uses it to commit any sort of fraud or deception—usually for economic gain.

If you suspect that you may be a victim of identity theft, call us immediately toll-free.

For Savings customers, call 1-855-730-SAVE (7283).

For Loans customers, call 1-844-MARCUS2 (627-2872).

Online Security Measures

Measures that Marcus takes

Marcus protects the security of your personal and account information with multi-factor authentication, SSL encryption, the use of firewalls, and other safeguards.

In addition, we require the use of secure browsers to access your account, we protect your account information with a unique password, and our networks are monitored around the clock.

Important security features at Marcus

Browsers that Support Encryption

At Marcus, we require you to use a secure browser to access your account information. Microsoft Internet Explorer, Apple Safari, Mozilla Firefox, and Google Chrome are all browsers that support encryption.

Unique Email Address and Password

To access your account information, you must provide a unique email address and a password to log in. Your password is not displayed when entered (i.e., the password does not appear in clear text on your screen when you enter it).


Firewalls and monitoring systems are used to protect Marcus systems and proprietary network from any unauthorized Internet traffic. By using firewalls and monitoring, only Marcus traffic is able to access our systems and networks.

Encrypted Network

After you have entered your information, Marcus uses an encrypted network to transport data between our systems. We use security monitoring devices 24 hours a day, 7 days a week to offer you peace of mind.

Multi-factor Authentication

Marcus uses multi-factor authentication to help us authenticate you. Multi-factor authentication is an additional layer of security to help protect your account from unauthorized access. You can conduct your online banking with confidence, knowing you are communicating only with Marcus.

EV SSL Certificate (Extended Validation SSL)

EV SSL combines SSL with an Extended Validation, a stringent identity verification process performed by a third-party Certificate Authority.

You can verify that you are connected to the real Marcus website by observing the green shading in the address bar, in addition to the padlock icon. While the specific display of the shading and padlock varies slightly between different browsers, all browsers supported by the Marcus website display EV SSL.

You can view details of the certificate, indicating that Goldman Sachs Bank USA has been verified as a registered business in New York, NY. The details of the certificate also provide information about the Certificate Authority that performed the Extended Validation and created the certificate.

If you connect to the Marcus website, but do not observe the green shading or the certificate details, please call us immediately for more information or assistance:

For Savings customers, call 1-855-730-SAVE (7283).         

For Loans customers, call 1-844-MARCUS2 (627-2872).

Measures that you can take

While we use tools and security devices to increase your protection level, your actions will also play a key role in ensuring security of your personal information.

Manage your password

Protecting your password is one of the easiest things you can do to secure your account. Also, while we will ensure that your password meets minimum complexity requirements, you can make your password even stronger to further protect yourself. Reusing the same password across multiple sites is also not advisable.

Ensure your connection is secure

SSL-capable browsers will display a lock symbol that indicates you are operating in secure mode. Check your browser’s documentation for more information about what to look for.

The address bar will be shaded green, indicating that Marcus is using EV SSL

Also be sure to check the web address you have arrived at to access your account. If you are in a secure area, the address will appear as "https://www...." Notice the "s" in the address – this means that you have accessed a secure server.

Clear the cache of your browser

Browsers generally cache, a term that describes any information locally stored on your computer. These are images of pages they have already been  downloaded to provide a faster, better web experience.

By clearing your cache after visiting secure sites, you ensure no one else can view confidential information you may have transmitted.


Remember to always sign out when you are finished accessing your account. Please signout if you are going to be away from your computer for an extended period of time. The signout will end your session and you will be asked to submit your unique email address and password the next time you log in.

Closing your browser entirely is also a good way of preventing others from accessing your information.

Have questions? Take a look at our FAQs to find the answers you need. We also welcome you to contact us if you have additional questions