Cross River Bank Savings Deposit Account Agreement

Security & Safeguards · Context

Access Credentials and App define electronic access to the account

Access Credentials are the phone number, personal identification code and/or biometric data used to access the account on the App or Website. The App is the Affirm mobile application and/or the Affirm Website; the Website is the Affirm website that allows access to the savings account. Access is defined around these electronic channels.

Supporting quotations

Access Credentials - The phone number, personal identification code and/or biometric data used to access your Account on the App or Website.

App - The Affirm mobile device software application that allows you to access your Account on a mobile device and/or the Affirm Website that allows you to access your Account online.

Website - The Affirm website at

Qualifications & exceptions

• Biometric data is expressly included in Access Credentials.
• This packet only defines the terms; security duties and unauthorized-use liability appear in later sections.

Security & Safeguards · Permission or license

App and Debit Card instructions are authorized transactions; sharing credentials makes them binding

The depositor authorizes the Bank to establish the savings account and is responsible for all payments and activities directed through the App. If the savings account is linked to the Debit Card Account, the depositor is responsible for and authorizes all card-directed payments, transfers and activities. The App is for the depositor's sole personal use and login credentials must be protected and not shared. App instructions authorize the Bank to debit the account and remit funds. If another person is permitted to use the credentials, the depositor is responsible for their transactions and those transactions are treated as authorized regardless of who entered them. The Bank takes directions only through the App or, if linked, the Debit Card, and will direct the depositor to the App for activities such as ACH transfers. The authorization remains until revoked at least three Business Days before the scheduled transfer, through the Affirm Help Center or by calling (855) 423-3729.

Supporting quotations

E.9. Authorization. You hereby authorize the Bank to establish the Savings Account to hold your funds. You are responsible for all payments and activities on your Savings Account that are directed through use of the App. If your Savings Account is linked to your Debit Card Account, you are responsible for and authorize all payments, transfers and activities on your Savings Account that are directed through the use of the Debit Card. We provide the App for your sole and personal use and you must protect your login credentials. When we receive payment instructions from the App it will serve as an authorization for us to debit your Savings Account and remit funds on your behalf. You must not share access to your Savings Account. If you permit another person to use your login credentials, you are responsible for any transactions they authorize from your Savings Account. When you provide your credentials to another person, you also agree transactions initiated and/or requested through the App will be considered authorized by the Bank regardless of who entered such instructions through the App. You further agree that we will not take any direction from you with respect to the Savings Account, other than through the App or the use of your Debit Card if your Debit Card Account is linked to your Savings Account, and the Bank will direct you to App for any and all activities such as ACH transfers. You understand that your authorization will remain in effect until you revoke your authorization at least three (3) Business Days before the transfer is scheduled which you can do by contacting the Affirm Help Center at helpcenter.affirm.com or by calling (855) 423-3729.

Qualifications & exceptions

• Sharing credentials makes the other person's transactions binding on the depositor.
• The Bank does not take account directions outside the App or a linked Debit Card.
• Revocation must occur at least three Business Days before the scheduled transfer.

Security & Safeguards · Restriction or exception

Bank may block, freeze or delay transactions for listed risk, legal and account-status reasons

H.1 states that the Bank may decline or prevent any or all transactions in its sole discretion as permitted by law, and may refuse, freeze, reverse or delay a withdrawal, payment or transfer or remove funds to hold them pending investigation. The listed circumstances, introduced as non-exhaustive, are: a zero balance for at least 90 days; an inactive account; relocating outside the U.S. or a U.S. territory where the account is offered; attempting business use; involvement in a legal or administrative proceeding; conflicting ownership, control or activity information; suspected fraud, scam or financial exploitation even where the transaction was authorized; suspected illegal or fraudulent activity; compliance with federal, state or local law, sanctions or anti-money-laundering rules or related policies; or a reasonable belief that blocking is necessary to avoid loss or reduce risk.

Supporting quotations

H.1. Restricting Your Savings Account; Blocking and Delaying Transactions. There are many reasons we may decline or prevent transactions to or from your Savings Account, but we generally do it to protect you or us, or to comply with legal requirements. We may decline or prevent any or all transactions to or from your Savings Account in our sole discretion, as permitted by applicable law. We may refuse, freeze, reverse or delay any specific withdrawal, payment or transfer of funds to or from your Savings Account, or we may remove funds from your Savings Account to hold them pending investigation, including, but not limited to, in one or more of the following circumstances:

You maintain your Savings Account at zero balance for at least 90 days;

Your Savings Account is inactive;

You relocate outside of the U.S. or any U.S. territory where we offer the Savings Account;

You attempt to use your Savings Account for business purposes;

Your Savings Account is involved in any legal or administrative proceeding;

We receive conflicting information or instructions regarding Savings Account ownership, control or activity;

We suspect that you may be the victim of a fraud, scam or financial exploitation, even though you have authorized the transaction(s);

We suspect that any transaction may involve illegal activity or may be fraudulent;

We are complying in our sole judgment, with any federal, state or local law, rule or regulation, including federal asset control and sanction rules and anti-money laundering rules, or with our policies adopted to assure that we comply with those laws, rules or regulations; or

We reasonably believe that doing so is necessary to avoid a loss or reduce risk to us.

Qualifications & exceptions

• The list is expressly non-exhaustive.
• Suspected fraud or exploitation can justify blocking even an authorized transaction.
• The Bank acts in its sole discretion, as permitted by applicable law.

Not stated here

• The investigation process and any notice to the depositor are not described in this section.

Security & Safeguards · Procedure

Depositor must protect Access Credentials and devices and report unauthorized access

The depositor is responsible for protecting Access Credentials and the devices used to access the savings account, and must not share that information. The depositor should notify Affirm immediately if the account has been accessed without permission. The Electronic Fund Transfer Agreement contains further rights and responsibilities for unauthorized use.

Supporting quotations

J.1. Security. It is your responsibility to protect your Access Credentials and the devices on which you access your Savings Account. Do not share this information with anyone. Please notify Affirm immediately if you believe your Savings Account has been accessed without your permission. See the Electronic Fund Transfer Agreement for more information about your rights and responsibility in the event of unauthorized use of your Savings Account.

Qualifications & exceptions

• Credential and device protection is the depositor's responsibility.
• Unauthorized access should be reported immediately.

Security & Safeguards · User right or choice

Unauthorized EFT liability is capped at $50 with prompt notice or up to $500 with delay

The depositor must tell Affirm at once if Access Credentials or an access device is lost or stolen, an EFT was made without permission, or someone may transfer money without authorization. Telephoning is described as the best way to limit losses, and the depositor could lose all the money in the account. If Affirm is told within two Business Days after learning of the loss or theft, the depositor can lose no more than $50 for unauthorized use. If Affirm is not told within two Business Days and can prove it could have stopped the person with timely notice, the loss could be as much as $500. For unauthorized transfers shown on a statement, the depositor must tell Affirm within 60 days after the statement was mailed or made available electronically, or may not recover money lost after the 60 days if Affirm can prove it could have stopped the person with timely notice. A good reason, such as a long trip or hospital stay, extends the periods. Reports may be made by calling (855) 423-3729, writing to the Affirm address, or using the webform.

Supporting quotations

Tell Affirm AT ONCE if you believe that any Access Credentials or device you use to access your Savings Account has been lost or stolen, that an EFT has been made without your permission, or that someone has transferred or may transfer money from your Savings Account without your authorization. Telephoning is the best way of keeping your possible losses down. You could lose all the money in your Savings Account. If you tell Affirm within 2 Business Days after you learn of the loss or theft of your Access Credentials or device, you can lose no more than $50 if someone used your Access Credentials or device to access your Savings Account without your permission.

If you do NOT tell Affirm within 2 Business Days after you learn of the loss or theft of your Access Credentials or device, and Affirm can prove we could have stopped someone from using your Access Credentials or device without your permission if you had told Affirm, you could lose as much as $500.

Also, if your statement shows transfers that you did not make, tell Affirm AT ONCE. If you do not tell Affirm within 60 days after the statement was mailed to you or made available to you electronically, you may not get back any money you lost after the 60 days if we can prove that we could have stopped someone from taking the money had you told us in time. If a good reason (such as a long trip or a hospital stay) kept you from telling Affirm, Affirm will extend the time periods.

If you believe your Access Credentials or device have been lost or stolen, call Affirm at (855) 423-3729 or by writing to Affirm as soon as possible at Affirm, Inc., 14039 Puritas Avenue, P.O. Box 35909, Cleveland, OH 44135 or by using the webform at helpcenter.affirm.com.

Qualifications & exceptions

• Two Business Days' notice caps loss at $50; later notice can raise exposure to $500.
• Statement discrepancies must be reported within 60 days after the statement is sent or made available.
• A good reason such as a long trip or hospital stay extends the time periods.