At Voya, protecting your personal information and financial accounts is a top priority. As technology evolves, so do the methods used by fraudsters and cybercriminals. That’s why we continuously invest in safeguards designed to help secure customer information, detect suspicious activity and reduce the risk of unauthorized access.
Security is a shared responsibility. While we’re committed to protecting your information through our cybersecurity programs, technologies and processes, there are also important steps you can take to help keep your accounts safe.
Whether you’re looking to learn more about how Voya protects your information, strengthen your own security practices or get help following a potential security incident, you’ll find the resources you need here.
If you receive a suspicious email
Immediately forward any suspicious email bearing Voya’s name to: phishing@voya.com
If you experience an online security issue
Call your contact center to report an issue.
How we’re safeguarding your information
Our security measures are continuously evolving to match and anticipate threats. We understand that hackers find new ways to compromise security every day, so we take a proactive approach centered on people, process and technology to protect client data and the personal information of participants.
People: It starts with our highly skilled, tenured staff
- We employ a talented team of dedicated security professionals that take advantage of the latest security awareness programs for Voya’s workforce.
- We conduct ongoing phishing tests across the company, resulting in more than 85,000 tests annually, to train employees and contractors how to avoid phishing attacks.
- Our cybersecurity experts attend training to equip individuals and the organization with the most essential and cutting-edge cybersecurity training courses available.
Process: Applying applicable regulatory requirements
- We monitor daily account activities, flagging potential fraudulent behaviors for investigation.
- We participate in industry consortiums and government-sponsored organizations that help us stay informed of security risks and trends.
- We integrate industry best practice policies and controls including SOC 1, SOC 2 and ISO 27001 certifications.
Technology: Protecting your data from within using advanced layers of defense
- We receive automated notifications of threat intelligence from industry, government and cybersecurity firms.
- We utilize layers of security controls to provide maximum protection, including password requirements, multi-factor authentication and identity verification.
- We leverage predictive modeling to detect account attacks using behavior-based analytics.
Advanced fraud prevention and detection
A successful fraud prevention and detection program requires commitment of resources, which is why we use a variety of tools to prevent, detect and investigate potential fraud. Our Compliance, Corporate Special Investigations (CSI), Technology Risk and Security Management (TRSM), and Operations teams have partnered to prevent, detect and investigate suspected fraud.
Frequently asked questions
Protecting customer information is a top priority at Voya. We employ multiple layers of security designed to help safeguard sensitive data, monitor for suspicious activity, reduce the risk of unauthorized access and support the security of our systems and operations.
Voya uses security measures designed to help protect online account access and customer information. In addition, customers play an important role in maintaining security by using strong passwords, monitoring account activity and remaining alert to potential fraud attempts.
You can help protect your account by creating strong, unique passwords, enabling multi-factor authentication when available, regularly monitoring your account activity and being cautious of suspicious emails, text messages or phone calls requesting personal information.
Phishing emails often pretend to be from legitimate organizations and may create a sense of urgency, ask for personal information, request login credentials or encourage you to click a link or open an attachment. If something seems suspicious, do not engage with the message until it has been verified.
Forward the email to phishing@voya.com for review. Avoid clicking links, downloading attachments or sharing personal information until the message has been verified.
As a best practice, customers should be cautious of any unsolicited request for passwords, account credentials or other sensitive personal information.
If you believe someone has accessed your account or used your information without authorization, contact Voya as soon as possible so appropriate steps can be taken to investigate and assist.
Contact Voya immediately if you notice activity that appears unauthorized or inconsistent with your normal account usage.
Voya offers multiple protections designed to help secure workplace retirement accounts, including security controls, monitoring capabilities and customer-focused protections such as the S.A.F.E.® Guarantee.
Retirement accounts often contain significant long-term savings and personal data, making them attractive targets for cybercriminals. Maintaining strong security practices can help reduce the risk of fraud and unauthorized access.
Yes. Voya maintains a cybersecurity program designed to help identify, assess and manage cyber risks while supporting the protection of customer information and business operations.
Voya's cybersecurity approach is informed by industry standards and guidance, including Department of Labor cybersecurity best practices related to retirement plan security.
Voya uses a variety of security measures and monitoring practices designed to help identify potential threats, suspicious activity and unauthorized access attempts.
Visit Voya’s Security Hub for information about fraud prevention, identity protection, cybersecurity best practices and resources to help keep your accounts secure.
Products and services offered through the Voya® family of companies.