Internet Banking Security
The Bank is serious about Internet Banking security and strongly recommends you to learn more about the protection and the security tips we have put in place for you.
| I. |
Be Vigilant of Fraudulent Websites and Emails |
|
- You are reminded to be vigilant of any fraudulent website in disguise of the Bank. Our Bank's website address is www.chbank.com.
- We NEVER send emails to customers asking for their account numbers, passwords or any other personal information.
- You are reminded NOT to access Internet Banking Services through hyperlinks embedded in any emails or Internet search engines.
- To logon to Internet Banking Services, it is always prudent to type our Bank's website address www.chbank.com into your browser or bookmark our bank page to "Favorite".
- If there is any unusual and suspicious pop-up screen and / or the computer response are unusually slow, you are recommended to log out from Internet Banking Services immediately. Scan the computer with the most updated virus definitions of virus protection software.
|
| II. |
What We Have Done to Protect You in Using Internet Banking Services Safely |
|
- We adopt the 128-bit Secure Socket Layer (SSL) encryption to assure the confidentiality of your personal and transaction data during transmission on the Internet.
- Our web servers are protected by firewalls to prevent unauthorized access.
- If you forget to logout from Internet Banking Services, your online access will be disconnected automatically after a short period of inactivity to prevent unauthorized transaction.
- If five consecutive incorrect logon attempts were detected, your Internet Banking Services would be suspended immediately.
|
| III. |
How to Secure Yourself in Using Internet Banking Services |
| 1. |
Take Precautionary Measures while You Are Using Internet Banking Services |
|
- Do not logon to Internet Banking Services at public areas such as cyber cafes or bars.
- Do not access Internet Banking Services through hyperlinks embedded in any emails or internet search engines.
- Ensure other Internet browser windows are closed before logon to Internet Banking Services.
- Ensure that you are connecting to our Internet Banking Services website https://www.ibanking.chbank.com.
- Make sure no one can see your Customer Reference Number, Logon Name and password when logging on to the Internet Banking Services.
- Always check the date and time of your last Internet Banking Services logon and contact us if you are in doubt.
- After logon to Internet Banking Services, please logout before visiting other Internet sites.
- Do not leave your computer unattended before logout.
- Always use the "logout" button to exit and close the browser upon finish using Internet Banking Services.
- Check your bank balance and transactions regularly and notify us immediately if you detect any errors or unauthorized transactions.
|
| 2. |
Safeguard Your Password, Customer Reference Number, Logon Name and Personal Information |
|
- Keep your password, Customer Reference Number, Logon Name and personal information secret.
- Do not disclose your password, Customer Reference Number, Logon Name and SMS-based one-time password (SMS OTP) to anyone (including bank staff and the police) via any means, such as email, over the phone or in person. Avoid disclosing your personal information such as HKID card number, telephone number and date of birth.
- Choose a safe password.
- Memorize your password and never write or record it down in any format.
- Change your password regularly or in case it may have been compromised.
- Use different passwords for different services.
- Do not allow anyone else to operate your Internet Banking Services account.
- When you are using others' computer to perform transactions, ensure that you have cleared the cache after logging out for assurance your password is not copied or stored in the computer.
- Do not permit the mobile phone which is used for two factor authentication to come into the possession or control of any other person or leave it unattended.
- Do not download or install programs received from SMS in your mobile phone.
- Protect your computer with password if the computer is left unattended.
- Keep updating us with your latest contact information.
|
| 3. |
Secure Your Computer |
|
- Ensure you are using supported versions of OS and applications by suppliers, and enable the auto-update feature to obtain and apply security patches regularly from trusted sources.
- Install a personal firewall, anti-spyware and anti-virus software to detect, real-time, any intrusions, spyware and viruses on your computer, and enable the auto-update feature to obtain the latest spyware and virus definition files.
- Avoid downloading or installing programs, files or emails from unreliable sources.
- Disable the "Auto Complete" feature of your browser. This feature, if enabled, memorises the data (including online passwords) that you input automatically.
- Do not share computers. If you must share, set your own password to block access to your accounts.
- Disconnect from the Internet when you are not using it.
|
| IV. |
Common Online Fraud |
| 1. |
Advance Fee Scam |
|
This kind of fraud involves dubious letters and email messages offering the recipient a generous reward for handling a large lump sum of funds. These funds often claimed to be anything from corporate profits, bribes, unspent government funds or unclaimed funds belonging to a deceased person. Sometimes, to convince the recipient that the funds do exist, the cheater even create a bogus bank website that shows a huge credit balance of a specified account.
The transactions typically require the recipient(s) to pay an advance fee to complete the deal. However, such fee will be lost forever. Also, the recipients' personal details or banking information may be used in other types of frauds.
|
| 2. |
Lottery Fraud |
|
This kind of fraud involves dubious letters and email messages congratulating the recipient(s) of winning a prize in a lottery. To obtain the prize, the recipient has to provide his / her personal particulars and bank account details. The recipient may also be requested to pay a handling fee to complete the transaction. However, such fee will be lost forever. Also, the recipients' personal particulars and banking information provided may be used in other types of frauds.
Online frauds are emerging to an endless stream, customers are advised to safeguard their personal and banking information at all time.
If you suspect yourself fall victim to any online frauds, please report to the police immediately!
|
| V. |
Frequently Asked Questions |
| 1. |
How do I choose a safe password? |
Do's |
Don'ts |
- Do choose a password that is different from your Customer Reference Number, Logon Name or account numbers.
- Do set a difficult-to-guess password.
- Do ensure that your password is easy to remember only by yourself.
|
- Do not use your date of birth, HKID card number, telephone number or any combinations of your English name as your password.
- Do not use two or more consecutive identical characters, e.g. "88", "aa", etc.
- Do not use sequential numbers or characters, e.g. "1234", "abcd", etc.
- Do not share the same password you have used for accessing other web services.
|
| |
|
| 2. |
How do I delete the cache information in Internet Explorer upon finish using Internet Banking Services? |
|
- Click "Tools" at the top of the browser and select "Internet Options".
- Select the "General" tab and then the "Temporary Internet files".
- Click the "Remove File" button.
- Click "OK" button.
|
| 3. |
How can I be sure that I am connecting to the Bank's Internet Banking Services website? |
|
You can click the yellow padlock icon at the bottom right corner of your browser to examine the digital certificate of our Internet Banking Services website. The Digital Certificate is issued by Digi-Sign (chained to Cyber Trust Signing CA) and the website address should be shown in the certificate as www.ibanking.chbank.com.
|
| 4. |
What is 128-bit Secure Socket Layer (SSL)? |
|
128-bit SSL is a cryptographic protocol. It provides strong cryptographic capability to encrypt your personal and transaction information during transmission on the Internet such that no unauthorized parties can access and read the information.
|
| 5. |
What is two-factor authentication? |
|
Two-factor authentication uses two different factors to authenticate a user identity. Your physical possession (such as Digital Certificate and mobile phone) is difficult to be stolen on the Internet. Therefore, using two-factor authentication to conduct high-risk online transaction offers a better security protection. |
| 6. |
Why I need to install a firewall? |
|
A firewall protects unauthorized intrusion into your computer from the Internet and thus it can strengthen the online safety. |
| 7. |
Where can I obtain additional information about using the Internet Banking safely? |
|
|
| 8. |
How do I contact the Bank for any enquiries? |
|
Please contact our Customer Services Hotline (852) 3768 6888 or send email to customerservice@chbank.com. We will answer your enquiries as soon as possible. |
