At OCBC Bank, we have implemented measures to safeguard your account information on our servers. However, to ensure that your online security and account information are not compromised via your computer or mobile device, please adopt the following OCBC Internet Banking Service security guidelines:
1. Please only access and use the OCBC Internet Banking Service (including the OCBC mobile banking services) on computers and mobile devices installed with the latest operating system security patches, anti-virus, anti-malware and firewall software.
2. Please update the anti-virus, anti-malware and firewall software with security patches, updates, signatures, and/or to newer versions on a regular basis.
3. Log off the online session when the session is no longer required.
4. Do not install software or run programs of unknown origin.
5. Delete junk or chain emails.
6. Do not open, run or install email attachments from strangers.
7. Do not disclose personal, financial, bank account or credit/debit card information to strangers or little known or suspicious websites.
8. Do not use a computer or device which cannot be trusted or which you are unsure is safe to use.
9. Do not use public or internet cafe computers, or your computer or mobile device when it is connected to unsecured or publicly available WIFI, to access online banking or perform financial transactions.
10. Remove file and printer sharing in computers, especially when connected to the Internet.
11. Make regular backup of critical data.
12. Use encryption technology to protect highly sensitive or confidential information.
13. Please safe-keep your ATM/credit/debit card(s) and ensure your card PIN is kept confidential at all times and not revealed to anyone.
14. Please turn on the password protection feature in your computer/mobile device at all times. This protects your device from unauthorised use. Please refer to the computer's or device's user guide on how to do so.
15. Do not access online banking or perform financial transactions using 'jail-broken', 'rooted' computers or mobile devices (e.g. where the operating system has been tampered with) or on any computers or mobile devices that utilise 'beta' versions, non-officially released versions or other versions of an operating system that are not designed for use with the computers or mobile devices in question, as it increases the risk of malicious software infection. If in doubt, please check with your service provider.
16. You are advised to always be on the alert for phony websites, suspicious emails, or mobile messages (which may contain malicious software, URLs, shortened URLs, requests for sensitive information, or action to enter OTP into online banking system) purporting to be from OCBC Bank. If you are aware of or have received such communication, please report immediately by contacting us by calling our Customer Service Hotlines at 1800 363 3333 or by contacting one of our branches during its opening hours.
- The website URL should bear the domain name of 'https://internet.ocbc.com/internet-banking/'. Check that OCBC Bank's website address changes from 'http://' to 'https://' and a security icon that looks like a lock or key appears when authentication and encryption is expected.
- Check the authenticity of OCBC Bank's website by comparing the URL and the OCBC Bank's name in its digital certificate (e.g. by clicking the lock/key security icon on the URL bar and viewing certificate information) or by observing the indicators provided by an extended validation certificate.
- Do not reveal your OCBC Bank Internet Banking Service Access Code and PIN to a website other than OCBC Bank website with URL stated above.
18. It is important to protect yourself against any forms of online theft of your Access Code and PIN. The Access Code and PIN which we issue to you uniquely identifies you as one of our valued customers.
19. Please ensure the following to safeguard and protect your account information:
(a) PINs should be 6 digits. Do not repeat any digit more than once.
(b) PINs should not be based on Access Code, personal telephone number, birthday, any other personal information or contain information that is easy to guess or that is obvious.
(c) PINs must be kept confidential and not be divulged to anyone.
(d) PINs must be memorised and not be recorded anywhere.
(e) PINs must be changed regularly, or when there is any suspicion that it has been compromised or impaired.
(f) The same PIN should not be used for different websites, applications or services, particularly when they relate to different entities.
(g) Please do not select the browser option for storing or retaining user name/ID and password.
(h) Please do not allow anyone to keep, use or tamper with your 2FA (2nd factor authentication) security token. Please keep your token secure at all times.
(i) Please do not reveal the OTP generated by the 2FA token to anyone.
(j) Please do not divulge the serial number of your 2FA token to anyone.
(k) Please check your bank account information, balance and transactions frequently and report any discrepancy.
20. Please personally enter the domain name of the bank in your browser to log onto OCBC Internet Banking Service. You should not accept links or redirections from emails, mobile messages, other websites or media for the purpose of logging onto OCBC Internet Banking Service.
21. OCBC does not make unsolicited requests for your personal, financial, bank account or credit/debit card information, or unsolicited requests that you log in and verify account validity, through e-mail, mobile messages or on phone unless you have initiated the contact. We will under no circumstances ask you to reveal your PIN.
22. Your usage of OCBC Internet Banking Service is subject at all times to the Terms and Conditions governing Electronic Banking Services.
23. Take extra caution in safeguarding your mobile device, which may be more prone to being misplaced/lost/stolen than your computer.
24. You are advised to only download the OCBC mobile banking application from official OCBC-designated sources (such as Apple App Store or Google Play store).
25. Mobile applications should only be downloaded from official app stores. Before you download and install any mobile applications from official app stores, please determine the legitimacy of the mobile application and ensure it is not malicious software. If you have any doubts over the legitimacy of the mobile application, please verify with the owner and/or other reliable sources before downloading and installing.
26. If you are using your mobile phone to access OCBC Mobile Banking OneTouch service or receive SMS One-Time Password (OTP) as your 2FA to access online banking, please notify the bank immediately in the event of loss/theft of your mobile device, and/or if you suspect there is unauthorized access to your account.
27. Do not access online banking using jail-broken or “rooted” mobile devices.
28. Be wary when you are asked to grant excessive/ unusual permissions to a mobile app.
29. Do not act on any instructions provided in unfamiliar pop-up screens, mobile messages (e.g. SMS, WhatsApp), or emails from suspicious sources which prompt you to provide your banking login credentials or credit/debit card details.
30. Please update us immediately when there is a change in your contact details such as mobile number and e-mail address, for the purposes of receiving SMS alerts or e-mail notifications for online banking transactions and activities. Please read the SMS alerts or email notifications carefully and ensure that these SMS alerts or email notifications are sent by OCBC Bank.
31. Please update us immediately when you change your mobile number for receiving One-time Password (OTP) via SMS.
32. Please inform us immediately if:
You may do so by calling our Customer Service Hotlines at 1800 363 3333 at any time, or by contacting one of our branches during its opening hours.
- you are aware of any suspected fraud, including any compromise or loss of your security device or security details; or
- you receive SMS or e-mail alerts for transactions which you did not perform; or
- you are alerted on change of daily withdrawal limit or add beneficiary for transfer to an account which you do not know of or did not perform.
33. If you notice any unusual/unauthorised transactions, please change your PIN and notify us immediately. It is important that you inform us immediately by calling our Customer Service Hotlines at 1800 363 3333 or by contacting one of our branches during its opening hours.
34. As a user of OCBC Internet Banking Service (including the OCBC mobile banking services), you have the right to (1) suspend your access to the OCBC Internet Banking Service immediately should you suspect any unusual activity and/or unauthorised access, (2) terminate the relevant service, (3) request for a new set of OCBC Internet Banking Service PIN and (4) obtain information from the Bank regarding your online transactions. You may do so by calling our Customer Service Hotlines at 1800 363 3333 at any time, or by contacting one of our branches during its opening hours.