Rules for safe use of Internet banking

• Do not disclose your user name, password or pin-code
• Do not leave a record of your user name in Online Banking in places accessible to other persons. It is recommended not to write down the data, but to memorize it. It is recommended to delete all carriers of this information.
• Do not access your personal Internet banking page in dubious places, e.g. in Internet cafes to avoid leakage of your data
• Periodically change your password (at least once every three months).
• Immediately inform the Bank if you suspect that someone has learnt your identification data for entering the Internet banking system.
• Immediately inform the Bank if you have detected suspicious transactions
• Purchase an E-token to ensure greater security. E-token is a device (in the form of a key fob) that provides additional security by generating one of the system access passwords each time anew (paid once upon connection).
• Please note that the system allows 3 incorrect entries of identification data into the system. In case of the 4th attempt to enter an incorrect password and/or PIN-code and/or E-token-password (when using E-token), the Bank's system considers it as a breach of security system, as a result of which your Internet identification number will be blocked.

Please pay attention to the following information:

• “Dos-Credobank” OJSC NEVER REQUEST your personal information by e-mail, as it is against security considerations.
• Please pay attention to messages about suspicious transactions. For example, if you are informed that money has been deposited into your account that you did not expect, this is enough to suspect a fraud attempt.

We advise you to protect your payment cards as you protect your cash and property. Your compliance with security rules will help to reduce the fraud risk on your card.

• When withdrawing cash from the ATM, you should make sure that the ATM serves cards of the payment system you need (usually there are stickers on ATMs informing customers about the cards of the payment systems the ATM serves).
• Keep in mind that cash withdrawal at ATMs of other banks is subject to a commission fee, please study the Bank's tariffs in detail.
• Before carrying out an operation via ATM, it is necessary to assess the situation. If you see any external signs of ATM malfunction, if you find any foreign devices near or on the ATM, inform the bank servicing this ATM and use another ATM.
• Do not use those ATMs, the screen of which displays a message with a request to switch to other ATMs. Banks do not put such messages.
• In all cases, as far as possible, use ATMs with which you are already familiar. In other cases, choose ATMs in well-lit and convenient locations.
• If you are going to use an ATM located in a special room, open the door of the room with your card by placing it in the access device. These devices should not require you to enter a PIN code. If you find an access device that requires entering a PIN-code, do not use it.
• Make sure that people standing behind you in the queue cannot see your PIN-code. Cover the ATM keyboard with your hand from strangers when entering your PIN-code.
• If you feel that the ATM is not functioning properly, press the “Cancel” button, take your card and use another ATM.
• Never use force to insert a card into the card slot (slot of the receiver).
• Do not let anyone distract you when you are at the ATM.
• Pick up your cash and card after completing the transaction. Do not count the money you receive at the ATM – remove the cash, card and receipt immediately.
• If your card gets stuck in the ATM, beware of people offering to help you at that moment. You should immediately notify your bank to block your card and the bank branch staff, if the ATM is located in a branch.

Recommendations on necessary security measures:

• Read the Card Terms of Use provided to you by the bank. Contact the bank's employees if you do not understand any of the Rules.
• Never leave your card unattended, keep it in a safe place.
• When paying for purchases with a payment card, make sure that all transactions are made in your presence. Do not allow the seller/waiter to take your card to another room, demand that transactions are carried out in your presence.
• If you refuse the purchase, or if the receipt or slip was made in error, ask that the damaged receipt /slip be destroyed in your presence, and take the second copy with you and keep it for a month (until reconciliation with the card account statement).
• If possible, do not use your card on the Internet, do not transmit your card details (card number, special CVV code – Card Virtual Verification, expiry date) by e-mail.
• Never write down the PIN-code (personal identification number) on the card. PIN-code should be memorized. If you do decide to write down your PIN-code, it is better to do it in an encrypted form so that it cannot become known to anyone but you, and never carry it with the card.
• Never disclose your PIN-code, you are not obliged to tell it to anyone: neither to bank employees, nor to representatives of law enforcement agencies, nor to cashiers of retail outlets. Only the cardholder should know his/her PIN-code.
• In case of loss or theft of the card, you should immediately contact the bank or the Authorization Centre, so that the bank employees could block the card in order to avoid fraud.
• Never give your card to a third party: a friend, spouse, especially if they are travelling abroad. If the ATM withdraws the card for any reason, you and your family may have problems.
• Control the use of additional cards by your family members. You are fully responsible for all transactions made with additional cards.
• Check your account statement regularly. The sooner you detect and report your suspicious transactions, the better. There are strict deadlines for making claims, within which you and the bank can do something about it. Keep your receipt and check them against your card account statement. Check the balance of your card account more often.
• You can ask the bank to set a daily or monthly spending limit at your discretion. This will further protect your account from fraud.
• In case you receive an e-mail message from the bank asking you to provide any personal data, immediately contact the bank by the phone number you already know and make sure that the bank has sent such a message.
• In case of suspicion that your card details have become known to unauthorized persons, immediately notify your bank.
• In case of card withdrawal at the bank or retail outlet, the cashier must draw up a Statement indicating the date, time and reason for card withdrawal. Get your copy of the Act from the cashier with the signature of the cashier who withdrew the card. Then urgently contact the bank or contact centre.

HELPFUL ADVICES ON HOW TO USE A PAYMENT CARD

• Keep the card in a purse or in a special case.
• Protect the card from bends, scratches and other mechanical impacts and damage.
• Do not keep the card near mobile phones, TV sets, computer displays, refrigerators, video and audio equipment and microwave ovens.
• Do not keep the card in a bag or purse with magnetic clasps.
• Protect the card from water and prolonged exposure to sunlight.

1. Physhing

Phishing is the sending of fake emails to lure Internet users to copies of real websites (online services, banks and other places where users can leave their personal information). In these emails, users are usually asked to visit a web page where, in turn, they are asked to enter personal information under the pretext of updating this information. However, what appears to the victim to be a web page of a reputable company is actually an imitation created by scammers. Fraudsters can easily obtain the payment card number, PIN code, and other personal information.

The data obtained through phishing can be used to make purchases in online shops, as well as to receive funds through authorization by mail or phone. The main danger of this type of fraud is that the PIN code is used to withdraw money from the card, and the result of such operations is almost impossible to dispute. It is important to know that banks never ask for the codes and passwords they have issued to customers. Banking infotech systems are very accurate and reliable, so customers should not believe claims that “we are missing something” or “we want to check something”.

We kindly ask you not to give in to such provocations and not to follow the lead of fraudsters. Every time you receive a letter from a bank, think whether it could really be the sender.

2. Skimming 

Currently, the most common method of fraud in ATMs worldwide is skimming – copying the magnetic stripe of a card, with further recording of its data on another card. Having information about the payment card, fraudsters then falsify cards and, knowing the PIN code, withdraw money from a large number of bank accounts, in a short time, directly through ATMs. The devices used by fraudsters to read payment card information (card number and PIN code) are installed directly on the front of the ATM and disguised as ordinary parts of the ATM. For example, a reader that copies the card's magnetic stripe is placed on top of the card entry slot.