 |
|
 |
Protecting You From Phishing Scams Online fraud such as phishing scams has been rampant around the world causing undue financial losses and distress that can be avoided with proper education and care. At Hong Leong Bank, we are making it a priority to protect you, our valued customers from such threats. With your online security in mind, we hope to equip you below with practical tips on how you can prevent yourself from being a victim. |
 |
Phishing – What is that? Phishing is an automated form of social engineering used by fraudsters to deceive one to give away sensitive information. The initial phishing email is designed to entice the recipient to open the email and click on the link provided. The fraudsters use multiple methods to do this including enticing subject lines, forging the address of the sender, using genuine looking images and text and disguising the links within the email. |
SPECIFICALLY FOR HONG LEONG CONNECT USERS
Click on the padlock and check that the web certificate is issued to s.hongleongconnect.my before proceeding to log in.
Internet Explorer
Sample image which you have selected
1. ALWAYS MANUALLY ENTER www.hongleongconnect.my into your internet browser.
2. CONFIRM THE AUTHENCITY of the login page by observing that the address bar shows https://s.hongleongconnect.my/rib/login/login.do and that there is a padlock icon next to it.
Click on the padlock and check that the web certificate is issued to s.hongleongconnect.my before proceeding to log in.
Internet Explorer
Mozilla Firefox
Chrome
Safari
Opera
3. ENSURE YOUR CORRECT SECURITY PICTURE APPEARS before entering your password.
Sample image which you have selected
4. SEEK VERIFICATION directly with Hong Leong Bank by either contacting your bank's customer service or branch number that you normally use when in doubt.
HOW TO PROTECT YOURSELF FROM PHISHING SCAMS
1. ALWAYS BE VIGILANT in keeping your personal and financial information secure as well of latest Internet threats through Malaysian Computer Emergency Response Team (MyCERT) at http://www.mycert.org.my.
2. BE SUSPICIOUS of any unsolicited emails or calls that ask for confidential information no matter how real they may seem. If in doubt about the validity of a particular message, contact the company that supposedly sent you the message to make sure it's genuine.
3. NEVER DISCLOSE your personal information such as User Name, Password, Transaction Authorised Code (TAC), MyKad, Banking Account or Card Numbers via emails or pop-up windows.
4. DO NOT CLICK on links within emails / SMSes / pop-ups. Always type in the web address yourself.
5. LOOK OUT for the padlock icon on web sites that require personal information. Click on it to view the Web Certificate to verify the authenticity of the page.
6. MANAGE YOUR PASSWORDS WISELY - avoid choosing passwords that are easy to guess, refrain from writing them down on paper and ensure that you change them frequently.
7. CHECK AND MONITOR your transaction records for any suspicious transactions.
8. BE MINDFUL ON HOW YOU DISPOSE / SAFEKEEP your printed statements. Shred them or file them securely.
9. AVOID USING PUBLIC COMPUTERS when performing online transactions. Use your personal computer instead.
10. DISABLE THE AUTO-COMPLETE & AUTO-SAVE FUNCTION for user names and passwords. If you are using Internet Explorer, disable it by clicking Tools > Internet Options > Content > Auto-Complete. Uncheck option "User names and passwords on forms" and click on "Clear Password". Click "OK" to save your settings. In the event being prompted, do not tick the "remember this password" box.
11. ALWAYS CLEAR YOUR INTERNET CACHE after you have logged out from an online session. If you are using Internet Explorer, you can do so by clicking Tools > Internet Options > Delete Cookies and Delete Files.
12. INSTALL COMPUTER SECURITY APPLICATIONS such as personal firewall, anti-spy and antivirus softwares. Update the versions and scan your computer regularly.