ONLINE BANKING
We know that protecting your personal online and account information will help you achieve your financial goals. Our fraud prevention teams use technologies and industry-tested processes and procedures to provide layers of defense to protect you against electronic fraud. Please read to learn more about what we are doing to protect you and how you can protect yourself.
China Bank Online implements TLS (Transport Layer Security) encryption technology that will protect your confidential information. You will know that you are using encryption if the website address begins with https:// and you see a closed padlock beside the URL.
The Bank has put in place security controls that are consistent with industry best practices to protect our online banking infrastructure. Among these controls are state of the art firewalls, intrusion prevention systems and other security technology that aims to safeguard against potential malicious activities.
For your online financial transaction to proceed, China Bank Online Banking requires you to enter your nominated ID and your transaction password (separate or different from your Login password). This is for your added protection since every financial transaction is being duly authenticated and authorized.For your Auto-Credit Arrangement (ACA), Transfer to 3rd Party Accounts, Inter-Bank Fund Transfer, and PESONet transactions initiated in China Bank Online Corporate to proceed, you will be required to enter the system generated One Time Password or OTP, which is different from your login OTP.
To reduce the risk of unauthorized access to your account, our system will automatically log you off from your online session after a period of inactivity.
Aside from your nominated User ID, China Bank Online Banking requires a strong password. For China Bank Online Corporate, aside from your comapny's Corp ID, your nominated User ID and password, China Bank Online Corporate requires you to enter the OTP to complete the login process.
To ensure that funds are transferred to intended recipient, enrollment of the transferee account is required for Transfer to 3rd Party Accounts, Inter-Bank Fund Transfer, and PESONet.
While we work constantly to make sure your online banking transactions are secure, we know that unauthorized online access may occur. We are committed to investigate and provide you our resolution to your concerns without delay should that happen.
Effective Online Fraud Protection can only be achieved if both you and the bank help make sure your information remains secure:
For Customers in the provinces, dial our domestic toll-free numbers:
For Customers outside the Philippines, dial our international toll-free numbers:
Keep yourself protected by checking our suggested DO'S and DONT'S (Protect Yourself).
Achieving the highest level of security requires your committed effort to protect your personal information.
To ensure that your account information remains secure:
Social Engineering is an act of influencing people to reveal confidential or their personal information to gather even further information or gain illegal access to a system and the information inside that system for the end purpose of committing fraud.
There are several types of social engineering. The most common of which are pretexting (use of invented scenarios), baiting (use of free item to attract victims), quid pro quo (similar to baiting but uses service instead of an item), tailgating (or "piggybacking" - gaining access to a restricted area by closely following one who has legitimate access) and phishing.
Phishing refers to fraud emails sent by syndicates to customers with the message that their China Bank Online account is either locked or suspended or the system has been upgraded and customers have to unlock or reactivate their accounts by clicking on a link provided. Once customers click on the link, they are led to a site that asks them to input their user name and passwords which the syndicate then uses to make unauthorized transfer from the account.
The best way to protect yourself against social engineering is to always be AWARE.
Ask yourself first before you post anything in social networking sites―birthdays, addresses, contact numbers, family, job, schedules, travels, location, affiliations, "likes" or anything that can be used for identity theft, whereabouts tracking or fraud perpetuation.
Watch out for unexpected/unexplained/unusual calls or emails. Confirm authentiicity of anyone with whom you communicate―get contact number from your card, statement, etc., and be wary of the information you share.
Always check your privacy settings on social networking sites.
Refrain from clicking on links embedded in emails and be particularly conscious of embedded links, emails or text messages that ask for password verification.
Ensure that your personal information are disclosed only to those whom you intend to share it with―people or organizations that legitimately require these information.