Deutsche Bank db easynet. Safe Use of Internet Banking System db easynet

Transcription

1 Safe Use of Internet Banking System

2 Table of content Introduction... 3 General Safety Rules... 3 Safe computer, tablet, smartphone... 3 Browser Configuration... 4 Safe Logging-in... 5 Customer Identification Number (NIK) and Access Code Protection... 7 INstruction Autorization... 8 Security measures applied to the system... 8 Customer Identification Number (NIK) and Access Code... 8 SMS passwords... 8 TAN Card... 9 Virtual keyboard... 9 Emergency situations /10

3 Introduction Deutsche Bank places your safety in the centre of attention. Respectively, we protect the funds you entrusted to us by taking recourse to the state-of-art and highly effective security measures. Your security online also depends on you. Please - see the instructions that will help you enjoy our services in a safe manner. This manual aims to introduce you the basic principles of safety and to show you the security measures that will better protect your computer, tablet and smartphone against possible attempts to capture confidential data. General Safety Rules Safe use of the system depends largely on you! Safe computer, tablet, smartphone Keep your device safe! Adequate set-up of the device and software installed in it makes one of the pivotal steps prior to use of the Internet Banking system. Below you will find detailed information on how to protect your computer, tablet and smartphone. 1. Use a licensed operating system with regular updates provided by the manufacturer to access your Internet Banking. 2. Install only licensed software, do not install software from unknown sources. 3. Protect your computer, tablet and smartphone with anti-virus and anti-spam software. 4. Use a personal firewall - it will allow you to better protect yourself against interference from the outside and restrict access to the data on your device. 5. Be sure to regularly update your operating system and software installed on it, including in particular anti-virus software (including virus signature database). 6. Remember to run a cyclic anti-virus scan of the entire system according to the anti-virus software manufacturer's recommendations. Protect your mail system against incoming spam. Remember that your is one of the most popular ways of access for viruses and phishing designed to steal your confidential data (such as NIK and Access Code). 7. Do not open attachments that you did not expect to receive (or the messages the title or sender of which makes you suspicious of attempted fraud). 8. Remember that the Bank never sends s which prompt you to install additional software (update or revealing sensitive data). 9. Access the Internet Banking only on trusted devices. It is not recommended to log in to the system of public facilities (eg. in Internet cafes) and through the public WiFi network (the so-called hot-spots). 10. Your web browser should be set up according to the Bank recommendations (see "Browser Configuration"). 11. Never leave the device unattended at a time when you are logged on to the Internet Banking system. 12. Once you have completed your transactions conducted via the make sure to log out of the system. To log out of the use the "Log out". Never close down the system by closing the tab or browser window. 3/10

4 Browser Configuration Protect your browser! 1. Use the latest versions of Internet browsers. We recommend upgrade your web browser to the latest release available on the market. The system supports the following browsers Web browser name and version (1) mobile device PC / laptop Microsoft Internet Explorer 10.x n/a - Microsoft Internet Explorer version 11.x n/a + Microsoft EDGE n/a + Microsoft Internet Explorer Mobile version11.x + n/a Mozilla Firefox version 46.x n/a + Mozilla Firefox Mobile version39.x + n/a Google Chrome version 50.x n/a + Google Chrome Mobile version 44.x + n/a Apple Safari version 9.x n/a + Apple Safari Mobile version 9.x + n/a (1) Available at: You can find information about the version of your browser and protocol encryption by selecting the "Help" option from the menu and next depending on your browser : Microsoft Internet Explorer Internet Explorer information Google Chrome Google Chrome settings Google Chrome information Mozilla Firefox About Mozilla Firefox Apple Safari Safari 2. Before logging, check whether your browser supports cookies. Cookies are text files that are stored in the terminal equipment (eg. phone, tablet or computer) used by the user. The are intended to access the Bank's website and the system via the Internet. Cookies contain no software and are not software themselves. Accordingly, they cannot contain a virus nor be virus. Restrictions on the use of cookies may affect some of the functionalities available on the Bank's website and in the db easynet system, while blocking the automatic handling of cookies in your web browser configuration will desactivate access to the system. The Cookies Policy contents are available in open access format on the Bank's website. 3. Never agree to the browser recording your NIK or the Access Code. The Bank recommends that you disable the store passwords function and forms in a Web browser. If the store passwords function and forms remain on, NIK and Access Code are automatically entered when you log into the db easynet system. Disabling this option prevents third persons from logging in to the system. Microsoft Internet Explorer Menu "Tools" "Internet Options" "Content" tab "AutoComplete" section "Settings" - uncheck the "User names and passwords in the forms" fields. Google Chrome Menu "Google Chrome Settings" "Settings" "Privacy" "Passwords and forms" - uncheck the "Offer to save passwords when I go online "field. Mozilla Firefox Menu "Tools" "Options" "Security" "Password" uncheck the "Store passwords for sites" field. 4. Check for server certificate revocation, this resulting in an open padlock symbol displayed next to website address or a change in the background in the address bar into red. Do not save encrypted websites on the disk to prevent unauthorized redirection to other sites. 5. To ensure the correct browser operation, delete temporary files which are stored in the cache. Microsoft Internet Explorer Menu "Tools" "Internet Options" "General" tab, select "Browsing history," click "Delete" - select "Delete cookies..." and "Temporary Internet Files" Menu "Tools" "Internet Options" "General" tab, select "Browsing history," click "Settings" in the "Check for newer versions of stored pages" select "Every time I visit the webpage". Mozilla Firefox "Tools" "Delete browsing history" select the option "Cookies" and "Cache" and click "Clear now". You can also specify the period to be deleted from the cache. 4/10

5 Google Chrome Menu "Google Chrome Settings" "Tools" "Delete browsing history " - select the option "Empty the cache" and "Delete cookies and other site data" and press "Clear browsing data". You can also specify the period to be deleted from the cache. 6. Do not ignore the warnings displayed in the internet browser window. The new versions of popular browsers provide special tools to check whether the website displayed is not intended to steal confidential information. These are the so-called anti-phishing filters. They do not give full guarantee that the site is 100% safe. Nonetheless, they allow you to reduce the risk of identity theft. The Bank recommends that you activate the antiphishing protectino: Microsoft Internet Explorer "Tools" in the "Phishing Filter" option and select "Turn on automatic checking of Web". Mozilla Firefox "Tools" "Options" in the "Security", tab select the option: "Warn when sites try to install addons"; "Block sites reported as posing a threat" and "Block sites reported as attempts of online fraud". 7. Use the navigation from the system menu to move between the individual functions. Do not use the "Back" or "Next" in the browser window. 8. Never use the copy function while completing the transaction data. Safe Logging-in Log in safely! 1. Always log on via the website: or enter the address in the browser window manually 2. Never log in via a link received in an Never use search engines to find the login site for the Bank transaction system. 4. Remember that the Bank never asks a person loggin in for: Providing the SMS code which has been sent to user's mobile device. Providing debit / credit card data (card number, CVV, expiration date of the card, PIN). Downloading certificates or additional software on computers or mobile devices. 5. Communication between the User device and the Bank server is encrypted by the TLS protocol. The secure (encrypted) connection is confirmed by a URL starting with https (instead of the standard http), where "s" stands for "secure" - secure. Make sure that the web address starts with "https" rather than "http". Check for a locked padlock symbol being displayed on the login site in the address bar or at the bottom of the site. The latest browser displays information about the institution, for which the certificate was issued next to the address bar. Screenshot made in Microsoft Internet Explorer browser. Screenshot made in Chrome browser. 5/10

6 Screenshot made in Mozilla Firefox browser. Double-click the padlock to verify that the displayed certificate is valid and has been issued by VeriSign for Deutsche Bank AG. Screenshot made in Microsoft Internet Explorer browser. Check the validity of the certificate. To this end, click on the above mentioned closed padlock symbol. This following is the valid certificate for : Screenshot made in Microsoft Internet Explorer browser. 6/10

7 Screenshot made in Microsoft Internet Explorer browser. Should you happen to notice one or more of the following symptoms: The padlock in the site address bar fails to be locked or shows with the warning symbol. The certificate is invalid or has been issued to institutions other than Deutsche Bank AG. The Certificate print - "Fingerprint" (Thumbprint, Fingerprint) should be consistent with that shown above. Prior to or following the log-in the Internet Banking site looks different, or presents other messages than usual. The process of logging in to the looks different than usual (other windows appear, it takes longer than usual, there are requests for additional information). Abort logging in and contact a Bank employee forthwith! Report the above-referred to situations and any case of non-compliance with the date and time of logging in to the system to a Bank employee forthwith (by calling , * or visit your local Deutsche Bank branch office). * The fee for calls by the applicable rates of the operator. 6. While entering the Customer Identification Number and Access Code pay attention to whether people are not watching the entered data. 7. Once you have logged in to the system, check whether the date of last login (information available in the upper right corner of the screen of the system) is correct each time. 8. Once you have completed transaction conducted in the system, always use the "Logout" option located in the upper right corner of the system screen. Customer Identification Number (NIK) and Access Code Protection 1. Never disclose data used to log into the system (NIK, Access Code) to a third party. 2. If you suspect that someone may know your Access Code - introduce the changes forthwiths. You can do this directly in the system. 3. Change your password from time to time. Make sure that it contains no information which may be in any way linked with you (eg. date of birth, name, etc.). The Bank recommends changing your password every 90 days. 4. Send no sensitive data (such as NIK, Access Code) by Try not to save NIK and the access code either in paper form or electronic form. However, if it is necessary, however, this type of record - use the software to store passwords offered by well-known suppliers. 6. Do not save sensitive data permanently in the memory of web browsers (see Browser Configuration). 7/10

8 Instruction Autorization The instructions performed in the system are protected with popular and proven solutions, such as convenient SMS passwords or TAN code card. To safely use them, remember the basic safety rules. 1. Prior to confirmation of transactions accurately verify the correctness of the instructed transaction (eg the account number of recipients). 2. Once you have received the SMS password, compare whether the transaction data contained in its content are in line with your submitted instruction. 3. Determine the limits of the transfer operations. Security measures applied to the system Customer Identification Number (NIK) and Access Code User authentication when logging into the system follows the entrance of a unique Customer Identification Number and Access Code to the system. Customer Identification Number (NIK) a 10-digit number which you received in the Starter Package, submitted once you have entered into the agreement for the provision of electronic banking services.. Access Code an 8-digit code known only to you which was generated by you during the first connection to the Teleservice (under one of the following numbers: , ). Remember that you can enhance security through the use of a few simple rules. Access Code should not: be a component of NIK, contain strings of the same digits, contain dates directly associating with your (the date of your birth, dates important to your loved ones, etc.). SMS passwords If you have selected transaction authorization in the Deutsche Bank Polska SA system of Internet Banking based on secure and convenient SMS passwords prior to the authorization, you should fill in the instruction form with the SMS password that you received to your mobile phone number further to the instruction. Remember! Report any change of a phone number to the Bank to be able to freely continue the authorization with the use of this convenient Authorization Method. Note! When using the Authorization Method based on SMS passwords, remember to always validate the log-in site (see: Log-in) and never quote data related both to your phone and the SMS Passwords. The Bank never asks its customers for this type of information. Providing it may render you liable to hacking. The Bank never asks its customers to install additional software on their phones. Never install the software of uncertain origin on your phone. Please lock the SIM card with the operator in the event if a loss or theft of your phone. If you use authorization based on SMS Passwords, refer to the following information concerning the dangerous Zeus Trojan (ZitMo) Trojan attack takes place in several steps, Trojan: captures login and password to access the electronic banking system from your computer, obtains the victim's mobile phone number, installing malicious form in a victim s browser, provides a link to the "certificate" with a request to install it in your phone via SMS (installation version contains a dangerous Trojan). After installation, criminals can take control of your mobile phone and initiate online banking transactions, confirming them with the captured SMS messages sent by the Bank to the designated cell phone. 8/10

9 TAN card If you have selected transaction authorization in the Deutsche Bank Polska SA system of Internet Banking based on TAN codes of TAN cards prior to the authorization you should enter a pair of Codes of the card, as indicated by the system. Remember to adequately protect your TAN card. To this end: Store it in a safe place. Never reveal to third parties. If you suspect that an unauthorized person could take possession of your TAN card or TAN card codes, lock the card forthwith. Remember! The Bank never requires you to enter the TAN codes when logging into online banking. TAN card reverse Virtual keyboard The virtual keyboard is available upon logging into and instruction confirmation. The virtual keyboard is available on computers and mobile devices with a minimum horizontal resolution of 1280 pixels. 9/10

10 When using the Authentication Method based on TAN Codes - safety level raises as a result of using dynamic images, indicating the fields on the TAN Card, generated upon transaction authorization. Emergency situations If you detect the occurrence of any of the following cases: failed / successful attempt to log on to your account by unauthorized persons, failed / successful attempt of unauthorized transactions from system, suspicion of capture of login data by the unauthorized person(s), suspicion of capture of payment card number by the unauthorized person(s), contact the Bank forthwith by calling: , * or visit your local branch of Deutsche Bank. Once you have presented the issue to our employee, follow their instructions. In addition, when the case is related to the suspected hacking into your account change the Access Code to the system forthwith. * The fee for calls by the applicable rates of the operator. 10/10