Online & Mobile security

Standard Chartered uses a Web Access Firewall (WAF) to filter, monitor and block unwanted HTTP traffic to and from a web application. A WAF is able to filter the content of a specific web application. It can prevent attacks stemming from web application security flaws, such as SQL Injection, Cross-Site Scripting (XSS) and security misconfigurations DDoS (Distributed Denial of Service) – Standard Chartered employs DDoS mitigation tools to protect our channels from denial of service.

Additional alerts and authentication enhance the security of your online and mobile banking activities.

• Two Factor Authentication (2FA) is required if you wish to add new payees, complete a bill payment or perform a fund transfer.
• SMS/Email alerts inform you when a new payee has been added.
• You can set daily transfer limits for your accounts.

• Anti-virus / malware protection solutions are key in securing your computer from online threats.
• Always update your anti-virus software with the latest version.

Cyber criminals may create fraudulent websites that mimic real websites with a similar appearance and a seemingly related URL.

• Check the web address in your browser’s address bar. Look out for other signs of malicious sites such as outdated design, broken links, poor grammar, and other errors.
• Always type in the URL of Standard Chartered website directly into the address bar of your browser.

Only log in through our official website or mobile applications and remember to log off

• Never log in to online banking from any email you’ve received – we will never ask you to log in via an email link.
• Always log out from your online/mobile banking account. Closing the browser window does not guarantee secure logout and it could leave your account open to misuse.

Secure your confidential documents

• Lock your confidential documents in a safe place and shred any bills, receipts, statements and unwanted mail you wish to get rid of, as they contain key details that can be used to steal your account information.

Protect your identity

• Cyber criminals are targeting social networking sites and online forums such as Facebook™, Twitter, Instagram, LinkedIn, Sina Weibo, MySpace, and Bebo amongst many others in an attempt to steal personal information – so be careful with what you share online.
• Do not publish details that can identify you. They include birthdates, phone numbers, addresses and full names.
• Limit access to your profile. Consider restricting your profile to friends and family only.
• Keep your password safe and don’t use the same one for all your online accounts.
• Make sure you understand the privacy policy of each site as some may sell users’ email addresses, leaving you susceptible to phishing attempts and spam.

Check your statements regularly

• This will help you spot any fraudulent transactions. If you notice something unusual or suspect that you have been a victim of fraud or identity theft, please contact us immediately by calling the number on the back of your card or bank statement.

Keep your token for One Time Password (OTP) secure

• Do not allow anyone to use or tamper with your security token.
• Do not reveal the OTP from your security token or SMS to anyone.

SIM replacement fraud is when a cyber criminal obtains your name and mobile phone number and requests your mobile operator for a replacement SIM card by pretending to be you – claiming loss or malfunction of SIM. The mobile service provider deactivates your existing SIM and issues a new one. The cybercriminal now receives all confidential bank notifications, including OTPs. How to protect yourself:

• Contact your mobile operator immediately if you stop receiving calls or texts for unknown reasons.
• If your phone is displaying a “SIM not registered” or a similar message, call or visit your mobile operator immediately.
• Secure your mobile device using a password.

• Always use the Apple App Store or Android Google Play Store to download the SC Mobile banking application.
• Do not store passwords or account numbers on your mobile phone.
• Never use a jailbroken device for your mobile banking.
• Ensure that your mobile device is updated with the latest version of the operating system
• Always log out and never leave the Standard Chartered mobile banking application running in the background.

• Share carefully – be wary about sharing information that could be used to steal your identity. This includes your date of birth, address, or phone number.
• Keep potential fraud and spam out of your regular email inbox by creating a separate email for social networking purposes.
• Use a unique password for each of your social networking profiles. Ensure it doesn’t match passwords used for banking and other related activities.

• View our security infographic
• Print our security checklist