SECURITY GUIDE
 

Latest Update

1. You should keep the security device provided by our bank in a safe place.

2. Please log out the Internet Banking after conducting transaction.

3. Check your bank’s SMS messages and other messages in a timely manner and verify your transaction records. Contact our Customer Services Hotline immediately at (852) 223 95559. in case of any suspicious situations.

4. Our Bank suggests you to set difficult-to-guess passwords for your computer, and activate the auto-lock function.

5. Our Bank suggests you to download and upgrade your applications or software from official and reliable sources only. Do not browse suspicious websites.

6. Disable any wireless network functions not in use of your device to mitigate any cyber security threats. Choose encrypted networks when using Wi-Fi and remove any unnecessary Wi-Fi connection settings.

7. Customers must access to the Internet Banking via http://www.bankcomm.com.hk/ and use your personalized User Name and Password to login.

8. During the Internet banking logon process, the bank will not ask you to provide your personal information or enter any numbers displayed on the web to the security device to obtain security code.

9. If any unusual screens pop up and/or the computer responds unusually slow, customers are advised to log out from the Internet banking and scan the computer with the most updated version of virus protection software.

10. Follow this document when conducting Internet banking transactions.

11. Emails are a common way to spread viruses. Our bank will not send out email with attachment. If you are at all suspicious, do not open the email and please contact our Customer Services Hotline immediately at 223 95559.

 

Internet Security Measures by the Bank

To secure your banking information and account details, our Internet banking provides the following measures.
1. Transport Layer Security (TLS) & Strong Encryption
  When using Internet Banking via Internet, all account and transaction information will be encrypted by TLS encryption technology.
2. Automatic time out
  The Internet Banking system has an automatic log-off function. The service will automatically log off after 30 minutes account inactivity so as to prevent unauthorized access of customers account. Automatic time-out function will be valid even if there are transactions in progress.
3. Personal Identification Number (PIN)
  (i) Unique Internet Banking User Name and password is required to access Internet Banking and the account will be locked if incorrect password has been entered 5 times consecutively in order to protect our customers' interest.
  (ii) Our bank or our agents/business partners will never ask for your PIN or passwords by e-mail or any other means. Please do not access your internet banking account through hyperlinks embedded in emails or from other search engines. If you have any queries, please call our Customer Services Hotline at 223 95559.
4. Digital Certificate
  Our bank website has a digital certificate issued by VeriSign Corporation. To ensure that you are connecting with Bank of Communications, Hong Kong Branch, you can find a small 'lock' or 'key' icon (Security padlock), in the bar at the bottom right corner of your Web browser. Double clicking the security padlock, you can verify the website's authenticity by viewing the web certificate issued by VeriSign.
 
  The security padlock icon will show you the digital certificate details.
 
  Note: If you find that the certificate contains any message different from what is illustrated above, please contact Bank of Communications, Hong Kong Branch Customer Services Hotline 223 95559 for more information or assistance.
     
Security Measures by Customers
To avoid unauthorized access to your account(s), you should pay attention to the following points:
1. Personal Identification Number (PIN)
  (i) Create a password with a combination of letters and numbers. Do not use the easily guessable password, such as telephone number, birthday, ID number or any personal associated numbers.
  (ii) Do not write down or record the PIN without disguising it.
  (iii) Do not use the same password in accessing other Internet services.
  (iv) Do not reveal your password to anyone else (including our bank staff and police).
  (v) Do change your password regularly, such as every 30-day. If you suspect your password has been known by someone else, you should change it immediately; if you cannot change your password through Internet Banking Services, please contact our Customer Services Hotline 223 95559.
  (vi) Our bank or our agents/business partners will never ask for your PIN or passwords by e-mail or any other means. Please do not access your internet banking account through hyperlinks embedded in emails or from other search engines. If you have any queries, please call our Customer Services Hotline at 223 95559.
2. Using Internet Banking
  (i) Do click [Logout] button to exit the service upon completion of banking transactions.
  (ii) Customers must access to the Internet Banking via http://www.bankcomm.com.hk/ and use your personalized User Name and Password to login.
  (iii) During the Internet banking logon process, the bank will not ask you to provide your personal information or enter any numbers displayed on the web to the security device to obtain security code.
  (iv) Follow this document when conducting Internet banking transactions.
  (v) Do not disclose your personal information if you have any doubts about the websites.
  (vi) Do not access our bank website through the hyperlinks embedded in emails.
  (vii) Check your account statement regularly, and contact us immediately if you have any doubts about the account transactions.
  (viii) Do not download software from unknown websites.
  (ix) Proceed high-risk transactions and designated transactions through Internet Banking Services, two-factor authentication is required (Security Device or SMS One-Time Password):
  • Fund Transfer to BOCOM Accounts (Non-registered Account)
  • Fund Transfer to Local Bank Accounts (Non-registered Account)
    • CHATS
    • Electronic Clearing Transfer
  • Fund Transfer to Overseas Bank Accounts (Non-registered Account)
  • Bill payment services (Applicable to designated merchants)
    • Real Time Payment
    • Standing Instruction (New or amend instruction)
  • Open Deposit / Securities Account
  • Update Personal Information
  • Change Mailing Instruction
  • Overseas Cash Withdrawal Service Setting
  • Securities Services
  (x) " SMS One-time Password " and SMS for " Notification of Execution of Designated Transactions " issued by our bank will be sent to your registered mobile phone number only. If your mobile phone that registered SMS or contact number have been changed, please visit our branches to complete the update procedures.
  (xi) You should keep the security device provided by our bank in a safe place.
  (xii) Please log out the Internet Banking after conducting transaction.
  (xiii) Check your bank’s SMS messages and other messages in a timely manner and verify your transaction records. Contact our Customer Services Hotline immediately at (852) 223 95559. in case of any suspicious situations.
3. Protect your online transaction
  (i) Do not access Internet Banking Service from public places or from shared computers. You never know what malicious programs might be installed on the PC you use there.
  (ii) Enter your password and account information under secure environment when you are using Internet Banking.
4. Protect your computer
  (i) Install a personal firewall on your computer. Personal firewall software is designed to prevent hackers from accessing the computer it is installed on. Installing a personal firewall is recommended. When installing such software, follow the manufacturer's recommendations for a 'conservative' accesses control.
  (ii) In order to prevent computer virus invasion, customers are recommended to install anti-virus software and update its version regularly.
  (iii) If any unusual screens pop up and/or the computer responds unusually slow, customers are advised to log out from the Internet banking and scan the computer with the most updated version of virus protection software.
  (iv) Emails are a common way to spread viruses. Our bank will not send out email with attachment. If you are at all suspicious, do not open the email and please contact our Customer Services Hotline immediately at (852) 223 95559.
  (v) Our Bank suggests you to set difficult-to-guess passwords for your computer, and activate the auto-lock function.
  (vi) Our Bank suggests you to download and upgrade your applications or software from official and reliable sources only. Do not browse suspicious websites.
  (vii) Disable any wireless network functions not in use of your device to mitigate any cyber security threats. Choose encrypted networks when using Wi-Fi and remove any unnecessary Wi-Fi connection settings.
5. Security guideline
  To learn more about Internet Trading Security , you can also get more information from the leaflet released by the Hong Kong Monetary Authority and the Hong Kong Association of Banks - Smart Tips on Using Internet Banking Services.