1. Protect your computer

• Do not install unlicensed software, which may contain bugs or viruses.
• Install anti-virus and anti-spyware software and update the software regularly to ensure you have the latest protection.
• Install a personal firewall to help you to prevent unauthorized access and update the firewall regularly to ensure you are covered with the latest protection. For details, please refer to your software vendor.
• Install security updates and patches to your operating systems or browser when they are made available. They are designed to provide you with protection from known possible security problems.
• Reference: The Government's Cyber Security Information Portal (http://www.cybersecurity.hk)
• For reporting security incidents or complaints, please email to enquiry_cr@ocbc.com or call the inquiry hotline at (852) 3199 9188.
• Ensure the file sharing feature is disabled in your operating system while online, particularly if you are linked to the Internet through a cable, DSL modem, or network router.

2. Internet

• If you suspect a website that is not owned by OCBC Bank (Hong Kong) Limited ("the Bank"), leave it immediately and do not follow the instructions it provides.
• You should also check if the domain name is: www.ocbccr.com.hk
• Close the browser and clear browser cache after Online Loan Services.
• Do not leave your relevant devices (e.g. personal computer, mobile phone or palm) unattended in the middle of a session.
• Do not browse other website by opening a new session, while you are using Internet Online  Loan Services.
• Do not access to the bank's website through internet search engines or suspicious pop-up windows.
• Please always connect to the bank website by typing the authentic website address into the browser or by bookmarking the genuine website for subsequent access.
• Use encryption to protect your wireless network.

3. Types of Threat when using Internet

• Fraudulent or spoof websites

  Where customers are asked to input their personal information, mistaking it to be the Bank's genuine website.

• Phishing

  Normally a spam e-mail containing a hyperlink to a log-on page, which requests personal information. The page appears to be an official website but is actually a spoof website.

• Trojan software

  A malicious code attached or embedded in software that is planted in a customer's PC by a fraudster to access the customer's personal information. A form of Trojan is "key-logger" which monitor and record the keystrokes when a person types on the keyboard (e.g. user ID and PIN). This information can be passed back to an unauthorized person.

• Spyware

  Any software that covertly gathers user information through the user's Internet connection without his or her knowledge, usually for advertising purposes. Spyware applications are typically bundled as a hidden component of freeware or shareware programs that can be downloaded from the Internet; however, it should be noted that the majority of shareware and freeware applications do not come with spyware. Once installed, the spyware monitors user activity on the Internet and transmits that information in the background to someone else. Spyware can also gather information about e-mail addresses and even passwords and credit card numbers.

4. Website's identity authentications

We have introduced the latest security measures for website's identity verification.  If you are using following browsers  to access the website:

Google Chrome version 88 or above

5. Security Measures for the use of Online Loan Services

• Only access the reliable wifi network.
• Do NOT click any hyperlink in email which is link to the Online Loan Service.
• Please install and update the latest fire wall and anti-virus software regularly.
• Ensure the "File & Print sharing" is disabled while online, especially if you are connecting Internet through broadband connection.
• You may verify the security certificate of our website by clicking the 'Lock' icon at the browser's address bar, which a server certificate issued by VeriSign will appear and the details validity of the certificate will be shown.

6 Security measures for the use of Telematic Loan Service Code and PIN of Telematic Loan Service

• Ensure nobody is watching you while inputting your Telematic Loan Service Code and PIN.
• Keep Telematic Loan Service Code and PIN private and NEVER disclose to anyone else including our staff and police.
• Do Not allow others to use your Telematic Loan Service Code and PIN.
• Always contact us at Customer Service Hotline 3199 9188 immediately if you lose your PIN, or suspect your Telematic Loan Loan Service account is stolen.
• Use strong PIN. A good, strong PIN should meet all of these criteria:
  • Easy for you to remember, but difficult for others to guess,
    • The length of the PIN must be in EIGHT numeric characters
    • Use THREE or more different characters, e.g. 12522552
    • Do not use the same character for FIVE times or more, e.g. 11115721
    • Do not use FIVE or more consecutive characters (in alphabetical or reverse alphabetical order), e.g. 81234596, 98765753
    • Do not use your Telematic Loan Service Code as your PIN
    • Do not use a PIN that is hard to memorize so that you have to written it down
    • Do not use easy accessible number or data such as your birthday, ID number or personal telephone number as your PIN

7. Security measures for the use of Revolving Credit Card, Revolving Credit Card Information and Authentication Factors

• Destroy the PIN mailer after memorizing the PIN. 
• Do Not write down the PIN and never keep any written record of the PIN with your Revolving Credit card. 
• Change your ATM PIN at any JETCO ATM and/or e-banking PIN on our e-banking platforms regularly. 
• Avoid using easily accessible number such as personal data including your birthday, ID number or personal telephone number etc as your PIN / authentication factors.
• Do Not disclose your authentication factors to any person including any joint account holder, the police and the bank staff. The Bank will never ask for your authentication factors  by any means such as email, SMS, phone, etc. 
• Do Not send your authentication factors  via email / SMS and never use the same authentication factors  to access other services. 
• Always stay alert when using ATMs or e-banking services. Cover the keypad with your hand with entering the PIN, and reject any assistance from strangers. 
• Do Not allow others to use your Revolving Credit card and authentication factors. 
• Be careful of any suspicious device on or near ATM and card reader slot before using ATM (e.g. pinhole camera, card reader, etc.). 
• Stop the transaction and report to the Bank immediately if you observe the PIN panel has been removed or loosened. 
• Remember to take back your Revolving Credit card after using ATM. 
• Count the banknotes immediately after cash withdrawal. Do not take the banknotes or ATM card left at an ATM dispenser by another person. The banknotes or ATM card will be automatically returned to the ATM. 
• Check account activity regularly to spot unusual transactions. 
• Immediately inform the Bank in case of any actual or suspected unauthorized use of your Revolving Credit card , Revolving Credit card information and/or authentication factors, your Revolving Credit card information or authentication factors being compromised or your Revolving Credit card or authentication factor is stolen or lost. 
• You may have to bear a loss when your Revolving Credit card has been used for an unauthorized transaction before you have told us that the Revolving Credit card or authentication factor has been lost, stolen, or the authentication factor or Revolving Credit card information has been compromised.
• Please note that you will be liable for all losses if you have acted fraudulently. You may be held liable for all losses if you have acted with gross negligence or have failed to inform us as soon as reasonably practicable after having found that your Revolving Credit card has been lost or stolen. This may apply if you fail to follow the safeguards or meet your obligations set out in this Security Tips if such failure has caused the losses.
• Please ensure your contact details registered with the Bank for the purpose of receiving important notifications from us (for example, SMS and email notifications for online payments) are up-to-date to allow the relevant notifications to be delivered to you on a timely basis.
• To comply with the latest regulatory requirement of The Hong Kong Monetary Authority to strengthen the security controls for ATM services, with effect from 1 March 2013, the overseas ATM cash withdrawal (including cash advances) service of all ATM cards and credit cards will be pre-set as "deactivated". Customers are required to activate Overseas ATM Cash Withdrawal Service for their ATM cards and credit cards before using overseas ATM to withdraw cash (including cash advances). No activation is required for cash withdrawal via JETCO ATMs in Macau and China. 
• Please put your Revolving Credit cards, Revolving Credit card information and authentication factors in safekeeping.
• For lost / stolen card*, please call our Revolving Credit Center Customer Service Hotline on (852) 2201 7755 or report to the Bank via our e-banking platform* immediately. 
  
              *To report lost / stolen card via e-banking platform, you should have registered our e-banking service with the relevant card registered under your e-banking account.

8. Security measures provided by the external parties

• Click here to learn more about digital security tips published by the Hong Kong Monetary Authority.
• Click here to learn more about the latest cyber security and technology crime published by the Hong Kong Police.
• Click here to learn more about the cyber security information provided by the Office of the Government Chief Information Officer.
• By clicking the above links, you are now leaving the OCBC Bank (hong Kong) Limited's website and entering a third party site. All the information you provide will be subject to confidentiality and security terms of the applicable third party site. OCBC Bank (Hong Kong) Limited's does not take responsibility for information you provide at such third party sites.

9. Email

• The Bank will not ask for sensitive account and personal information such as User IDs and passwords via e-mails. 
• The Bank will not send e-mails with embedded hyperlinks (including those presented as QR code) to transactional websites to the customer for requesting enter or confirming any personal information and password. 
• Do not open Email attachment from unknown, suspicious or unreliable sources and delete it immediately. 
• Be aware of scam Emails which may pretend to be sent from your trusted business partners and friends, however they were designed to trap you into downloading a virus or visiting a fraudulent website and disclosing your sensitive information including your User ID and PIN. 
• Do not send your User ID and PIN or other sensitive personal or financial information via Email. We always use encrypted sites that are secure to receive the information. 

10. Keep the Bank updated of your contact information

• To ensure the Bank can contact you in an efficient manner, please inform us your latest contact phone number and/or correspondence address by submitting a Change of Address Form to any of our branch  or loan centre.