Shanghai Commercial Bank

2-Factor Authentication uses a combination of two different factors for verifying a user's identity. It provides a safer Internet banking services and protects you from Internet banking fraud.

e-Cert

e-Cert is the use of Public Key Infrastructure (PKI) which covers the use of public key cryptography and acts as the accepted means of authentication over public networks (e.g. Internet).

Internet Banking Security Tips

PIN

Do not disclose your User ID and password to anyone, not even someone claiming to be from the Bank or police. Under no circumstances will our staff ask for such information from customers through whatever channels, such as telephone, e-mail, etc. Please contact our Customer Service Representatives at 24-hour hotline (852) 2818 0282 or visit any of our branches if in doubt.
Destroy the original printed copy of your password.
Must not allow anyone to use your password.
Avoid using easy-to-guess password such as your birthday, phone number or the same user ID and password that you use to access other systems or online services.
Change your password from time to time.

Internet Surfer Best Practice

Do not leave your computer unattended and promptly exit by clicking "Logoff" button and disconnecting from on-line services.
Remove the temporary files stored in the memory or in the hard disks of the computer shared with others.
Memorise your User ID and password and do not write it down. Do not store your password in the browser or re-use passwords, and disable auto-complete function.
Check your account balances and statements regularly. Report to the Bank as soon as possible if you spot any unusual transactions.
Avoid using public or shared computer to access our i-Banking services and ensure that your screen or input cannot be viewed by any persons.
Ensure proper physical access controls for your personal computer and Internet connections.

About Anti-Virus Protection

Install Firewall with appropriate safety level or access control set-up and regularly update PC security softwares (eg. Anti-Spy ware, Anti-Virus etc.) to protect from Spy ware and known virus such as Trojan Horses.
Download and apply security updates and patches to the computer/browser when they are made available to ensure you have latest protection against security vulnerabilities.
To prevent the Spyware installation without your knowledge and virus attack, never install pirated software or open e-mail and attachment from unknown or doubtful sources.

When using Internet Banking

Verify last logon date and time.
Ensure all other internet sessions are closed before and while you log on to our i-Banking services.
Avoid accessing our i-Banking services through hyperlinks embedded in e-mails or third party websites.
Access to the i-Banking's web site via the web browsers' bookmarks which had been identified genuine before or type the exact URL: http://www.shacombank.com.hk, and on the logon page, you will see a small lock at the right hand side of the screen bottom. If you double-click the lock, a server certificate issued by VeriSign will appear and the details and validity of the certificate will be shown.
Ensure any device (for example, smart card, i-Key, that store digital certificate) and/or password used for accessing i-Banking services is secure and keep safe. Remove the storage media of the digital certificate from your PC after use.
Do not install the digital certificate on your web browser or store the digital certificate in a hard disk.
If you suspect any unusual account activity, last logon discrepancy or certificate information, immediately contact our Customer Service Representatives at 24-hour hotline (852) 2818 0282 or visit any of our branches if in doubt.

If you find any unusual account activity or last logon date/time, please immediately contact 24-hour Customer Service Hotline: (852) 2818 0282.