Home > Others > Security Corner > Security Corner
Eight Tips to Avoid Fake Website Scams
 

I. Use USB-Shield
USB-Shield (certificate for Personal Internet Banking customers) is the first patented "Intelligent Guard" for protecting online banking users launched by ICBC in the country. Once you have a USB-Shield, you can bank online freely as long as you keep your USB-Shield and password safe on hand. No need to worry about being attacked by hackers, fake websites or trojan virus. How to apply and use USB-Shield.

II. Reserved Verification Information
"Reserved Information Verification" is an ICBC service to help customers effectively identify fake bank websites and stop scammers to use fake websites to defraud gullible respondents. You only need to supply a paragraph of words to ICBC in advance (" reserved information”). When you logon ICBC Personal Internet Banking, make online payment at shopping websites or sign autopay agreements online, your reserved information will be displayed automatically on the web page for you to check if the website is the true ICBC website. Otherwise, the website is fake if you cannot find your reserved information on the web page or the displayed information is different from what is given by you.

III. Enter Correct URL
Type the correct ICBC website address and add into your IE browser "folder" for easy logon later. Do not click on any hyperlink to access ICBC website.
ICBC web portal URL: http://www.icbc.com.cn;
ICBC Personal Internet Banking (English) logon URL: https://mybank.icbc.com.cn/icbc/enperbank/index.jsp.

IV. Check Website Address
When you logon ICBC Internet Banking or pay online, check if the URL is the same as the URL announced by ICBC. Beware of scams to steal your confidential information at faked websites that look similar to ICBC website. The URLs of ICBC Personal Internet Banking logon page and online payment web page all start with https://mybank.icbc.com.cn.

V. Check Padlock
128-bit SSL encryption is used for ICBC Personal Internet Banking home page and online payment web page. After opening the above web pages, check if a "padlock" is displayed on the status bar at the bottom right hand corner of the browser. Click the lock, you should see the following:
On the Internet Banking logon web page, the certificate matched with the padlock icon displayed on the status bar at the bottom right hand corner of the browser should be:
Issued to: mybank.icbc.com.cn - Internet Banking (General Edition)
                    vip.icbc.com.cn - Internet Banking (VIP Edition)
Issued by: veriSign Class 3 Extended Validation SSL SGC CA

VI. Spot Faked E-Commerce Websites at ICBC "Shopping Mall"
When you pay online, if you do not know if the e-commerce website is a fake, logon ICBC website, go to ICBC "Shopping Mall" and check if the e-commerce website has signed up ICBC online payment service. Please remember, true ICBC online payment web page will prompt you to enter payment card No. and verification code first. After you enter correctly, ICBC web page will display your reserved information for you to verify. If you find the returned information is incorrect or you have question on it, stop the payment immediately and call 95588. If correct information is returned, follow the instructions, insert your USB-Shield and enter password. If you use a code card, follow the two coordinates given and enter the password matched under the coordinates, then finish the online payment.
One special point: Every time when you pay online, ICBC system only gives you two coordinates to enter the password. You should be careful if the website asks you to enter password for more than two coordinates. Call ICBC customer hotline 95588 to confirm.

VII. Update Your Software
Install a firewall in your computer. By keeping the software up to date, you make it more difficult for hackers to steal your account information. Besides, to stop others using your software vulnerabilities to access the information in your computer, you should download latest Windows OS patches and make sure they are applied.

VIII. Stay Alert
ICBC has assigned a special department to manage ICBC website and ensure the website is running smoothly, no "system maintenance" in general. ICBC system will suspend services in case of major upgrade. Advance notice will be given to all customers at the web portal or through 95588 service hotline. ICBC never uses email, SMS, phone calls to ask customers to change password at a specified web page. Moreover, a bank never informs customers by email, SMS or phone calls that they have won a lucky draw, and asks customers to pay tax or postage before collecting the prize. If you receive this type of email, SMS or phone calls, call ICBC customer service hotline 95588 directly and report.

ICBC website address: http://www.icbc.com.cn, customer service hotline: 95588.


(2016-10-28)
Close