|
|
 |
What is Phishing?
When a bogus organisation goes 'Phishing' (pronounced 'fishing'), it is attempting to illegally obtain sensitive personal information from you, e.g. your user ID, password, bank account numbers, credit card numbers etc. They will then use the information you have provided to access your account for illegal purposes, e.g. commit credit card fraud with the credit card numbers that you have mistakenly provided to the 'phishing' individual or organisation.
How is Phishing usually done?
Common techniques that are used by the phishing fraudsters include, but are not limited, to the following:
- Using false email addresses, logos, and graphics to mislead you into accepting the validity of the emails and web sites;
- Faking domain names to appear as it they represent us;
- Duping you into providing personal details through one or more methods, such as hyperlinks to fake websites or embedded forms in emails.
For example, you may receive an email that claims to be from DBS that asks you to click on a link to a website within the email to update certain sensitive information for certain reasons. When you click on the link, you will be directed to a particular web site that may look exactly like ours where you will be asked to enter sensitive information. Emails like these may look quite sophisticated and even carry our logos. However, do not trust them.
As a matter of security, DBS Bank will never send you an email asking you to update your personal information.
How come the Bogus Web Site can look EXACTLY like a bank’s Internet Banking site?
It is relatively simple to make a Web site look exactly like a legitimate organisation's site by merely duplicating what is available from the Internet.
How can I prevent myself from being 'phished'?
Do not follow any link(s) within a suspicious email to the DBS ec-banking site. Because it is our policy to never request customers through email to update your personal account information, please note that any emails that request for your information in this manner is definitely bogus.
Below are some other steps that you can take to prevent yourself from being a victim of a 'phishing'; scam:
- Always enter the full URL of DBS Hong Kong website (www.dbs.com/hk) into your browser address bar to access DBS ec-banking.
- Never reveal your Password to anyone. No staff of DBS Bank should ever ask you for your Password under any circumstances.
- If you get an email that warns you that a DBS account of yours will be shut down unless you reconfirm your personal information, do not reply or click on the link in the email.
- Never click on a link in an email that prompts you to login with your DBS ec-banking Username and Password. Always type in the actual URL of the DBS ec-banking website into your browser.
- Avoid emailing personal and financial information. Before submitting financial information through a Website, look for the "lock" icon on the browser's status bar. It signals that your information is secure during transmission. DBS will never solicit personal and financial information from you via a form or forms in an email.
- Review credit card and bank account statements as soon as you receive them to determine whether there are any unauthorised charges. If your credit card and/or bank statements are late by more than a couple of days, please call our Credit Card Service Centre. You can also call to confirm your billing address and account balances.
Should I report a bogus Phishing site or suspicious email?
If you suspect that you are being phished, please feel free to contact us at our Customer Service Centre to notify us. Your report will help us identify phishing websites and take immediate action to suspend its operation. In addition, this information will help us publish and maintain a list of these fraudulent sites so that other DBS customers will be warned. |
|
|