Stay Safe Online

What is Social Engineering?

“Social Engineering” refers to the practice of manipulating people to circumvent security systems and conduct fraud. This technique involves obtaining information people would not normally reveal to strangers.

Social engineering can take a variety of forms:

• 📞 Telephone calls impersonating bank officials
• 📧 E‑mail messages requesting sensitive information
• 📨 Written mail or fax with fraudulent requests
• 💬 Instant messaging and social media scams

E‑Mail Spoofing

E‑mail “spoofing” is when an e‑mail message appears to have originated from one source when it was actually sent from another.

For example: A scammer contacts a company pretending to be a financial institution or vendor, claiming that their bank account number has changed so that subsequent payments will then unknowingly be routed to a fraudulent account.

Beware of Phishing

Phishing is a type of social engineering attack often used to steal user data, including login credentials and credit card numbers. It occurs when an attacker masquerades as a trusted entity.

Phishing messages can come from a growing number of sources, including:

• 📧 E‑mails that appear to be from your bank
• 📞 Phone calls from fake customer support
• 💬 Social media messages and DMs
• 📱 Text messages (SMS) with suspicious links

Victims can often be tricked into clicking malicious links or opening malicious attachments. Always verify the sender before taking any action.

Passwords & Authentication

Password and authentication methods (e.g., token & one‑time password / OTP) are ways systems verify that you are who you claim to be. If your password is compromised, a person knowing your password can do anything you can do – including transferring funds.

Create and Use Only Strong Passwords

• Passwords should be strong so that they are not easily guessed or cracked (i.e., at least 12 characters long, with upper/lower case letters, numbers, and special characters).
• Tip: Hisab Bank’s online banking service supports multi‑factor authentication. Please consider using this security feature that generates a one‑time access code.
• Use a strong password and OTP for optimal security! Call our Call Center for more information.

Other Tips to Safeguard Your Information

• Only enter credit cards and personal information when it involves a transaction you initiate and only on websites you trust.
• Always use a secure website when submitting credit card numbers or financial or personal information online.
• Update your phone number by notifying the bank as soon as you change it to ensure that you receive instant notifications for any transactions conducted on your accounts.

“Secure Websites” Have a Lock Icon:

• Regularly monitor your account activity to detect fraudulent transactions.
• Avoid accessing your online banking services in open, public areas like internet cafes.
• Shred all documents containing personal information, such as bank statements, unused checks, and deposit slips.