Customers are reminded to be vigilant of any fraudulent websites which seek to pass off as www.bochk.com.

Unless you are certain that you are connected to the website of BOCHK(www.bochk.com), particulars of your e-banking accounts should not be provided. 

Under no circumstances would  BOCHK send out any emails to ask for or verify customers' personal information,  including but not limited to account number, PIN, account balance, HKID card number or passport number. You should not access your e-banking accounts through hyperlinks embedded in emails sent to you from any unknown source.  It is always prudent to type in our web address into the browser address bar to ensure the security of your personal information.

Should you have any queries relating to the statement, please feel free to contact us.

• With the use of 128bit Secure Socket Layer (SSL) encryption, we ensure the security of your data during transmission.
• Our web servers are protected by firewall systems to prevent unauthorised access.
• Our system will monitor each login attempt. If there are several consecutive login attempts with incorrect password, the online service will be suspended immediately.
• In the event that you forget to logout from the Internet Banking, your online access will be disconnected automatically after a short period of inactivity to prevent unauthorised transaction.
• Simultaneous login of the same User ID via another computer is not allowed.
• We will not ask for customers' account number, password or any personal information via emails.
• Internet Banking now provides digital certificates and SMS-based one-time password (OTP) as your two-factor authentication tools for further verification when you need to conduct high-risk transactions online.

 Create and keep your password and personal information in proper ways

• Do not use easy-to-guess numbers or words as your password, and avoid selecting the same password that you have used for accessing other web services.
• Do not disclose your user name and password of your Internet Banking to anyone (including bank staff and the police). Avoid disclosing your personal information such as HKID card number and date of birth.
• Please memorise your password and never write down or record your password in a way that can be accessed easily by someone.
• Please change your password regularly.
• If you suspect your password has been disclosed, please contact us immediately.

Protect your personal computer against hackers and viruses

• Download and install updates and patches for your operating systems and browsers regularly.
• Install firewall systems on your personal computer.
• Install anti-virus software on your personal computer. Update the virus definition file and perform virus scanning regularly.
• Avoid downloading or installing programmes from unreliable sources or opening suspicious files or emails. This helps protect your personal data from hackers’ programmes or viruses.
• If you access our Internet Banking via wireless network, please check your network security settings.

Take precautionary measures while you are using Internet Banking

• Do not access Internet Banking from a shared computer in public such as cafes or bars with Internet access.
• Do not login Internet Banking through hyperlinks embedded in any emails or search engines.
• Close all other Internet browsers before accessing Internet Banking. Do not open other Internet browsers or visit any other websites while you are using Internet Banking.
• Make sure no one can see your user name and account details when you login the Internet Banking.
• Check your last login and logout record every time you use our Internet Banking. Check your account balance and transaction records regularly. If you discover anything suspicious, please contact us immediately.
• Click the "logout" button to exit from the system after you have finished all your online transactions. Please always clear the cache and history in your browser after using our Internet Banking.
• Do not leave your computer unattended before logout.
• To know more about other online security measures, please click here.

Customers should always stay alert to any possible online frauds to avoid unnecessary
loss.

• Fraudulent claims of estate
• The email sender claimed to be a banking staff, inviting the recipient to pretend to be the next of kin of a deceased client who has left a huge sum of unclaimed fixed deposit. Upon receiving favourable reply, the fraudster requested the recipient to pay a fee in advance for preparing the necessary documents in order to claim that estate. Finally, the email recipient was cheated and couldn’t contact the sender again.