In the past, banking meant going to a branch to carry out transactions. Today, these transactions are mostly performed through channels (Internet Branch, ATM, Mobile Branch, etc.). Internet banking is one of these channels. For this reason, it is important to improve internet banking security and to inform customers about these security measures at regular intervals.
As part of this information effort, banks should have their internet banking customers read/receive these points at least once a year, obtain confirmation that they have been read, and strongly recommend that customers read the more comprehensive security warnings on the bank's website.
What measures should customers take?
- User information is personal and must be kept strictly confidential. This information is listed below:
- User Name
- Account Balance
- Account Transactions
- Variable Password
- Password/PIN
- One-Time Password
- Transaction Verification Code
- Electronic Signature
- Personal Information
- Mobile Phone Brand and Model
- Card information, such as the card number, expiry date and card security code, and especially passwords, must be protected. In addition, passwords must not be easy to guess, must be set in line with the bank's security procedures, and must be changed periodically.
- The same password must not be used in every environment (email, Internet Branch, Facebook, etc.).
- Transactions should be performed only on a computer whose security you are sure of. Since we cannot be certain whether malware has been installed on publicly accessible computers, risky transactions such as internet banking must not be performed on them. Internet cafes are places that carry this kind of risk.
- Unlicensed software must not be used. Malware may have been planted in an unlicensed program, so such software should be avoided as much as possible.
- The operating system and web browser must be kept up to date. To protect the computer and keep it running smoothly, the updates released by the software vendors must be followed and installed on time.
- Antivirus software must be used to protect computers against malware and other threats, and it must be kept up to date.
- An internet firewall must be used and kept active on computers. Firewall software can prevent unauthorized access to computers.
- Because the browser's autofill function stores all information, including previously entered passwords, it must not be used and should be disabled.
- The "Remember Password" feature must be avoided.
- Files downloaded by the web browser must be cleaned up frequently.
- Individual users must set a password on the devices (Wi-Fi) they use to go online.
- Instead of using no password or an easily guessable Wi-Fi password, a password with a higher security level must be used.
- If a jailbroken or rooted operating system is in use, internet banking must not be accessed from the phone or computer that runs it.
