TERMS AND REGULATIONS

PhishingEng

Phishing deals with fraudulent means used by certain parties to obtain confidential information on a customer such as User ID and PIN. Those various means include:

  • Building fake website whose look and feel is almost identical to the legitimate one.
  • Sending URL link to website that resembles the bank’s official website, which is allegedly fake.
  • Sending email or BBM containing URL link or login screen, and asking costumers to log in by entering User ID and PIN.
  • Disguised as a bank staff asking for the customer’s data for a particular purpose.

Tips for Security:

  • Always access our internet banking by typing the correct URL (http://www.klikbca.com). Click LOGIN or go straight to the BCA Internet Banking login page (https://ibank.klikbca.com). You can also go to https://m.klikbca.com using smartphone browser or choose menu options available on BCA mobile.
  • Save the correct URL on favorites or bookmarks menu to avoid accessing the wrong website. Click shortcut from favorites or bookmarks menu the next time you need to access the BCA Internet Banking.
  • Please be advised that BCA will never send such kind of email as described above to the costumer. Should you receive email of that kind which seems to be originated from BCA, you can do the following act:
    • Forward the email to halobca@bca.co.id or report it to Halo BCA at 1500888 from cellphone.
    • Delete the email directly.
  • Should you have already filled in the information requested or feel that your User ID and PIN have no longer been confidential, immediately contact Halo BCA at 1500888 via mobile phone.

Find tips below for your ease and security in performing internet banking transaction

  • Only use KeyBCA in doing activities as follows:
    • Financial transaction: transfer, payment, e-commerce payment, purchase.
    • Payee account registrations, change e-mail address, registration of the BCA credit card billing inquiry, add/delete KeyBCA connection, KeyBCA activation, and BCA KlikPay activation.
  • BCA never asks costumer to disclose number/respond from KeyBCA other than doing transactions mentioned above. Should you find screen telling you to disclose your KeyBCA number/respond other than doing transactions mentioned, please contact Halo BCA immediately on 1500888 from cellphone.
  • Never lend your KeyBCA or disclose your PIN KeyBCA to others.
  • Check account transfer list periodically. You can erase unneeded account number on the list using menu: Administration – Erase ransfer List.
  • Make sure you put name and payee account number correctly when doing transfer transaction.
  • Always access our internet banking by typing the correct URL (http://www.klikbca.com). Click LOGIN or go straight to the BCA Internet Banking login page (https://ibank.klikbca.com). You can also go to https://m.klikbca.com using smartphone browser or choose menu options available on BCA mobile.

tips

  • Save the correct URL on favorites or bookmarks menu to avoid accessing the wrong website. Click shortcut from favorites or bookmarks menu the next time you need to access the BCA Internet Banking.
  • Check the SSL certificate to make sure that you have received the valid SSL certificate registered for ibank.klikbca.com or m.klikbca.com.
  • Make sure that your browser shows the image of a lock/key indicating the page that you access has been currently encrypted by the use of SSL. Should you fail to view the lock/key image, please log out.
  • Make sure you have logged out once you leave your computer even for a short while.
  • You are not advised to access the BCA internet banking at an internet stall (warnet) or at such other network with insufficient security.
  • You should always be wary if you receive emails, calls, or faxes asking you to disclose any personal details, including Internet Banking PIN or KeyBCA PIN. BCA’s officers will never contact you directly to ask you to disclose your PIN or password information.
  • Change your PIN periodically using unique number combination and hardly guessed by others.
  • Should you receive any message about invalid certificate, please discontinue your access to the BCA internet banking. Contact Halo BCA immediately at 1500888 from cellphone.

Virus / Worm

Virus/worm is a computer program that can replicate itself and spread from one computer to another, without the knowledge of the computer owner. Generally, Virus/worm damages the operation system, application, and data in the infected computer.

The difference between virus and worm lays on the way it spreads. Virus occupies computer memory space (e.g. attached to files or boot sector hard disk) and generally spreads through USD flash disk, email attachments, downloaded files from the internet, or from visits to website pages which intendedly built to spread virus/worm. Worm spreads through networks. There are also hybrid programs containing virus and worm, which occupy the computer memory space but spread through network.

Various instances of impacts from virus infection include:

  • The computer becomes unstable and frequently “hang” (blocked).
  • The computer becomes slow.
  • The data in hard disk is damaged or sent to other parties through the network.
  • The application program is not usable.
  • Typed password can be recorded and sent to other parties for fraudulent intentions.


Trojan

Trojan is a type of computer virus that disguises itself as a useful program or file, such as excel document attached to email. Computer owner will be tricked to do actions that can cause Trojan to spread, such as opening the attachment thinking that it was a regular excel file, whereas it actually contains Trojan program.

Once infected the computer, Trojan can do damages like any other virus or send important information including user-id and password to other parties, unaware by the owner of the infected computer.


Spyware

Spyware is a type of computer program created to “steal” important/personal information from an infected computer and send them to a particular location on the internet, to be afterwards taken by its creator. The information which considered the main target includes: credit card number, User ID and PIN/password, account number, e-mail address and so forth.

Spyware may be installed through e-mail attachment, the programs being installed from unclear sources or by “mean” website.

However, unlike virus which is more destructive in nature, spyware works silently so that it will not be traceable and thereby will be much easier to gather information as desired by the spyware maker/spreader.


Bot (roBot)

Bot is a type of computer program which may cause your PC be remotely controlled by others through network. The Bot maker/spreader may do unlimited actions with your PC.

In general, the controlled PC is used to send Spam, Virus, Worm or attack other computers in the same network.


TIPS FOR SECURITY

  • Use updated anti-virus in your computer and make sure that your computer is scanned at real-time.
  • Delete suspicious email or email coming from an unknown sender. Always scan email attachment prior to opening.
  • Use firewall on your computer and make sure that the configuration of the installed firewall is able to secure your computer.
  • Make sure that you are using both the most recent operation system and application in your computer.
  • Make sure that you only download files from secure websites and scan downloaded files from the internet prior to using.
  • Always scan your USB flash disk before using.
  • Be conversant with the kinds of transaction you usually perform online. Only use KeyBCA in doing certain kind of activities. Should you be asked to give KeyBCA response other than the regular process, contact Halo BCA immediately at 1500888 from cellphone.

bca-mobile

To ensure your safety mobile banking experience:

  • Make sure that you have downloaded the BCA mobile application from the official website provided by BCA:
    • Go to www.klikbca.com and then click “BCA mobile” menu. You can also access www.bca.co.id, choose “e-banking” from “Products & Services” menu, click “BCA mobile”, and then click “download”. You will be directed straight to BCA mobile downloader.
    • Go to the BlackBerry App World/Google Play Store(Android Market)/iPhone App Store (suited for costumer’s choice of smartphone), then download the BCA mobile application.
    • Download the application directly from https://downloadmbank.klikbca.com/mbca.
  • Choose wireless network which uses network security keywords or other kinds of safety devices. You are not advised to access public Wi-Fi in performing transaction through BCA mobile, due to the insufficient security.
  • For transaction with m-BCA:
    • Keep your access code confidential, as your security to access m-BCA menu.
    • Keep your m-BCA PIN confidential, as your transaction validity security.
    • Make sure you have logged out once you leave your computer even for a short while.
  • For transaction with KlikBCA smartphone:
    • Check the SSL certificate to make sure that you have received the valid SSL certificate registered for m.klikbca.com.
    • Make sure that your browser shows the image of a lock/key indicating the page that you access has been currently encrypted by the use of SSL. Should you fail to view the lock/key image, please log out.
    • Keep your Internet Banking PIN confidential, as your KlikBCA access security.
    • Never lend your KeyBCA to others.
    • Make sure you have logged out once you leave your computer even for a short while.
  • Change your access code, m-BCA PIN, Internet Banking PIN, and KeyBCA PIN periodically using unique and hardly guessed combination of numbers/letters.
  • You should always be wary if you receive e-mails, calls, or faxes asking you to disclose any personal details, including your access code, m-BCA PIN, Internet Banking PIN, and KeyBCA PIN. BCA’s officers will never ask you to disclose such personal information.
  • Should you receive the message confirming invalidity of the application/certificate/service, please do not proceed to access BCA mobile and contact Halo BCA immediately at 1500888 from cellphone.

pinatm

  • Periodically change your ATM PIN
  • Do not accept help from people who offer it in an ATM cubicle
  • Do not lend your ATM Card and tell your PIN to another person (bank employees never request the customer's PIN)
  • Cover the pinpad with your hand when you enter your PIN in an ATM
  • If you encounter difficulties at the ATM, immediately call Halo BCA at (021) 500888 using your mobile phone

Kerahasiaan

  • Check the transaction value
  • Always locate your card
  • Cover the machine with your hand when you enter your PIN
  • Ask for your Paspor BCA card back
  • Do not tell your PIN to anyone, including a bank employee or family
  • If you encounter difficulties using the EDC, immediately call  Halo BCA at (021) 500888 using your mobile phone

tutupin

  • Do not tell your PIN to anyone, not even family or close friends.
  • Avoid writing down your PIN anywhere, especially keeping it in your wallet.
  • Do not let anyone see your PIN by covering your fingers when you enter your PIN using a pinpad or any other device.
  • Periodically change your PIN with a unique combination of numbers that is difficult for someone else to guess.
  • Beware of attempts of fraud from people who claim to be bank/BCA employees through the telephone, fax or e-mail, who ask for your personal data, including your PIN. A BCA employee will never request or ask for your PIN.