Every Day: 08:00 - 21:00
+30 2105245817-8

Transaction Security

The Foundation’s primary objective and our main priority is the safety of users with regard to the services provided. We take preventive measures on a daily basis and we are constantly evolving, following the standards and needs of the times.

METHODS OF FRAUD - COMMON FORMS OF FRAUD

Phishing

What is it?

How do I protect myself?

This is a form of fraud that is carried out via email using the phishing method. This method is used to send emails that appear to be sent by banks, companies or organizations that refer to pages similar to the real ones and try to trick the user into entering their details (login codes, username, etc.) in order to be intercepted and used by third parties.

Attention should be paid to the e-mail messages opened by the user and especially to the sender’s address as it can be manipulated to look like a similar address to the real one (infointelexpress@scamcentral instead of info@intelexpress). When a message contains links to web pages, the link should not be followed. Most phishing emails have many syntax errors resulting from translation tools that make them easy to identify.

Malware Injection

What is it?

How do I protect myself?

A common method of hacking used is malware programs, which can infect your computer in the following ways:

  1. Clicking on ads from social media apps
  2. Opening links from malicious mail
  3. By entering malicious websites, which contain malicious software (malware) that infiltrates and installs itself on your computer and performs various unwanted processes, such as finding and copying your already stored passwords

The malware may send the originator the passwords it found or allow a third party to steal your information when you log in to Web Banking.

The best protection is with an antivirus program, which detects the attempted malware infection and prevents it. The user should be careful about the pages they enter and not click on email or social media advertisements as it is common for them to be false and redirect to malicious websites.

Telephone Fraud (Vishing / Voice Phishing)

What is it?

How do I protect myself?

This is a form of impersonation where someone calls impersonating a person associated with the Foundation or a related service. The aim of this type of fraud is either to convince you that you have to pay a fee/debt and to collect a certain amount of money from you or to obtain your Web Banking login details.
Often in telephone scams, callers will call impersonating technicians from large IT companies claiming to have a problem with your computer and requesting remote access to it. If they gain access they will install keylogger software and ask you to log in to your webBanking supposedly to see that it works while in reality they are intercepting your login details.

If you receive a call requesting access to your computer, refuse it and end the call immediately. Contact the legitimate company or service directly through the official contact channels to report the incident.

Short Message Fraud (smishing)

What is it?

How do I protect myself?

This is a form of fraud through a short text message that is sent to the user’s mobile phone and refers them to a malicious website via a link for the purpose of stealing their data.
The messages usually take the form of a message that requires approval and redirects to a “confirmation” webpage and asks the user to log in to confirm.

Services that use confirmation messages send a one time password and do not redirect to a page for login. If you receive such a message, do not follow the link and delete the message.
If you have followed the link do not enter your details.

SECURITY PRACTICES - ADDITIONAL INFORMATION

For your part, you can take some simple measures to ensure the security of your transactions:

Login Credential security

  1. When logging in to the Foundation’s Web Banking, make sure that there is no third party in the area that has access to your screen so as to be able to intercept your username and password
  2. Do not share login details with third parties
  3. Do not access Web Banking from shared networks (public wifi, shop wifi), as someone can steal your data

Security of electronic transactions

  • Access to the Institution’s Web Banking can only be obtained by a Payment Account holder having a unique username and password
  • To complete a transaction, you need to enter a transaction confirmation code (OTP) sent to the mobile number you have registered with the Institution
  • The user code must be changed every 3 months and must be at least 8 characters long with at least 1 capital and 2 special characters
  • Access to Web Banking is limited to the time the user is able to remain active. This time limit is 10 minutes, and once it is over, the connection is terminated and you have to log in to Web Banking again
  • Do not save your passwords in your browser (chrome, firefox etc.)
  • You should preferably log in to Web Banking either by typing the address in the address bar of your preferred browser or from the link on the official page of the Institution
  • If you lose the device with the number you have registered with the Institution, you should contact us immediately to take the appropriate action

Security against online fraud

To ensure the security of your account details, you should be aware of possible malicious emails sent to you. There are fraudsters who try to gain access to your account by directing you to enter your details at addresses or pages that are not related to the Institution but look like the Institution’s Web Banking interface.

Pay particular attention to the websites you enter as they may contain malware.

An additional security measure is to install an antivirus program on the device you are logging in from, which scans the computer, the pages you visit and emails for malware and then removes it.

What to do to stay safe

  • Always visit the official website of the Institution
  • Keep your contact details with the Institution up to date and you can sign up to receive transaction alerts
  • Install genuine anti-virus and anti-malware software on your computer/mobile and keep it up to date
  • Keep your password strong and unique
  • Disable your browser’s autofill settings to avoid storing your password or any other personal/sensitive information
  • Look for the padlock symbol or https in the status bar of your web browser when making transactions
  • Always keep an eye out for spelling mistakes in messages asking you to share sensitive details, as they will help you identify scams

What not to do to stay safe

  • Never share sensitive information such as PINs, passwords, OTP or your card details with anyone
  • Avoid using public Wi-Fi or free VPN/public computers when accessing your bank account
  • Do not click on links you receive from unknown sources/sender notifications
  • Stay away from frequently used passwords such as 123456, names, birthdays, etc.
  • Avoid writing your password anywhere and storing it in browsers
  • Do not download remote sharing applications, e.g. Anydesk
  • Do not accept help from strangers when it comes to transactions via the web banking application

The Institution will never ask for your details by email or text message, and your telephone communications with the Institution will never ask for your Web Banking login code.

In case of fraud or if you suspect that you have been a victim of fraud, follow the steps below:

  • If you have access to Web Banking, change your password immediately.
  • Inform the Institution immediately so that it can take appropriate action.

To inform the Institution, you can call us directly at (+30) 214 4052200 or fill in the form – report