• Phishing is a word stemmed from password + fishing.
• Phishing scams are a form of identity theft, where spam emails are sent out to entice the victims to update their banking credentials.
• The victims are tricked to click on a bogus hyperlink provided by the fraudster as long as they maintain an email account.
• The victims will then be redirected to a fake login site that is identical to the Maybank2u website.

Phishing websites and emails often look like the real website. Because of that, unsuspecting victims may reply to them and provide confidential personal information that can result in financial losses and identity theft.



Never respond to emails that:

• Requires you to submit your personal information directly into the e-mail or online.
• Requires you to reregister your security image, caption and challenge questions.
• Threatens to close or suspend your accounts if you do not respond.
• Claims there are unauthorized transactions on your account and requires your account information.
• Claims that your account has been compromised and requests you to enter, validate or verify your account information.
• Requires you to enter your card number, password, user ID or account numbers into an email, pop-up window or non-secure webpage.
• Requires you to confirm, validate, verify and/or update your account or credit card information.
• Requires you to confirm your IP address.

• If you receive a suspicious email asking you to confirm the details of your Maybank account, please forward it to cybersecurity.echannels@maybank.com.my
• If you have entered your personal information after clicking on a suspected fraud, please call us immediately at 1300-88-6688. (once comprised, the number should call is our hotline number 03-58914744)

• An SMS Scam happens when a customer receives an SMS claiming they have won “cash rewards”.
• They are then lured to respond by following the fraudster/syndicate’s instructions to apply for internet banking.
• These SMS Scams have been sent out by fraudsters pretending to be from well known organisations.

• A Credit Card/Phone Scam occurs when a customer receives a call claiming that their credit card account has a defaulted credit card payment
• The fraudster/syndicate will then issue instructions for customers to apply for internet banking and enter their account information.
• These fraudsters will also instruct customers not to perform any banking transactions and not to share with anyone for the next few days.

1.Manually Key-in URL

Always type Maybank2u’s URL address www.maybank2u.com.my into your browser to ensure you enter the official Maybank2u.com website



2.Image Verification

Only log in if you see your chosen security image and phrase.



If you see any other Image, Phrase, or any of the samples shown below, DO NOT PROCEED.

• DO NOT key in your password if the image is not available.
• DO NOT key in your password if the image is "Loading".
• DO NOT key in your password if customers are required to RE-register their security image and Challenge Question.

3.Site Authentication

Before entering your username and password,

• Observe the lock iconlocated next to the browser's address bar.
• The certificate should only be for www.maybank2u.com.my and no other websites.
• DO NOT click on any lock icons on the webpage itself.
• If you do not see any lock icon as shown in the images below, DO NOT PROCEED.

Internet Explorer


Mozilla Firefox


Chrome


Safari


4.Update Your Browser

• The latest version of several browsers can detect and warn you of many phishing sites. If you see a phishing warning message on your browser, DO NOT PROCEED.
  
• For a safer internet banking experience, always download the latest version of your internet browser.
• The bare minimum for better browser security is:
  
  Internet Explorer 8/9
  Mozilla Firefox 5.0.1
  Google Chrome 13
  Apple Safari 5.1

5.Phone/Credit Card Scam

• If you receive calls regarding credit cards or loans claiming to be from any financial institutions, please DO NOT share your username, password and Transaction Authorisation Code (TAC) number. DO NOT respond to requests to update 3rd party TAC mobile number.
• We encourage you to take precaution when giving out any confidential information (including your credit card number) over the Internet/phone or any other channels.

6.SMS Scam

• Do not follow instruction from other party to apply internet banking.
• Register your mobile number for your TAC
• Do not register 3rd party mobile number as your TAC mobile number.