Back

Debit Card Safety Tips

If you suspect you've been scammed, immediately call Maybank's 24/7 Fraud Hotline at 03-5891 4744 or the National Scam Response Centre at 997.

Klik di sini untuk Bahasa Melayu.

Good habits to follow in keeping your card details safe


Having a card brings about a world of convenience: no more thick wads of cash to lug around, or having to forgo that great bargain because you're a little short on money and there's no ATM in sight. Whether you're using your card over the Internet or at the store, there are several steps you can take to ensure that your card is not misused.

Safeguard your card against fraud

  • Place your signature on your card immediately once you have received it.
  • Make sure that your card is always kept safely with yourself. Immediately contact our Maybank Group Customer Care to report lost or stolen.
  • Do not lend your card to anyone.
  • Do not disclose your card details to anyone.
  • Do not carry your PIN together with your card or disclose it to anyone.
  • Keep our Maybank Group Customer Care telephone number handy in case of lost/stolen cards, unauthorised transactions or PIN disclosures.
  • Cut your expired cards into two when you receive your new cards.

Checking your card transactions

  • Check all details on the transaction slip before signing or confirming the transaction.
  • Keep the transaction slips and verify them against your card statement when it arrives.
  • Notify our Maybank Group Customer Care immediately of any error or possible unauthorised transactions.
  • Destroy all your duplicate transaction slips or the one that you don’t need it before discard them away.

Security Tips


Are contactless transactions secure?

Are contactless payments safe?

How safe are mobile payments?

Do's and Don'ts


Do's

1. Receiving New / Renewal / Replaced Card

  • When you receive your new/renewal/replaced card, always check that the sealed package is not tampered with and the card is in your name. In the event the sealed package containing your new/renewed/replacement card is compromised or does not belong to you, please contact our Maybank Group Customer Care immediately.
  • Once you confirm the card is yours, please destroy your old/expired/unusable card immediately by cutting it into several pieces ensuring that the chip and magnetic stripe portion is completely damaged.
  • Immediately sign on the signature panel at the back of your card upon receipt.

2. Using Your Card at Retail Outlets

  • Treat, value and protect your card as if it is cash. Keep your card in a secured place or ensure that it is in your possession at all times.
  • Check and ensure that the correct card is returned to you after any purchases.
  • Ensure that all transaction is made/authorised by you (face to face or on phone/internet).

3. Online Usage

  • Sign up for Maybank Secure Online Shopping (MSOS) to ensure protection and safety of your online transactions.
  • When purchasing items over the Internet, give your card details only on reliable websites or to a company you trust. Reputable merchant sites use encryption technologies to protect your card information.
  • Please avoid using a public computer to shop online. If you do, please remember to log off and quit the browser when you are finished. This is to avoid someone to hit the "back button" to view your personal information.
  • Make sure that you have checked the policies on payment, refunds, returns and shipping before completing an online purchase.
  • Always print and save the confirmation page when completing an online purchase. Record and keep your receipts for all your purchases including online purchases.

4. Managing & Filing Your Statement

  • Secure your letter mailbox, promptly collect your mail and be vigilant for identity theft. If you do not receive your card statements on time, please contact the Bank promptly.
  • Shred all documents (transaction slips, statements, etc) that contain card details before you discard them.
  • Promptly check your card statement and report immediately if there are any transactions that you do not recognise or are unauthorised by you.

5. If Card Is Lost / Stolen

  • Keep the Bank phone numbers readily available with you to immediately report any lost or stolen card. Always report to your Bank if your card is lost or stolen, and always check your cards periodically to ensure that the cards are not missing from your wallet.

6. Change of Address / Contact Number / Email Address

  • Notify the Bank in advance of your latest mailing address, mobile number and e-mail address to allow the Bank to perform verification of unusual or suspicious transactions.

7. Beware Of Scam

  • Be wary of sales gimmicks and tactics that ask for your card details, e.g. "SCRATCH & WIN" contests or contests sent via SMS.
  • If you receive a call from a Telemarketer, ask questions. The fewer questions the caller can answer, the more likely they are calling from an illegitimate business.
  • Do not provide your card number over the phone, unless you initiated the call.
  • Ensure the calls are made to a reliable and trusted company.

8. Secure your devices and networks

When securing your digital information, there are a few best practices to follow:

  • Make sure your computer is equipped with a firewall. Be sure to change the password and keep the firewall turned on to protect your computer from external attacks.
  • Download and install updates to your operating system, software and browser when prompted. These updates tend to include the most up-to-date security features to secure your computer and the information stored on it.
  • Install security software. The two most common types are antivirus, which protects your computer from malicious code, and anti-spyware, which keeps people from monitoring your activity. Even if you have security software, avoid downloading programs or files from unknown places.
  • Avoid connecting to public Wi-Fi networks when performing banking related transactions. Consider using your mobile phone data network or trusted private networks to access banking’s services instead.

Don’ts

1. Safeguarding Your Card

  • Never leave your card in any unsecured place, lying around at home or in the office where someone can have access to it. If you do not want to use your card, keep it in a safe and secure place.
  • Don't leave your card in the glove compartment of your car.
  • Never sign a blank card sales receipt. When you sign a receipt, strike a line through the blank spaces above the total.
  • Do not lend your card to anyone. Your card is not transferable.

2. Safeguarding Your Pin and Personal Information

  • When creating passwords and PINs, do not use anything that can be easily associated with yourself such as your date of birth, identity card no., etc.
  • Do not record such information on anything in your wallet.
  • Change passwords periodically and pick different ones for every account—don’t use the same password for your bank account and retail sites.
  • Do not carry your PIN with your card or disclose it to anyone.
  • Never send account information, such as account number or PIN in an e-mail as it may be intercepted.
  • Do not reveal personal details or your card details to any unknown party.
  • Beware of imposters who claim to be from the Bank and ask to "verify" your account details (via call/email). The Bank already has your details and does not require them from you.
  • If you are unsure, please contact the Bank for further confirmation/ clarification.

3. Online Usage

  • Never provide your card information on any website that is not a secure site.
  • Never provide your card information online unless you are making a purchase.
  • Never respond to e-mails that request for your card information or that ask you to go to a website to verify personal and/or card information.
  • Be cautious about e-mails that offer credit services. Many unsolicited e-mails are fraudulent.
  • Never click on Internet links within e-mails. Instead, type the known URL in the browser, e.g. www.maybank2u.com.my

Got a questionable transaction on your statement?
To facilitate transaction queries or disputes, print out the Dispute Form (PDF) and fill in with the required information.
Attach copies of the relevant documents or Sales Drafts and email to us at disputemgmt@maybank.com.my or mail it to us at:

Maybank Credit Card Centre
c/o Customer Service
7th Floor, Menara Maybank

Secure Transactions Online


The Internet has become a vast marketplace for global goods and services. For e-commerce to prosper, you must feel safe when transmitting card and other financial information. Because data traveling over the network actually passes through many computers along the way, the opportunity exists for someone to intercept confidential information. Hackers also break into computers to steal stored data.

How might this affect you? Let's say you want to buy some merchandise from an online store. If you provide your card number, how do you know it will travel safely from your computer to its final destination? With the tremendous potential for doing business online, there's a lot of time and money being spent trying to make Internet transactions secure.

It's done with a technology called authentication (3-D Secure). MSOS (Maybank Card's Secure Online Shopping) – It is a specification developed by Visa and MasterCard to improve transaction performance online and to accelerate the growth of electronic commerce transactions. The 3-D secure protocol is a technical platform that includes technical specifications and requirements for Issuers, Acquires and Merchants. It provides merchant with the ability to request an online verification of the card member ability at the time of purchase. With this solution, cardholders are able to authenticate themselves. MSOS requires cardholders to enter their special code in a separate browser window before the transaction can be authorized. Use of this unique personal code gives cardholders the added peace of mind that comes with knowing that no one else has access to their card information. Cardholder must enter their personal Code / Password in Maybank Secure Authentication Window before their online transaction can be authorized.

All online financial transactions should be secure. Many online stores have what's known as a secure page. There may be a notice to that effect posted on the site. Alternatively, you will see a small Secure Authentication Window (Secure Code or Verified by Visa), indicating that the site uses security technology.

If you are still uncomfortable sending sensitive information, many sites provide a phone number you can call to give your card number.

Identity Theft


Identity theft is often in the news, but there are a lot of misconceptions swirling around about how to best protect yourself.

While some identity thieves may focus on getting your cards and maxing them out before you even realize they're missing, an increasing number are using one piece of information about you -- often a card number - in order to steal your entire identity.

Though many folks worry about keeping their card information secure when shopping online, the top methods that identity thieves use to steal personal data are still low-tech.
Watch your personal documents, be careful to whom you give out your data over the phone, and be careful of mail theft.

No one is immune to identity theft, but armed with a little knowledge about how identity thieves operate, and a little common sense, you can stay one step ahead of them.

Thieves don't need your card number in order to steal it

Conversely, they don't need your card in order to steal your identity. Identity thieves are crafty; sometimes all they need is one piece of information about you and they can easily gain access to the rest. As a result, today it's crucial to lock up important documents at home. Secure birth certificates, MyKad and passports, in a safe deposit box or in a safe hidden at home. And that includes cards when not in use.

The non-financial personal information you reveal online is often enough for a thief

Beware of seemingly innocent personal facts that a thief could use to steal your identity. For example, never list your full birth date on Facebook or any other social-networking Web sites. And don't list your home address or telephone number on any Web site you use for personal or business reasons, including job-search sites.

Be careful with your snail mail

Follow your billing cycles closely. If a card or other bill hasn't arrived, it may mean that an identity thief has gotten hold of your account and changed your billing address. Never place outgoing mail in your post office box or door slot for a carrier to pick up. Anyone can grab it and get your card numbers and other financial information. Bring it to the post office yourself.

Review all bank and card statements each month, preferably once a week

Watch for charges for less than RM1 or RM2 from unfamiliar companies or individuals. Thieves who are planning to purchase a block of stolen card numbers often first test to check that the accounts haven't been cancelled by sending a small charge through, sometimes for only a few cents. If the first charge succeeds, they'll buy the stolen data and make a much larger charge or purchase. They're guessing, and often correctly, that most cardholders won't notice such a tiny charge. In addition, many of the fraud alerts you can set on your accounts aren't triggered by small dollar amounts. Reviewing your credit report on a regular basis is also a good idea, but usually by the time a fraudulent transaction reaches your credit report, it's too late.

If an ATM or store terminal looks funny, don't use it.

Make sure there is no device attached to any ATM card slot you use.

As a general rule, the mouth of a card receptacle on an ATM machine should be flush with the machine or have only a very slight lip. If it looks or feels different when you swipe your card, or has an extra piece of plastic sticking out from the card slot, it may be a skimmer, an electronic device placed there by thieves that captures your card information when you swipe it. If you notice it after you've already inserted your card, you should alert your bank so they can watch for any fraudulent charges to your account.

Identity thieves love travellers and tourists

Travellers should be alert to strangers hovering around whenever you use a card at an ATM or phone, and to avoid public wireless Internet connections unless your laptop or PDA has beefed-up security protection.

Pay attention at the checkout line

If a cashier or salesperson takes your card and either turns away from you or takes too long to conduct what is usually a normal transaction, she may be scanning your card into a handheld skimming terminal to harvest the information. But they don't need a handheld scanner to capture your information. They can take a picture of the front and back of your card with a cell phone or merely swap out cards. Look at your card when they hand it back and make sure it's yours, and not gold, silver, or blue card that looks like yours. You may not notice they swapped your card for days.

Go paperless in as many ways as possible

Cut back on the mail receive from banks and financial institutions by discontinuing paper bills and statements. Access your financial statements at Maybank2u.com instead. This strategy has the added bonus of an environmental benefit. Similarly, we recommend that whatever paper receipts and financial statements you do receive go through the shredder instead of into the wastebasket. Never throw away a card slip. Instead, shred anything that has any number, name & address on it.

Security announcement on Card-not-Present for Non-3D (non-secured) online transaction and Overseas Flag Activation


Dear Valued Customers,

Kindly take note of the security announcement on Card-not-Present for Non-3D (non-secured) online transaction and Overseas Flag Activation

 

Card-not-Present for Non-3D (non-secured) online transaction

A Card-Not-Present (CNP) transaction is a retail spend transaction where the cardholder is not physically present (i.e non face-to-face) at the merchant when the payment is made such as Non-3D (non-secured) online transaction and mail order / telephone order (MOTO).

In line with the regulators’ guidelines, all banks are required to block any cardholder from making any CNP transaction which is not authenticated via strong authentication method such as dynamic password using a debit card, UNLESS the cardholder has expressly opted-in to conduct such transactions. This is to protect and prevent cardholders from becoming victims of fraudulent transactions.

Cardholders must be aware that activating of debit card for CNP which is not authenticated via strong authentication method may lead to the cardholder’s account being compromised, and the information illegally used, opening to the risk of unauthorised purchases or use of the card. Cardholders are advised to visit secure websites for any online purchase / internet transaction to avoid any fraudulent case and to check their accounts regularly.

 

Debit Card Overseas Flag

Debit Card Overseas Flag is an indicator which the cardholder needs to activate to get access to worldwide ATMs for cash withdrawals and Point-of-Sale (POS) transactions overseas.

When a cardholder has activated his/her debit card overseas flag for any overseas usage transactions, the cardholder is advised to be aware that there is a risk that his/her debit card may not have secure verification features for ATM / POS transactions which may vary among countries / merchants. A fraudulent transaction may occur if the cardholder’s data is compromised.

Cardholders are advised to always conduct overseas transaction with caution to avoid any fraudulent case.

Suspect you’ve been scammed?


Immediately call Maybank's 24/7 Fraud Hotline at 03-5891 4744 or the National Scam Response Centre at 997.