Security works best as a shared responsibility. This page explains general security practices without disclosing sensitive internal controls or making guarantees that no system can reasonably provide.
How we protect accounts
Security is built into the way our digital services are designed and operated. Controls may include encrypted connections, authentication checks, access controls, transaction monitoring, session protection and additional verification when activity requires it.
Authentication and session controls help reduce unauthorised account access.
Additional checks may be applied to transfers, profile changes and other sensitive actions.
Security signals may be used to identify unusual or potentially fraudulent activity.
Administrative and technical safeguards are used to protect information entrusted to us.
How to protect yourself
Your actions are an important part of account security. Use a unique password, protect your devices and review transaction details carefully before approving them.
- Never share your password, transaction PIN, CVV or one-time verification code.
- Do not approve a login or transaction you did not initiate.
- Use official website and application channels rather than links from unexpected messages.
- Keep your registered phone number and email address current.
- Contact support promptly if you suspect unauthorised access.
Passwords and authentication
We may use passwords, verification codes, biometrics, trusted-device checks or other authentication methods depending on the service. A verification code is intended only for the person completing the action that generated it.
Recognising fraud and scams
Be cautious when someone creates urgency, asks you to move money to a “safe” account, requests remote access to your device, asks for authentication codes or claims you must pay immediately to prevent account closure.
Caller ID, email sender names and message branding can be imitated. When in doubt, stop the interaction and contact us through an official channel you independently opened.
Card and payment security
Keep physical and virtual card details private and review merchants and amounts before authorising payments. If a card is lost, stolen or you notice activity you do not recognise, use available card controls and contact support as soon as possible.
Never publish or send a full card number together with its expiry date and security code through an ordinary contact form.
Device and network security
Keep your operating system, browser and banking application updated. Use device locks and avoid signing in through devices you do not control. Public or shared networks may carry additional risk, especially when conducting sensitive financial activity.
Reporting suspicious activity
If you believe your account or credentials have been compromised, change affected credentials where possible and contact support immediately. Provide transaction references or relevant details, but never include a password, PIN, CVV or active OTP in an ordinary support message.
How security incidents are handled
When a potential security issue is identified, we may restrict access, request additional verification, review affected activity, invalidate sessions or take other proportionate steps to protect customers and systems. The response depends on the nature and severity of the event.
Security support
For suspected account compromise, suspicious transactions, phishing or another security concern, contact us using the official support page.
Reach our support team through an official channel.