Security Advisory
UOB adopts appropriate precautions and security practices to enhance the safety of your Internet access. It is also important that you are aware of intruders, viruses and malicious programmes - please read the following security alerts:
Banking Security
Your security is our priority when you bank at UOB. Please be mindful of financial fraudulent schemes undertaken by unscrupulous people with the intention to deceive, cheat or trick customers of their money. Please ensure that you take the necessary security measures to safeguard yourself.
What can you do to protect yourself:-
- Ensure that you log in to the correct website address http://www.uob.com.my directly onto your browser address bar. Once you log into the login page, ensure that the website address changes from http:// to https:// to show that you are now in a secured site. You should also look out for the security icon which is a lock or a key.
- Ensure that you log out when you have finished your banking session and clear your cache immediately.
- Ensure that you use unique passwords that are alphanumerical and cannot be easily guessed. For example, a weak password is a combination of your name and birthdate.
- Do not leave your username and password lying around. Ensure that no one is watching while you key in your username and password.
If you believe that your card number and/or ATM/credit card PIN is compromised or that there has been an unauthorised breach or transaction on your account, you should notify the Bank immediately by calling our Customer Service at
- Kuala Lumpur 03 - 26128121
- Penang 04 - 2401121
- Johor Bahru 07 - 2881121
- Kuching 082 - 287121
- Kota Kinabalu 088 - 477121
PDRM Alert
ALERT FROM THE ROYAL MALAYSIAN POLICE
- NEVER respond to any phone call / SMS / e-mail requesting for your bank account details
- NEVER reveal your bank account details / ATM PIN / Internet banking password to anyone
- NEVER follow instruction from unknown party to do banking transaction or make changes to your bank account details
- NEVER be a victim of schemes that sound too good to be true
BNM Alert
Beware of Fraudulent SMS and Telephone Calls Requesting Confirmation on Credit Card Transactions.
Bank Negara Malaysia would like to caution members of the public to be vigilant when receiving any calls or SMS claiming that it is from Bank Negara Malaysia or any commercial banks.
The facts are:
- There is no department called "Unit Kad Kredit Palsu" in Bank Negara Malaysia
- 8659-XXXX is not a Bank Negara Malaysia telephone line
- Bank Negara Malaysia will NEVER request for personal banking information through SMS or telephone calls.
Based on recent complaints received by Bank Negara Malaysia, there has been an increase in incidents of fraudsters making such calls and sending SMS to unknowing members of the public in order to fraudulently obtain their personal banking information, with the aim of siphoning monies from one's account.
From Bank Negara Malaysia 's investigations, the modus operandi of the scam is as follows:
- Victim receives SMS or telephone call: Requesting victim to confirm a credit card transaction for the purchase of goods or services purportedly charged to the victim's credit card.
- When victim calls the telephone number provided in the SMS, the fraudsters identify themselves as agents of a commercial bank, and again, ask the victim to confirm whether the credit card transaction had taken place.
- When victim informs the fraudster that he has no such credit card or transaction, the fraudster will start to sound concerned and will advise victim to lodge a report with Bank Negara Malaysia's "Unit Kad Kredit Palsu", or with the commercial bank's "credit card management department". The fraudster will provide the victim with the telephone number for the "Unit Kad Kredit Palsu".
- When victim calls the telephone number provided, they are greeted by a automated voice message which identifies the company as Bank Negara Malaysia, and the call will then be answered by someone claiming to be a Bank Negara Malaysia officer. This officer will request for information relating to the victim's banking and credit card accounts under the pretense of lodging a complaint on behalf of the victim.
- The fraudsters now have sufficient information to illegally transfer funds out of the victim's bank account.
For further information, enquiries or complaints, members of the public may contact or visit:
BNMTELELINK (Customer Contact Centre)
Tel: 1-300-88-5465
Fax: (03)2174 1515
Email: bnmtelelink@bnm.gov.my
BNMLINK (Walk-in Customer Service Centre)
Block D, Bank Negara Malaysia
Jalan Dato' Onn
50480 Kuala Lumpur
(Business hours: Monday - Friday, 9:00 am - 5:00 pm)
ABMConnect (Hotline to Association of Banks in Malaysia)
Tel: 1-300-88-9980
Types of Fraud
- Email Fraud
- Please beware of fraudulent emails and web sites purporting to be from banks that request recipients to "update or validate" their sensitive log in, account information and personal details. These emails and web sites may use false email addresses, logos and graphics to mislead customers into accepting their validity or may use fake domain names so as to appear genuine. Fraudsters use the collected information for financial gain or identity theft. This is known as 'phishing'.
Although they can be difficult to spot, the emails generally ask you to click a link back to a spoof website and the letters ask you to call a phone number, and provide, update or confirm sensitive personal information. To bait you, they may allude to an urgent or threatening condition concerning your account.
Example of fraudulent emails:
FRAUDULENT EMAIL No. 1
Date: 3 August 2010
FRAUDULENT EMAIL No. 2
Date: 4 August 2010
FRAUDULENT EMAIL No. 3
Date: 23 August 2010
FRAUDULENT EMAIL No. 4
Date: 14 July 2006
We wish to highlight that UOB will never send emails to customers to request, provide, update or verify User ID, Password, PIN, TAC, account, card or personal information.
You should NOT respond to such emails, letters, websites or phone or reveal your PIN to anyone. Keep your PIN private and do not share this with anyone, particularly on written correspondence such email or letters.
What you can do
Call UOB 121 at (6)03-26128 121 (KL) , (6)04-2401 121 (PG), (6)07-2881 121 (JB) , ((6) 082-287 121 (KCH) , (6) 088-477 121 (KK) to report any suspicious emails, letters, websites or phone calls.
Our security team will then investigate and disable the look-alike site. Remember, always sign on to Internet banking from your browser by typing www.uob.com.my into the address bar or add UOB Malaysia to your list of favourites. Do not follow links from an email.
United Overseas Bank (Malaysia) Bhd's official website address is www.uob.com.my. Customers should not log in to any other website other than this website. Customers should note that after logging on to UOB Internet Banking, they will find a "lock" icon at the bottom of their browser. By double clicking on this icon, a page on the security information will appear. It should show a certificate belonging to www.uob.com.my and digitally signed by Verisign as displayed below:
All UOB Internet Banking customers are thus advised :- not to reveal or disclose their Internet Banking password to anyone at any time.
- not to input their User ID and password at ANY OTHER website that is not www.uob.com.my
- that if they suspect a website is not what it purports to be, leave the site immediately.
- Please beware of fraudulent emails and web sites purporting to be from banks that request recipients to "update or validate" their sensitive log in, account information and personal details. These emails and web sites may use false email addresses, logos and graphics to mislead customers into accepting their validity or may use fake domain names so as to appear genuine. Fraudsters use the collected information for financial gain or identity theft. This is known as 'phishing'.