Security of payment card use

Recommendations for using payment cards


Security measures when using the card

I. ATM/payment terminal

 

1. Before using the ATM/payment terminal, inspect it for additional devices that do not comply with its design and are located in the place of PIN code entry (keyboard) or in the place intended for card acceptance. If you find a suspicious device, do not use it and, if possible, report it to the bank to which it belongs

 

2. When entering the PIN code, make sure that it is not visible to others. To do this, cover the keyboard with your hand or wallet, or keep both hands on the keyboard so that it is not clear which buttons you are pressing.

 

3. After receiving the cash, be sure to count the bills and make sure that the payment card was returned to you by the ATM, wait for the receipt to be issued if requested, and only then leave the ATM.

 

4. If the ATM does not work correctly (for example, it is in standby mode for a long time, restarts spontaneously), refuse to use it. Cancel the current operation by pressing the "CANCEL" button on the keyboard and wait for the payment card to be returned.

II. Sales network
 

1. When paying for goods and services using a payment card, remember that the card must be in your field of vision (in your hands) at all times when making a payment.

 

2. Carefully check the amount on the screen of the pos-terminal and on the pos-terminal receipt (if any) with the purchase receipt.

III.  Internet network

Phishing still poses a danger to Ukrainian Internet users today, and the number of victims is steadily increasing. Phishing fake websites make up the vast majority of blocked websites developed by criminals. Fraudulent online stores, fraudulent money-making schemes, malware sites, "investment" scams, and service frauds that cheat victims out of their money account for a much smaller share of such sites. Most often, criminals lure victims by promising cash payments and competitions from the state, well-known Ukrainian companies, banks, and international organizations. The increase in the number of phishing sites is due to the active spread of schemes to extort data from bank customers to gain access to online banking, to obtain online loans and subsequent withdrawals from their accounts. The number of detected fake apps on Google Play and the App Store and fake banking chatbots on Telegram that extort card details and accounts for online banking is also growing.

 

1. Use only well-known and trusted websites. Carefully check the correctness of the name and address of the site you are interested in so that you do not suddenly find yourself on a phishing resource.

 

2. The website should have phone numbers and addresses. If only email, viber/telegram and a phone number, which is often a mobile, are listed as contacts, you should be wary.

 

3. Secure sites in the address bar contain https:// and a «padlock» icon.

If you have any doubts about the security of a transaction through a particular website, it is better to refuse to conduct it.

 

4. Pay attention to the methods of payment for goods and/or services. An experienced seller usually offers several payment methods. If in doubt, choose cash on delivery.

 

5. Always check websites if they involve your funds, payment cards, accounts, or other sensitive data. Check the seller on the Cyberpolice service «STOP FRAUD» or check the website you are going to use for presence in the Black List ЄМА.  of fraudulent websites.

6.Be careful when downloading apps from the official App Store and Google Play. Be sure to check who is the author of the application and whether it is related to a real brand; carefully read reviews - you can often find warnings about fraud. The safest way to download a mobile application is to follow the link on the official website of the company that owns it.

7. To distinguish a real chatbot on Telegram from a fake one, use the chatbot checker tool at https://dovidka.info/. The safest way to access a chatbot is to follow the link on the official website of the company that owns it. 

 

Warning, fraud.
 

Never tell anyone: 
- PIN code;

- СVV2/CVC2-code ((three-digit number on the back of the card););

- Card expiration date;

- Codes (numbers) from SMS from the Bank;

- Login and password to the Internet banking.

 

Remember: The Bank, the NBU, the Police do not call or ask for card numbers, passwords, etc.

 

Non-standard situations

1. Lost your gadget?
 

· Call your mobile operator's hotline and block the SIM card;

· Change the password to: Apple ID and Google accounts, social networks, instant messengers, emails, Internet banking.
 

2. SIM card stopped working, what should I do?

 If your SIM card has stopped working, it is highly likely that fraudsters have fraudulently reissued your SIM card.

1. Immediately block the card and access to Internet banking by calling the Bank's Contact Centre.

2. Call your mobile operator, explain the situation and ask them to block your SIM card until all the circumstances are clarified.

 


Useful contacts

Customer support service / Contact centre of the Bank
tel.: 0 800 501 200, +38 044 290 79 00

(data is located on the back of your card)

Cyber police
address https://ticket.cyberpolice.gov.ua, or tel.: 0 800 505 170

The official website of the National Bank of Ukraine (bank directory containing information on banks and separate subdivisions of banks)