check it twice, as it’s all about money!

how does it work in practice?

Security is ensured by K&H through a so-called trusted chain. This means that you don’t need to go to a branch for each transfer or payment, or use cash. It also allows you to bank with ease using your mobile phone.

• when you opened your bank account and requested your account package, your bank card or the various banking solutions you have used regularly since then, you were identified
• you received IDs from the bank, and you provided codes you can bank with
• when you install a banking application on your smartphone, it is ‘connected’ in the background to your device and the identifiers and codes you have received and entered in your account (e.g. K&H myID, m-PIN, etc.)
• under the strong customer authentication (SCA) process, your approval is always preceded by the receipt of a message with the details of the transaction, and you can give your consent through double approval (e.g. password + code received in a text message (SMS), giving an OK to the message received on your mobile phone, or using mobile token + mPIN).
• this is needed to prevent other people from using your codes on another phone or device - for example, on a tablet - to withdraw money from your account, or pay in a webshop using your bank card details.

worth bearing in mind

The EU’s PSD2 rules do not apply to online card purchases made through sites that operate outside the European Economic Area, in Asia or the US. In such cases, the provision of card details and the tracking of card payments still require special attention.

watch out for messages

It clearly follows from the above that the confirmation message received before approving transfers and payments must always be read carefully, from beginning to end.

If the details in the message - e.g. the sum, the partner or the recipient account number - are not exactly the same as what you intended to provide, or, in particular, if the message was not triggered by your intention to initiate a payment transaction, do not approve the transfer/payment. If you suspect that there is some kind of fraud involved, call K&H TeleCenter straight away, and they will help you clarify the situation.

limit it when you don’t use it

You can further increase security by setting limits for unused payment options. K&H mobile bank and e-bank offer quick and easy ways to assign daily limits to the payment transactions going through your card or account, even separately, for example, for transfers and online payments.

If you don’t use a bank card for online payments, it is useful to set the online limit to zero. If you change your mind and want to use it to make a payment, you can increase the limit immediately (and reduce it back, of course, after the payment).

This also gives you the opportunity to reduce your card limits instantly in K&H e-bank or K&H mobile bank, or even suspend your card if you are not sure whether your card has been lost, stolen or simply misplaced. If your card has been stolen or lost, or if you suspect that it has been misused, you can block it free of charge via K&H e-bank, K&H mobile bank or the K&H TeleCenter.

protect your devices

It may also be clear how important it is to appropriately protect the computer or smart device (phone, tablet) which you use to access K&H e-bank or K&H mobile bank.

Never give your devices to anyone else (e.g. to an adult family member), even temporarily. Nor to your children, who often may not know how to use a smartphone, or, in particular, how a banking app works. Always protect the smart device (phone, tablet) you use for banking with a screen lock (passcode), PIN code or biometric identification (typically fingerprint). However, if you use facial recognition, be aware that if someone holds your phone in front of you, it unlocks the screen in a split second, so whoever is holding the device will have access to the contents of your phone. Be very careful!

It’s also important to note that if you allow someone else (e.g. a family member) to unlock your mobile phone using fingerprint or facial recognition, you are also allowing them to approve bank transactions - the banking app cannot distinguish between people from the fingerprints you capture.

It is also important that you should not allow strangers to access the computer you use for e-banking, for example for the purpose of remote assistance. Do not install remote access software. Remote access may allow unauthorised persons to monitor your banking practices and even access confidential information, including - in the worst case - transaction approval data (e.g. passwords used for online payments with your bank card).

Learn about the innovations in K&H’s mobile bank for secure and convenient banking on your smartphone

K&H mobile bank