In order to conduct online transactions in a secured way, City Union Bank has introduced Three New Security Features.

• Image Recognition and a Welcome Message both to be chosen by the user .
• One time Password (OTP) Which will be sent to your Registered Mobile for every Transaction
• Soft Token DSC

1. What are the pre requisites for availing this facility?

• Registration of your Mobile Number with your parent Branch
• Registration of your E-Mail Address in the Net Banking in main menu->options->change user preference.

When clicked on the above option it will show the e-mail address as available in the bank records.

If required this e-mail address can be changed and saved. This e-mail address will be validated by

us by sending a mail to this address . A link is provided in the e-mail which is to be clicked by users

Unless this e-mail is responded the mail address provided will not take effect.

• User have to register for this feature, the steps for which is given below .
• The Multifactor Authentication feature can be enabled or disabled using Main Menu->Multifactor Authentication->Enable MFA .

2. How to Register ?

There are 3 steps to get registered –one time only

1. Registering for Image Recognition, Challenge Question and Welcome Message

This consists of 3 steps.

• a)Immediately after Login to the net banking, you are asked to choose a question out of the available questions and to provide the answer for the same . This question will be asked by the system subsequently whenever the user change the e-mail address or fail to identify correct image for 3 times continuously. Only on providing the correct answer ,the system allow the user to proceed further. This is to prevent unauthorized users from performing transactions by knowing the login id/password etc.,
• b)To select one image out of 12 Images shown. When the user log in to the net banking subsequently , the selected image along with 3 other images will be shown and the user will be asked to select his image. If the user selects wrong image for more than 3 times the challenge question will be asked along with the images and you will be asked to enter the answer for the same or select the image. Only upon providing correct answer or selecting the correct image you will be permitted to proceed further. This image can be changed using MainMenu->Multifactor authentication->Change authentication image option.
• c)Next, the customer will be asked to enter a message or slogan which will be shown to them at the time of login subsequently. By seeing this message/slogan the customer can be sure that they are logging into the secured net banking site of the bank.

2. Registering for One Time Password(O T P).

After the completion of registration of the image recognition, challenge question and welcome message,the System will show the registered Mobile Number as available in the bank records. If the Mobile Number is correct Click the Register Button for OTP.

3.DSC SOFT TOKEN

We have implemented multifactor authentication (MFA) mechanism in our retail Net / Mobile banking to enhance the security.

For the ease of transaction and to avoid delay in SMS delivery for OTP, we have introduced Soft token as additional factor authentication for Retail customers and Corporate Customers. One time registration is required in the Netbanking / Mobile banking application and linking the handle-id (soft token id) in the Xorkee app (Soft token authentication app). Customers can choose the “Soft Token” as second factor authentication (similar to OTP) during their transaction process, authenticate the transaction by approving in soft token app (Xorkee App) and complete the transaction.

This soft token feature has been implemented to both NRE and domestic customers.

For corporate customers we have provided Net Banking and mobile banking facilities to effect transactions like fund transfer, bill payment, tax payment, Bulk NEFT, salary file upload, etc.

4. HOW DOES THE ABOVE SECURITY FEATURES WORK?

After entering the Login ID , the system will show 4 random images which includes the image you have already selected and the Welcome Message . User have to select the image already registered and click NEXT to proceed to enter the Login Password. ( This will protect the phishing attack). If the user has wrongly selected the Image three times the system will show the challenge question originally selected by the user at the time of registration along with the images. User can either answer the challenge question or select the correct image to proceed further.

After entering the Transaction password at the time of authorizing the transactions , the system will show  OTP.  If you have selected OTP, an SMS will be sent to your mobile and you have to enter the value mentioned in the SMS in the space provided .