Security Features in Internet and Mobile banking

Login Time Restriction :

• We provide an option to customer to set Login time restriction in our Net and Mobile Banking. Once the login time restriction is set customers will be able to log into their Net/Mobile banking within the stipulated time limit. Trying to login beyond the login time will ask for an MFA which will be sent to the registered mobile number of customer.
• Menu in internet and Mobile banking: Security --> Set Allowed Login Time
• Customers can set restriction for all day so that every login through Internet/Mobile banking will be authenticated with OTP
• If Login allowed "From time" and "End time" set as Same time(eg: 00:00), Customer will not be allowed to login Internet Banking/Mobile Banking without OTP anytime

Set Transaction Limit:

• Our Internet/Mobile banking limits can be set by customer himself/herself
• Menu in internet and Mobile banking: Fund Transfer --> Set Transaction Limit
• Internet banking and Mobile Banking limits can be modified anytime based on the customer's convenience
• Limit can be set even to 0 so that no transactions can happen without the customer's concern thereby fraudulent actions can be prevented

Set Card Limit:

• Our debit card limits can be set by customer himself/herself
• Menu in internet and Mobile banking: Cards --> Manage card
• Debit card limits, channel wise enable/disable can be modified anytime based on the customer's convenience

Block/Unblock ATM Card:

• Our debit card can be block/unblock by customer himself/herself
• Menu in internet and Mobile banking: Cards --> Debit/ATM Block or Debit/ATM Unblock
• Debit card limits, channel wise enable/disable can be modified anytime based on the customer's convenience

Double passwords control :

• Our Netbanking has dual password control strategy that includes the log-in password and transaction password.
• Strong password policy is enforced and we urge our customers to use a complex password which is of 8 to 22 digit (alphanumeric along with Capital letters and Special Characters) and that it is not easily guessable by others.
• For funds transfer, users need a separate transaction password. Setting double passwords can effectively prevent the security threats posed by the disclosure of one password.
• After five unsuccessful attempts to login, the password will be blocked by our banking system automatically. Alert will be sent through SMS on invalid attempts.
• Internet Banking user ID expires if it is not used for a period of more than one year

Transaction Authentication Methods :

• Fund transfer can be initiated through various modes like within own account, our Bank and to other Bank accounts (IMPS / NEFT/ RTGS).
• Every transaction can be facilitated through MFA. OTP and Digital signature are the two MFA's currently in use. In the case of Corporate Net banking, transactions above threshold limit will be carried out only using DSC (Digital Signature Certificate).

Notification :

• On every successful debit and credit transactions, customers will be notified through various mode like SMS to their registered mobile number, Push notifications and email

Session Timeout :

• Each session of online transaction is protected by unique session id and to protect our accounts against unauthorized access, our bank systems are designed to terminate a secure online session automatically if an extended inactivity is detected.
• If user session inactive for 10 minutes, the session will be terminated. In such a situation, user has to login again to continue their activities.

Device binding :

• This application helps to perform mBank Device Binding so that the customer can access their account from their registered mobile number and device will get binded to the account. If user device changes then need to do registration process again.

Detect Unsecure WIFI :

• Our mobile application will detect the nature of WIFI, in which mobile device is connected. For both Android and IOS, Passwordless WIFI is detected as unsecure WIFI and alert the customer. The customers can skip and continue banking.

Detection of Screenshare Application :

• On startup, mobile banking android application will detect for any screen share application like Anydesk and alert the customers. The customers can skip and continue banking.

Blocking on developer options :

• On startup, if developer options enabled, mobile banking android application will forcefully close and ask the customer to disable the developer mode. This cannot be skippable.