Security
Internet has revolutionized the way online users can shop and avail services like Online Banking from anywhere, anytime without physical presence. For Online Banking we use Secured Java Applet and Security Gateway technology that provides Triple-DES encryption to protect all your data transmitted over the Internet. From the moment you log-in to the time you log-out, all information is protected by strong end-to-end encryption; i.e. from your PC browser to the Bank's system. This also gives an opportunity for fraudsters to use internet as medium to commit frauds. It is important for online users to be aware of such frauds and protect themselves against them.
Protected by the most stringent security systems, our NetBanking allows you to transact over a completely secure medium. All your transactions travel via 256-bit SSL encrypted medium, the highest level of security on the internet. The servers are protected with firewalls that make unauthorized access impossible. Dhanlaxmi Bank has best of the breed security solutions backed with robust processes in place to extend secure NetBanking services to its customers. Each customer is, provided with a NetBanking ID and Password. Your password is generated in such a way that it is only known to you. Here are some additional steps that you as a user can take to ensure that you are taking the necessary precautions.
Protected by the most stringent security systems, our NetBanking allows you to transact over a completely secure medium. All your transactions travel via 256-bit SSL encrypted medium, the highest level of security on the internet. The servers are protected with firewalls that make unauthorized access impossible. Dhanlaxmi Bank has best of the breed security solutions backed with robust processes in place to extend secure NetBanking services to its customers. Each customer is, provided with a NetBanking ID and Password. Your password is generated in such a way that it is only known to you. Here are some additional steps that you as a user can take to ensure that you are taking the necessary precautions. Know More
RBI has cautioned the members of public not to fall prey to fictitious offers / lottery winnings / remittance ofcheap funds in foreign currency from abroad circulated by certain foreign entities / individuals, including Indianresidents acting as representatives of such entities / individuals. These entities make offers through lettersor e-mails of huge amounts of money in foreign currency on the pretext of helping the recipients in their businessor ventures in India.
The fraudsters seek victims’ bank details under different heads such as deposits, processing fees/ transactionfees/tax clearance charges/ conversion chares, clearing fees etc. These offers are generally made through letters,e-mails, mobile phones, SMSs, etc.
Remittance in any form towards participation in lottery schemes is prohibited under Foreign Exchange Management Act,1999. These restrictions are also applicable to remittances for participation in lottery-like schemes operatingunder different names, such as money circulation scheme or remittances for the purpose of securing prize money orawards.
It is advised that all customers of the bank exercise due caution and be extra vigilant in their dealings.
- Do not share your confidential details (ID, Passwords, Card Numbers, PINs, CVV and Card Expiry Date etc.) to anyone & do not store these information which can be accessed by public( Mail boxes/Behind your ATM Card)
- Create very strong and complex passwords,change your Internet Banking password regularly and don't use the same password for other services.
- Do not use public computers or unsecured Wi-Fi networks for Internet Banking transactions .
- Always memorize your password or PIN and do not write it down or store it on your computer, Smartphone or tablet. You are responsible for keeping this information confidential. Do not share OTP (One Time Password) with anyone.
- Keep your computer, Smartphone or tablet up-to-date with anti-virus, firewall software and the latest patches. Any computer, Smartphone or tablet connected to the Internet faces the risk of virus infection, so it makes sense to secure your computer adequately with licenced antivirus software.
- Always log out from the Internet banking menu when you finish all your banking activities. Close your Internet browser after logging out at the end of each Internet banking session
- Always access our website www.dhanbank.com by typing the address into the browser or keeping the address in your 'favourites' or 'bookmark' folder to reduce the risk of mistakes or deception.
- Always login to our Internet Banking site by clicking on URL available at our corporate website (www.dhanbank.com).
- Always verify the authenticity of the Bank's Net Banking webpage by checking its URL as https://netbank.dhanbank.in . In particular beware of Bogus Websites and Email Phishing.
- Do not login to the internet banking site by clicking the URL received in e-mails. Beware of any unusual windows that 'pop up' during an Internet banking session and be very suspicious if it directs you to another website which then requests your customer identification or password
- It is highly recommended to use the virtual keyboard while logging in to net banking because virtual keyboard is an additional precautionary measure and protects you against malicious key logger programs, which might have infected your computer.
- Limit the amount of personal information you provide on social networking sites. The more information you post, it would be easier for the hackers to steal your identity, access your data or commit crimes.
- Do not use your mobile device to store sensitive personal information or credentials of your Internet banking.
Security features in Mobile Banking Services
- Separate passwords for login and transaction
- Password Expiry period –System will force user to change login and transaction password mandatory after specified period
- User Expiry period – User ID would get disabled if user does not login for a period of 180 days
- MPIN will be locked after '5' consecutive unsuccessful login attempts
Handset/ Mobile Browser Settings
- Install anti-virus software on your mobile handset to protect against viruses. If already installed, then ensure its updations on a timely manner.
- Download and run security updates and patches on your mobile browser. This helps in protection from known possible security problems.
- Install a firewall on your mobile handset or enable the same if your handset comes with a firewall.
- Remove all the temporary internet files after using mobile banking services.
- Delete the browsing history of your mobile browser on a regular basis.
ChecksumChecksum for PlayStore
Application Operating System Release Version Checksum DhanSmart Android 3.4 B265585143B1CA9A83265BDB9267663E7A17AB22307560322E99266EDFE2F68B
Checksum for App Store
Application Operating System Release Version Checksum DhanSmart ios 3.4 34AA93BEEFBE4ECC0293CEB3F70627F0BD57BF77EE000009933C5F1FF72095E0
Emails/ Data/ Links/SMS from Unknown Sources
- Do not open attachments or links from unknown sources. This helps in protection from viruses or other unwanted problems.
- Type in the URL for mobile banking in the mobile browser, instead of clicking on any link. This will ensure access of the authentic website of the bank.
- Ensure that Mobile banking app is downloaded from relevant App Store. (Eg: PlayStore for Android OS)
- Update to latest version of Mobile banking app when ever it is available in relevant App store
- Act with caution while installing any third party software on your mobile handset to avoid spyware. Do not install pirated software or software from unknown sources.
- Delete spam messages.
- Be aware of the potential for fraudulent SMS messages. The Bank will never request or invite customers to logon to its mobile banking service via a SMS message.
- Check that the security padlock on your internet browser is “locked” to ensure the connection is secure and protected by SSL. You should also check that the URL starts from ‘https’ and not ‘http’.
- The bank shall not be liable for any loss/damages due to any attempt from Mobile App run on the 'Jailbroken' or 'Rooted' Mobile devices.
- Always verify the UPI ID & Name of the person before making payment.
- Enter UPI PIN on UPI PIN page only
- Entering UPI PIN means money getting deducted from your account.
- Scanning QR is for making payment, not for receiving money
- Always remember that, UPI PIN is needed only for making payments and not for accepting payments.
- Never share your UPI PIN with anyone.
- Check SMS when money is deducted
- Use help section in the UPI app itself for transaction related concerns
Checksum
Checksum for PlayStore
Application | Operating System | Release Version | Checksum |
BHIM DLB UPI | Android | 1.1.8 | A1310FE5F6C69CE79EDFDCE724C5559D26F021E11C5608559B19E1AA9309D512 |
Checksum for App Store
Application | Operating System | Release Version | Checksum |
BHIM DLB UPI | ios | 1.1.8 | fa86dd56e987f144df1dae30861ca178702d371f3fb03940ee1ba7c2040dd862 |
Precautionary steps to be taken while using ATM’s
- Never share your Personal Identification Number (PIN) with anyone. Do not keep a written copy of your PIN with your card. Always Memorize the PIN.
- Avoid using ATMs which are not well illuminated
- Beware of anything that looks unusual at the card reader slot. Watch out for additional devices, overlays on the ATM keypad or cameras overlooking the keypad. If you suspect any tampering report, it to the bank immediately.
- Beware of shoulder surfers or strangers offering help. Use the Bank Helpline for any queries.
- Wait for the ATM screen to tell you to key in your PIN.
- Avoid detection of your PIN or other account information by standing close to the ATM. Always place your free hand over the key pad, while entering the PIN.
- Change your PIN immediately, if you suspect it has been compromised. Also remember to change the PIN periodically.
- Ensure that you collect your card before leaving the ATM. In case of a failed transaction, 'Cancel' the transaction and before leaving the ATM, ensure that ‘Welcome’ Screen is displayed in ATM.
- Do not leave your transaction receipt at the ATM. Tear it off before discarding.
- Verify the SMS and Email alerts sent to you for the transaction correctness. Immediately report any unauthorized transactions in your account.
- Verify the transaction history periodically. Keep your receipts and check your statements regularly. Immediately report any unauthorized transactions in your account.
- Do not disclose details like Card No., PIN, CVV, Expiry Date, Date of Birth, etc. to anybody, even though the caller may identify himself/herself as calling from Bank, RBI, etc.
BEWARE OF FRAUDULENT CALLS. Please do not share your Card No, Exp Date, CVV, OTP or passwords over unsolicited phone calls or through emails to any one. Dhanlaxmi Bank will never call and ask you for such details. If you suspect that
|
Please contact our Customer Care at 044-42413000 immediately. |
Bank Transactions Monitoring Cell: 0487-6627081 & 0487-2386777 National Cyber Crime Reporting Cell- Toll Free No.1930 ( By Ministry of Home Affairs) |
We observe an increase in the number of cybercrimes wherein fraudsters and cyber criminals are using different kinds of modus operandi for perpetrating cybercrimes routed through the banking channels and payment gateways. We advise the general public on the modus operandi of fraudsters and the necessary safety measures to be adopted in this regard.
A. The Modus Operandi followed by the fraudsters and criminals through investment/part-time job/Ponzi schemes, wherein the transactions are routed through the banking channels are given hereunder:
- Part-time work offers, other adverts on the internet and/or messaging platforms, etc., all promise victims huge commissions or high returns, such as doubling their money in a short period of time. The advertising and SMS messages typically have a link that launches a discussion right away. Additionally, financial frauds are carried out using mobile applications, bulk SMS messages, SIM-box-based Virtual Private Networks (VPNs), phishing websites, cloud services, virtual accounts in banks, Application Programming Interfaces (APIs), etc.
- Fraudsters and criminals employ keywords like "Earn Online," "Part Time Job," etc. to match their adverts with the terms consumers are searching for. Furthermore, these commercials are usually shown between the hours of 10 AM and 7 PM, which is typically the peak period for internet use among Indians. The bulk of fraudulent websites use the domains "xyz" and "wixsite." Most of these websites either go to messaging platforms or to websites with embedded links to messaging platforms that, when clicked, lead back to chats.
- Several Indian phone numbers were used to contact the victims. Analysis revealed that the owner of the cell phone was unaware that a messaging platform was being run in his or her name. Sometimes, the owner of the mobile number willfully gives out the OTP in exchange for money from the scammers.
- Over chat, the scammer gives a URL for investments. Everyone has a unique referral code. The language of choice for fraudsters is English. In order to speak with the victims, Google Translate is also employed.
- To authorize the account, a screenshot must be supplied to the person via the chat platform. After the account has been activated, the user is given a job to win the other person's trust. The loading of funds through Payment Gateways that are not permitted to operate in India is a requirement for performing a job. Every payment is made through UPI. Some of the UPI addresses belong to businesses that are registered with the Ministry of Corporate Affairs (MCA). In order to communicate with the victim about tasks, a call center is typically used. For instance, the call center representative will place a call if funds cannot be loaded onto an investment website.
- The victim is asked to withdraw the money after the work is finished. Through various Payment Aggregators, money is withdrawn.
- After receiving the first return, the victim is persuaded to complete other activities that involve loading additional funds. The procedure continues, and after the victim loads a significant sum, the fraudster stops communicating via chat.
- Scam websites regularly update their UPI information. Investment websites are always changing. Although the domain changes, the source code stays the same.
- Bank accounts opened by money mules with real/fake identification are used to collect stolen monies from compromised bank accounts, for example, through the sharing of OTPs. Agents find rented accounts, and account owners (money mules) receive a lump sum payment, a fixed rent amount, or both.
- Account-to-account transfers are used to layer transactions. Additionally used for this are bulk payments and APIs.
- Money is transferred from the intermediate account to many sources and assets, including cryptocurrency, bullion, payout accounts (to build trust and conceal money laundering), overseas money transfers, person-to-person transfers, etc.
B. Important Precautions
- Do not respond to an online advertisement which is suspicious
- Do not install unverified investment applications
- Do not share OTP, CVV, account details, or any other financial credentials
- Do not allow the account be operated by anyone else.
- If your Credit Card / Debit Card gets stolen/lost.
- If your card doesn't function and you need a replacement card.
- Call our customer care on +91-044 42413000 or write to us at customercare@dhanbank.co.in to report unauthorized transactions