Security

To prevent fraudulent transactions in  Uralsib Online, as of December 23, 2015, functionality for verifying the authenticity of the SIM card to which one-time passwords are sent is being put into operation. This functionality will help prevent fraudsters from attempting to gain access to your accounts using a duplicate SIM card.

The following restrictions apply to payments and transfers to third parties:

• maximum transaction amount – 2,000 rubles; transactions exceeding 2,000 rubles will be blocked;
• daily limit – 10,000 rubles, weekly limit - 20,000 rubles

If you have received a copy of a SIM card (due to the loss, misplacement, or damage of the previously used one), to remove the limit restrictions you need to contact the nearest bank branch with your passport. The staff will make changes to your account.

If you have not received a copy of a SIM card, we recommend contacting your mobile operator to block the duplicate SIM card. Alternatively, at a bank branch you can change your mobile phone number and purchase a one-time key generator (GOK).

The following limits apply to high-risk transactions confirmed by an SMS password:

• Daily limit – 100,000 rubles
• Weekly limit – 500,000 rubles

The following limits apply to low-risk transactions confirmed by the password used to log in to  Uralsib Online:

• Daily limit – 10,000,000 rubles
• Weekly limit – 27,000,000 rubles

The following limits apply to transactions confirmed by the GOK device:

• Daily limit – 10,000,000 rubles
• Weekly limit – 27,000,000 rubles

Make sure that your computer is not infected with any viruses. Install and enable antivirus software, and try to keep it updated regularly. Only regular updates of antivirus software will allow you to detect and prevent the appearance of a virus in a timely manner.

It is recommended to use software that monitors and combats Spyware. Spyware is a type of software that attempts to record your keystrokes and transmit them to third parties.

The use of a virtual keyboard when entering your password at all stages of working with the Uralsib Online web version is strongly recommended. Using a virtual keyboard will help avoid password compromise if your PC is infected with Spyware.

It is recommended to use a firewall when accessing the Internet or to install a personal firewall on your computer. When using a firewall, unauthorized access to your computer system via the Internet will be significantly hindered or prevented.

Use software (operating systems, applications) from verified and reliable sources. Refrain from using and installing software from unverified sources.

If you connect via a modem, please pay attention to the number being dialed. If you detect a mismatch in the number, delete the number unknown to you.

Configure your browser so that its cache settings do not allow confidential pages (SSL) to be stored.

Monitor your email, do not open messages from unknown senders, and do not disclose your personal data. Never open suspicious files sent to you by email. Do not reply to emails that allegedly on behalf of the bank ask you to provide personal information. Never follow links in such emails (even to the bank's website), as they may lead to fraudulent websites.

Check the addresses of the websites you connect to, as fraudsters may use similar names to create fraudulent resources.

Avoid using Internet resources of questionable content; they are often created specifically to obtain information about bank cards and subsequently use it unlawfully.

Make purchases only from your own computer; do not use Internet cafés or other publicly accessible means where spyware programs that record the confidential data you enter may be installed.

Choose non-trivial passwords that are not related to your date of birth or other personal data. If possible, choose alphanumeric passwords. Do not write down passwords or disclose them to anyone. If you are afraid of forgetting your password, devise a recording system that is understandable only to you (for example, in the form of a phone number or an address in your phone book).

The bank never sends emails requesting confidential information or containing computer programs.

If you have received an email sent on behalf of the bank whose content raises suspicion, or if someone contacted you by phone on behalf of the bank asking you to install certain software, please contact the bank's support service to clarify the situation. Always use the bank support services' contact information provided in official sources of information, and do not use the contact information provided in the received email or obtained during a phone conversation.

Any electronic messages sent from free Internet email services (@mail.ru, @yandex.ru, @rambler.ru, @gmail.com, @yahoo.com, etc.) are not mail sent by the bank.

To change your phone number, please contact the nearest bank branch. You must have an identity document with you, or change the number yourself via the nearest ATM.

At the bank branch, you will be provided with an application form to set a phone number for the 3D-Secure service. The changes will take effect in the 3D-Secure service on the next calendar day.

Dear clients!

Bank Uralsib informs you of cases in which bank card holders receive SMS messages sent by fraudsters containing information about card blocking and similar matters, with a request to call back to unblock the card, usually using the phone number specified in the SMS message. During further communication, the fraudsters ask for confidential information: personal data (Full name, card numbers, the three-digit CVC/CVV security code, PIN code, etc.).

Bank Uralsib informs you that the bank does not send such messages!

In this regard, we strongly urge you to be attentive and vigilant when receiving various SMS messages and calls regarding the use of bank cards:

• do not call back a mobile number (for feedback, the bank usually provides cardholder support service phone numbers or toll-free federal numbers 8-800-; these phone numbers can be found on the bank’s official websites);
• even if you are sure that you are speaking with a bank employee, do not disclose all bank card details (the three-digit protection code, the CVV2/CVC2 security code, PIN code); only the card number may be provided;
• if an SMS message about card blocking is indeed received from the bank, the text of the message indicates the first and last 4 digits of your card number. Fraudsters’ SMS messages do not indicate the card number because it is unknown to them!
• information on the formats of SMS messages sent by the bank as part of the SMS service (providing the cardholder with information on transactions made using the card in the form of SMS notifications to mobile phones of Russian GSM operators) is provided in the “Terms of information by open joint-stock company Bank Uralsib access to the SMS service for holders of international bank cards of the payment systems Visa Inc. and Mastercard Worldwide”, which can be reviewed at the bank’s office or on the official website of Bank Uralsib.

When you hand over your card for payment (especially in cafes and restaurants), Bank Uralsib recommends that you do not let the card out of your sight.

Clients of our bank can activate the “Notification Service” and instantly find out when and how much money was debited from the account, and upon receiving suspicious debit notifications, immediately take steps to block the card.

For information security purposes, you cannot perform these actions on your own.