Payment security

Dear clients!

Bank Uralsib informs you of cases in which bank card holders receive SMS messages sent by fraudsters containing information about a card being blocked, etc., with a request to call back to unblock it, usually using the phone number указан in the SMS message. In the course of further communication, the fraudsters ask for confidential information: personal data (Full name, card numbers, CVC/CVV code, PIN code, etc.).

Bank Uralsib reports that the bank does not send such messages!

In this regard, we strongly ask you to be attentive and vigilant when receiving various SMS messages and calls regarding the use of bank cards:

• do not call back a mobile number (for feedback, the bank usually provides the phone numbers of the cardholder support service or toll-free federal 8-800- numbers; these phone numbers can be found on the bank’s official websites);
• even if you are sure that you are speaking with a bank employee, do not disclose all bank card details (CVV2/CVC2 security code, PIN code); only the card number may be disclosed;
• if an SMS message about a card being blocked is indeed received from the bank, the text of the message will indicate the first and last 4 digits of your card number. Fraudsters’ SMS messages do not indicate the card number because it is unknown to them!
• information on the formats of SMS messages sent by the bank as part of the SMS service (providing the cardholder with information on transactions made using the card in the form of SMS notifications to the mobile phones of Russian GSM operators) is set out in the “Terms of information” provided by the open joint-stock company “Bank Uralsib” for access to the SMS service for holders of international bank cards of the Visa Inc. and Mastercard Worldwide payment systems, which are available at a bank office or on the official website of Bank Uralsib.

How do I enable the 3D Secure service?

When making your first purchase in an online store that supports 3D Secure technology, you will be prompted to activate the service for your Bank Uralsib card.

What is a one-time code (password)?

A one-time code (password) is a randomly generated number required to identify you as a bank customer, which you will receive via an SMS message.

Attention! The code must be entered in the appropriate field in the transaction confirmation request within 100 seconds of receipt; otherwise, it will be invalid.

What should I do if the phone number is incorrect?

If the phone number specified during registration is incorrect, you need to change it by contacting a bank branch or independently through a Bank Uralsib ATM.

What should I do if the one-time code was entered incorrectly?

The one-time code can only be entered once. If the code is entered incorrectly, you will be prompted to receive the confirmation code again and enter it in the appropriate field. If the code is entered incorrectly more than 3 times, the service will be blocked for 60 minutes.

What should I do if the one-time code did not arrive on my phone?

You need to check whether your mobile operator's network is available. If you are abroad, make sure roaming services are enabled. If the device is functioning properly, contact the bank's Support Service using the phone numbers indicated on the back of your card or via the "Online call" option on the website's home page.

How much does the 3D Secure service cost?

The 3D Secure service is provided free of charge (including SMS messages with a one-time password). In addition, Bank Uralsib offers an SMS service so that you can receive notifications about all card debits and credits in real time. The first 2 months of the service are provided free of charge.

If I have the SMS service enabled, do I need to register my phone number with 3D-Secure?

If you have already enabled the SMS service, the phone number to which SMS messages are sent will automatically be connected to the 3D-Secure service. If you have not yet enabled the SMS service, the system will prompt you to register a phone number to receive free one-time passwords.

Which phone number can be registered with 3D-Secure?

You can register a mobile number of any Russian mobile operator.

Which phone number will receive one-time passwords if the phone number for the SMS service was recently changed?

One-time passwords will be sent to the new phone number after the bank has technically processed the request to change the number, which may take up to 2 days. Until then, passwords will be sent to the previously specified phone number.

What should I do if I do not have my mobile phone with me?

A mobile phone is required to receive one-time codes when paying on websites that support 3-D Secure technology. If you do not have a mobile phone number, you will not be able to receive the code, and as a result the payment will not be processed.

Can I opt out of connecting to the 3D-Secure service?

Connection to the 3D-Secure service is mandatory for making payments for purchases and services on the internet. 3D-Secure technology ensures the security of payments made on the internet and allows you to control the card payment process without exposing yourself to the risk of fraud. Registration for this technology only needs to be completed once; thereafter, you will make your usual card payments, supplemented only by entering an additional code.

Recently, cases of fraud involving financial damage to clients of various credit institutions have become more frequent.

In this regard, Bank Uralsib considers it necessary to draw the attention of all its clients to the precautionary measures that must be observed in order not to become a victim of fraudsters and to avoid possible negative consequences associated with the use of bank cards and Online banking:

• It is necessary to eliminate the possibility of unauthorized obtaining of your personal information – do not provide it to unauthorized persons.
• Do not use bank cards in retail and service organizations that do not inspire confidence.
• When carrying out transactions with a bank card without using an ATM, do not let it out of your sight.
• Do not use devices that require entering a PIN code to access the premises where the ATM is located.
• Do not use the PIN code when ordering goods or services by telephone/fax or via the internet.
• Use the SMS notification service for transactions performed on your bank account.
  

Attention!

Never enter PIN codes for your plastic cards during any transactions on the internet. A PIN code is not required for an internet transaction. Use only those web-sites that you trust!

Never respond to messages received by email or SMS in which, under any pretext (technical re-equipment, software update, database reconciliation, etc.), you are asked to send by SMS or enter on your computer keyboard your personal data (Full name, bank card numbers, PIN codes, CVC/CVV codes, etc.).

Bank Uralsib never requests your PIN code via the internet, by phone, or through the Uralsib Online system.

If you discover internet sites with domain names and visual design similar to the bank's official website with the domain name bankuralsib.ru, please report this to our Contact Center or send a message through the feedback system.

Please note and remember the original addresses of the Bank Uralsib Internet banking system pages:

• Online banking – https://i.uralsib.ru
• Card payment system for VISA and Mastercard  – https://oplata.uralsib.ru/

Cases of unauthorized obtaining of bank card details during transactions via ATMs are also reported. Fraudsters may use overlay devices on the ATM keypad and on the card acceptance device (card reader).

Keypad overlay

Card reader overlay

In addition, fraudsters may even use “fake” ATMs. Such ATMs are usually installed illegally in places not controlled by credit institutions and outwardly do not differ from real ones.

at Bank URALSIB ATMs:

• insert the card into the ATM and enter the PIN code,
• on the ATM screen, select the "SMS service" option,
• in the ATM menu that appears, select the "Connect service" option. Then follow the on-screen instructions.

at Bank URALSIB branches

through the Bank URALSIB Contact Center if you have a code word, by phone at 8-800-250-57-57 (calls within Russia are free).

Make sure that your computer is not infected with any viruses. Install and activate antivirus software, and try to keep it updated at all times. Only continuous updates of antivirus software will allow you to detect and prevent the appearance of a virus in a timely manner.

It is recommended to use software that detects and combats Spyware software. Spyware is a type of software that attempts to record your keystrokes and transmit them to third parties.

The use of a virtual keyboard when entering your password at all stages of working with Online banking is strongly recommended. Using a virtual keyboard will help avoid password compromise if your PC is infected with Spyware software.

It is recommended to use a firewall when accessing the internet or to install a personal firewall on your computer. When using a firewall, unauthorized access to your computer system via the internet will be significantly more difficult or prevented.

Use software (operating systems, applications) from verified and reliable sources. Refrain from using and installing software from unverified sources.

If connecting via a modem, please pay attention to the dialed number. If you detect a number mismatch, delete the number unknown to you.

Configure your browser so that caching settings do not allow confidential pages (SSL-page) to be stored.

Monitor your email, do not open messages from unknown senders, and do not disclose your personal data. Never open suspicious files sent to you by email. Do not reply to emails in which, allegedly on behalf of the bank, you are asked to provide personal information. Never follow links in such emails (even to the bank's website), as they may lead to fraudulent websites.

Check the addresses of the websites you connect to, as attackers may use similar names to create fraudulent resources.

Avoid using internet resources of dubious content; they are often created specifically to obtain information about bank cards and subsequently use it unlawfully.

Make purchases only from your own computer; do not use internet cafés or other publicly available means where spyware programs that record the confidential data you enter may be installed.

Choose non-trivial passwords that are not related to your date of birth or other personal data. If possible, choose alphanumeric passwords. Do not write down passwords or disclose them to anyone. If you are afraid of forgetting your password, devise a recording system that is understandable only to you (for example, in the form of a phone number or an address in an address book).

The bank never sends emails requesting confidential information or containing computer programs.

If you have received an email allegedly from the bank and its content raises suspicion, or if you were contacted by phone allegedly on behalf of the bank with a request to install certain software, please contact the bank's support service to clarify the situation. Always use the contact information of the bank's support services provided in official sources of information, and do not use the contact information provided in the received email or obtained during the phone conversation.

Any electronic messages sent from free internet email services (@mail.ru, @yandex.ru, @rambler.ru, @gmail.com, @yahoo.com, etc.) are not emails sent by the bank.