1. Personal
  2. eServices
  3. Personal Internet Banking
  4. Security

Security

  • securitysecurity

    Protecting your finances is our priority.

Online and Mobile Security

Enjoy the full convenience of secure online banking transactions and peace of mind from our multi-layered security programme. Learn more about how we keep your transactions safe.

 

WHAT WE DO TO PROTECT YOU ONLINE

mobile

Digital Token

No more OTPs. Digital Token enables you to log into both UOB Personal Internet Banking and UOB TMRW seamlessly. It can only be set up on one mobile device and only you have access to it.

Find out more
UniAlerts

UniAlerts

Keeps you informed of your transactions

Avoid late payment of your UOB Credit Card bills and get instant updates of your account activities via UniAlerts.

Login to UOB Personal Internet Banking here and click on Account Services > Manage Alerts to register – make sure your contact details are updated.

Find out more
Unique Login Credentials

Unique Login Credentials

Access your Internet Banking account with a unique Username and Password that cannot be used by anyone else.

Automatic Logout Feature

Automatic Logout Feature

Inactive Internet Banking sessions will be detected by our system and you will automatically be logged out to ensure your account details are not compromised.

phone icon

HOW TO CONTACT US

If you suspect that your account has been compromised,
please change your password and contact us immediately by calling
6255 0160 (24-hour hotline)

Top Security Tips

The protection and security of your financial information is a top priority to us. When it comes to keeping your information secure, it helps to stay vigilant and be updated on ways to protect yourself. Together, we can proactively safeguard your financial information so you can enjoy a peace of mind when you transact online.

Keep your password confidential at all times and do not divulge it to anyone. UOB and our partners will never request for your password. Always keep your Personal Internet Banking (PIB) username, password, One-Time Password (OTP), Credit/Debit Card and banking account details confidential at all times.

Do not use personal information such as your telephone number, birth date or the like as your password as these will not make strong passwords.

Change your password regularly.

Change your password immediately if you suspect your account has been compromised.

Always log out after an online banking session.

Do not grant remote access of your computer to anyone or download any remote control software as instructed over the phone.

Latest Online Threats

Online threats come in various forms and are constantly evolving. With a better understanding of the latest threats, you can stay well informed on how to keep your finances safe.

Phishing Scams

Recently, customers of Singapore banks have been targeted by a series of phishing scams. Through email and SMS messages that appear to be sent officially by the bank, these scams trick users into accessing fake websites to provide sensitive personal information, such as their internet banking username, PIN code, one-time password (OTP) and credit card details.

Show moreShow less

'Fake Friends' Scams

This is a variant of the typical Impersonation Scams. With these 'Fake Friends' scams, victims receive unsolicited calls from scammers who do not identify themselves but instead ask victims to guess their identity. The scammers then assume the identity of whoever the victims have guessed and make small talk. A follow-up call will then be made to the victims within the next couple of days, and scammers will thereafter make up excuses to ask for urgent loans from the victims, citing emergencies or urgent needs. Once victims make the transfer, the scammers will stop contacting them.

Show moreShow less

What can you do to protect yourself?

  • Do not click on dubious links and always examine the links when presented in an email or SMS.
  • Hover over links to check the destination of the URL. Check for any typos or misspelt words in the URL. When verifying links using mobile phones, press and hold the link to display the actual URL.
  • Always visit the legitimate website bookmarked in your browser or found via a Google search.
  • Ensure that you do not overlook the spelling mistakes when inspecting the website URL.
Show less

What can you do to protect yourself?

  • Avoid answering calls from unknown numbers. When this is not possible, ascertain the identity of the person calling. You may do so by asking specific questions that only you and the purported person know (for example, how you met, who your mutual friends are and when the last time you met was);
  • Verify the call by contacting the actual person whom the scammer claimed to be. You should use known contact details of that person after the unsolicited call to verify if he/she indeed made the call.
  • If funds were transferred, quickly report this to the Police and the Bank.
  • Do not divulge personal and banking information to anyone.
Show less

Job-related Scams

Recent job-related scams involve online advertisements and/or social media messages offering part-time jobs through e-commerce platforms. Scammers claim to be part of affiliate marketing teams responsible for boosting the sales of various merchants on popular e-commerce sites. Victims are asked to perform purchases on advertised items, with the promise that they will receive a refund on the purchase price plus commissions of up to 10%. They are however required to make payments to designated bank accounts instead of through the e-commerce portals. In many cases, victims are initially refunded for small purchases with the commissions paid, but when they subsequently make purchases of a higher value, no refunds or commissions are given by the scammers.

Show moreShow less

Smishing Scams

Smishing scams target mobile devices via popular chat messaging apps, disguised as a promo code link or a request for contact tracing, in a bid to extract sensitive information. Smishers may also spoof the phone number or contact name to gain the victim’s trust.

Show moreShow less

What can you do to protect yourself?

  • Know of the red flags. For example, unsolicited SMSes and unregulated online advertisements.
  • Know of the warning signs – Jobs that requires upfront payment before starting work, promises of high returns for little effort required and job advertisements of a dubious nature.
  • Never transfer money to strangers or anyone you have never met.
  • Verify legitimacy of the job offer with the organization concerned.
  • Do not pay in advance to secure a job offer.
Show less

What can you do to protect yourself?

  • Look for spelling mistakes or formatting issues.
  • Ignore unsolicited and dubious messages. Delete the messages and do not tap on any links provided.
  • Please block and report the number as spam on WhatsApp or through third-party applications.
  • Ensure that your device hardware and software are updated regularly to minimise security risks.
  • Visit scamalert.sg or call the Anti-Scam Centre at 1800 7226 688 for more information on scams.
Show less

WhatsApp Scams

Carried out via WhatsApp or Viber, victims receive anonymous calls from scammers who claim to be personnel from banks or official organisations. Victims might be requested to perform transactions remotely, or to share confidential and personal information. Examples include internet banking username, PIN code, one-time password (OTP) and credit card details.

Show moreShow less

Contact Tracing Impersonation Scam

Scammers pose as government officials, claiming that they are conducting contact tracing for COVID-19 in order to retrieve personal and financial details. Verify the authenticity of a contact tracing call in Singapore by calling the Ministry of Health's general hotline at +65 6325 9220.

Show moreShow less

What can you do to protect yourself?

  • To validate the call, hang up and dial the organisation’s official number.
  • Please block and report the number as spam on WhatsApp or through third-party applications.
  • Never reveal your bank account numbers, one-time passwords (OTPs) or 3-digit credit card security code to anyone.
  • Visit scamalert.sg or call the Anti-Scam Centre at 1800 7226 688 for more information on scams.
Show less

What can you do to protect yourself?

  • Never reveal your bank account numbers, one-time passwords (OTPs) or 3-digit credit card security code to anyone.
  • Never grant remote access of your computer to anyone. No government officials or those who are involved in the contact tracing exercise will ask for such banking information or require remote access to your computer.
  • If you receive such calls asking for banking information such as OTPs, you should hang up and call UOB or the police immediately.
  • Visit scamalert.sg or call the Anti-Scam Centre at 1800 7226 688 for more information on scams.
Show less

Investment Scams

This is a new type of scam targeting victims via Whatsapp, Telegram, Facebook and other social media platforms. Scammers persuade victims to invest in financial products with lucrative returns, convincing them to transfer large amounts of money to cover various fees and taxes. Once the scammers have secured the funds, they cut off contact with the victims.

Show moreShow less

Loan Scams

Scammers send messages via SMS, WhatsApp, Facebook and other social media platforms offering loans services, claiming to be licensed moneylenders. Victims are instructed to transfer money as a deposit before the loan can be disbursed. After making the transfer, the scammers will no longer be contactable.

Show moreShow less

What can you do to protect yourself?

  • Be cautious when befriending strangers on social media platforms.
  • Understand that investments with high returns come with high risks.
  • Always check with a licensed financial advisor before making any investment.
  • Check if an entity is blacklisted on the Monetary Authority of Singapore (MAS) Investor Alert List. Deal with companies that are licensed and regulated by MAS.
  • Ask as many questions as you need to fully understand the investment opportunity.
  • Do a thorough check on the company and its representatives using resources such as the financial institution's directory, register or representatives, and investor alert list, which can be found on the MAS website.
  • Never provide your name, identification number, passport details, contact details, bank account or credit card details to anyone you do not know well.
  • Be careful when dealing with unregulated entities as you will have little recourse if things go wrong. If an entity is based outside of Singapore, check if it is regulated with the respective overseas authority.
  • Before committing to an investment, always Ask, Check and Confirm.
  • More information on investment scams can be found at MoneySense: How to spot investment scams.
  • Visit scamalert.sg or call Anti-Scam Centre at 1800 722 6688 for more information on scams.
Show less

Example of a Loan Scam SMS:

 

 

What can you do to protect yourself?

  • Do ignore these spoofed loan advertisements and messages. Please block and report the number as spam on WhatsApp or through third-party applications.
  • Only engage the services of licensed moneylenders listed on the Ministry of Law's Registry of Moneylenders website. It is illegal for licensed moneylenders to advertise via SMS or WhatsApp.
  • Never reveal your personal information like NRIC or contact numbers, SingPass, bank details and account numbers.
  • Do seek financial help from authorised financial institutions if necessary.
  • Visit scamalert.sg or call Anti-Scam Centre at 1800 722 6688 for more information on scams.
Show less

Covid-19 Vaccine/Test Kit Scam

Scammers are exploiting Covid-19 vaccination/test kit to scam victim in giving away personal and financial details for ‘registration purpose’. Claiming that they are from an approved pharmaceutical company to provide Covid-19 Vaccine, such as Moderna, they sent text messages and asked recipients to click on a link or make a phone call to schedule appointments for vaccination. They will then ask for personal and banking information for ‘registration’. Another related scam includes scam calls or text messages to falsely inform the victim that they had been in close contact to someone who had tested positive for Covid-19. These messages also request for personal or financial information in return for a test kit and test reports.

Show moreShow less

Impersonation Scams by Local and China Officials

Phone impersonation scams involve claims that the scammers are local and/or foreign government officials or police officers or individuals who are professionals such as recruiters. Victims are accused of being involved in crime and are persuaded to divulge confidential information on fraudulent websites. The scammers will transfer funds out from the victims’ accounts once they have received them.

Show moreShow less

What can you do to protect yourself?

  • Never reveal your bank account numbers, one-time passwords (OTPs) or 3-digit credit card security code to anyone. No government officials or those who are involved in the Covid-19 vaccination programme will ask for banking information or personal particulars over the phone.
  • Stay vigilant when receiving unexpected international or unknown number calls. Reject those with spoof local numbers.
  • Always check on the URL link received in the SMS. Make sure it ends with “.gov.sg” for official government website.
  • Verify the authenticity of such messages by calling the Ministry of Health's general hotline at 1800-333-9999 for more information on the Covid-19 vaccination exercise.
Show less

What can you do to protect yourself?

  • Never reveal your bank account numbers, one-time passwords (OTPs) or 3-digit credit card security code. No government officials or those who are involved in the contact tracing exercise will ask for such banking information or require remote access to your computer.
  • Never grant remote access of your computer to anyone.
  • Never download any application or software directed by the caller.
  • Never login into any website directed by the caller.
  • If you receive such calls asking for banking information such as OTPs, you should hang up and call UOB or the police immediately.
  • Visit scamalert.sg or call Anti-Scam Centre at 1800 722 6688 for more information on scams.
Show less

E-commerce Scams

Unverified sellers have been listing deals that are too good to be true. Victims make payment for the goods, which are never sent out to them, or are completely different from what they were promised.

Show moreShow less
Technical Support Scams

Technical Support Scams

Scammers call victims, usually from numbers with the +65 prefix, claiming to be technicians from established companies such as Singtel and Microsoft, convincing them that their internet connection has 'technical' issues. Victims are then told to download remote control software such as TeamViewer and pcAnywhere. Scammers abuse this administrative access to the victim's computer to install malware or access sensitive information, used for identity theft or transfer of funds.

Show moreShow less

What can you do to protect yourself?

  • Be wary of people selling items at prices that sound too good to be true.
  • Read reviews of the seller before committing to a purchase.
  • Whenever possible, pay only on delivery. If advance payments are required, use shopping platforms that provide arrangements to only release your payment to the seller upon your receipt of the item.
  • Arrange for physical meetups for purchases made through online classifieds.
  • Scammers can claim to use local bank accounts or provide a copy of their NRIC/driver's license to make buyers believer they are genuine sellers. When NRICs are provided as “guarantee”, check their validity at ICA's iEnquiry portal.
  • Visit scamalert.sg or call the Anti-Scam Centre at 1800 7226 688 for more information on scams.
Show less

What can you do to protect yourself?

  • Never reveal your bank account numbers, one-time passwords (OTPs) or 3-digit credit card security code.
  • If you receive such calls asking for banking information such as OTPs, you should hang up and call UOB or the police immediately.
  • Visit scamalert.sg or call Anti-Scam Centre at 1800 722 6688 for more information on scams.
Show less

 

Please do not fall prey to such scams. Do not transfer money to people you do not know. When in doubt, confirm the request through official sources such as government agency hotlines. If you suspect your account has been compromised, please change your password and contact the bank immediately at 6255 0160 (24-hour hotline).