Recently, there have been ongoing complex developments in the methods of impersonation and deception aimed at stealing banking service information from customers. Vietcombank wishes to remind its customers of fraudulent schemes and provide instructions to ensure their safety while conducting transactions on digital banking channels. Below are the guidelines:

COMMON TYPES OF SCAMS

Scammers use complicated tricks to ask customers to follow their instructions and steal banking service information by accessing the service then taking money from the account or asking the customer to transfer the money themselves. This is some common tricks has been reported:

• Impersonating competent agencies (police, courts, tax authorities...) deceive customers to access fake links/websites of public services to install fake applications (VNeID application, application of the General Department of Taxation ...), thereby hijacking the device, secretly stealing banking service security information and performing money transfer in the customer's account.
• To create trust for customers, fraudulent tactics can be simulated according to the implementation of regulations and policies of competent authorities and service providers in each period (xreal level 2 via VNeID; tax reduction when declaring via application; promotional policies...).
• n some cases, customers have doubts about the contact person (authorities, service providers, relatives...) and make video calls to check, scammers have used sophisticated forms to hide their identities that make it difficult for customers to identify through calls (using fake images of relatives and authorities; creating surrounding scenes such as the office environment of the competent authority to display on the application to conduct the call call).
• Impersonating competent agencies (courts, police...) threatening customers involved in illegal acts (causing traffic accidents, related to money laundering rings, smuggling, large international telecommunications debts...) and ask customers to follow the instructions (open a new account, provide information, install the application, transfer money to the specified account...).
• Impersonating Vietcombank staff to contact customers to request support (support for faulty outgoing money transfer transactions, support for processing and checking, customers who have incoming money transfer transactions but have not been successfully credited...) then ask customers to provide security information (account number, card number, password, OTP ...) to commit acts of asset misappropriation.
• Spoof the bank's website/Fanpage/SMS and send fake links for customers to enter information.
• Send packages that create trust for customers (announcement of winnings, provision of promo codes ...), and enclose requests, instruct customers to provide security information of the service.
• Stealing access information on social networking platforms (Facebook, Zalo ...) of friends and relatives of customers, thereby contacting customers to request money transfer for support and loans.

07 PRINCIPLES OF ENSURING SAFETY

Vietcombank only provides digital banking services (VCB Digibank and VCB DigiBiz) through the bank's official website and through the official application on App Markets. To ensure safety when transacting online on digital banking, please follow the following guidelines:

1) Never disclose personally identifiable information (Username; One-time password and secret key (OTP) for anyone else. Do not write passwords down or write/save them in any way.

2) Absolutely do not download and use applications of unknown origin (only use applications that have been clearly tested on the App Store and Google Play Store).

3) If using the service on the website, you only access the service through Vietcombank's official website (absolutely do not log in the service through links attached in SMS, email, Zalo, Viber ...).

4) Sign in only through trusted devices. Do not use mobile devices that have been jailbroken or tampered with the operating system (root, jailbreak...) to use the service.

5) Do not use basic personal information (date of birth, phone number, name...) to set a password. Passwords should be changed periodically at least once every three months or when exposed/suspected of being exposed.

6) In case of not performing transactions on digital banks but still receiving notifications from Vietcombank about: OTP code; Abnormal balance changes; Activate the application on another device; Link e-wallets... You absolutely do not provide OTP code and notify Vietcombank immediately.

7) Always stay calm and alert when receiving information requests/money transfer requests. Verify and verify information through official channels (for example: the official switchboard of the requesting party) and verify information about the website/link at the Network Credit Assessment Portal of the Ministry of Information and Communications (tinnhiemmang.vn).

WHEN AN EMERGENCY SITUATION OCCURS

In case you detect signs of fraud or suspicion of being scammed, hacked or suspected of being attacked by hackers, please follow the order of priority as follows:

1) Lock the service or change the service password immediately:

• For VCB Digibank: Compose a message according to the syntax of VCB KHOA DIGIBANK to 6167 (compose and send on the phone number registered with the bank).
• For VCB DigiBiz: Change login password by going to Utilities and select Change Password.

2) Call the bank immediately at the hotline number 1900545413, or immediately go to transaction offices for help (in working hours).

3) Factory reset the device in case of detection/suspicion of installing fake apps.

4) Report to the nearest Public Security Agency.

Please regularly update all information about safe transaction instructions on Vietcombank's website.