Are You #CyberSure?

Be #CyberSure with our quick information security guide against online scams. At the end of this,
we hope to equip you with knowledge on how you can protect yourselves from phishing.

What is Phishing?
Phishing is a type of online scam where fraudsters pretend to be a legitimate company to get
your information and use it for unauthorized transactions. Phishing messages trick a user into
doing certain actions, such as downloading harmful software, clicking malicious links, or
disclosing confidential data or personal information like login credentials.

What are the kinds of Phishing?

• Email Phishing
The most common type of phishing sent via email. It usually informs you that there
has been a compromise to your account and that you need to respond immediately

• SMS Phishing (or Smishing)

The attack is carried out via text message. This tactic usually sends a clickable link
where you will be redirected to a phishing website, and will ask you to login and
provide your information

• Voice Phishing
Accomplished through a phone call. A typical vishing attack includes a phone call from
someone posing as a representative of a legitimate company.

What information do they want to get?

1. Username and Password

2. OTP (One-Time-Password)
3. Card Details such as card number, expiry date and CVV
Take note: These information are for your eyes only!

How can you tell if it is Phishing?

 • Sender’s email address does not match the name of the company they’re imitating.

• Messages contain poor spelling and grammar. Emotions such as fear, curiosity, urgency, and greed are also used to
persuade recipients to open attachments or click on links.

• Asks you to click on links that lead to a site where you’ll input your User ID and Password, One Time Password (OTP),
Card Details or other sensitive information.
.

What happens if you get Phished?

• Fraudsters will be able to login to your bank account and steal money from you
• Fraudulent charges can be done on your credit cards.
• Cybercriminals can steal your personal information and use it to commit fraud or other crimes.

How can you protect yourself?

• Always check and verify the sender or caller.

• Do not open or answer emails, text messages or voice calls you are not expecting.
• Don't click on links from unknown sources.
• Do not share your information such as your UB Online username or password and
OTP to anyone.
• Use different emails, user IDs, and passwords across your online accounts.
• Make sure your passwords are strong and unique. Switch on Multifactor
Authentication such as face ID, fingerprint or OTP on all your online accounts
• Monitor your online accounts regularly. Enable your notifications on your device and
online accounts.
• Stay informed. Inform yourself about any known phishing scams that are currently
circulating.

And that’s a wrap!

You just completed this #CyberSure security knowledge walkthrough.

By signing this document, you confirm that you fully understand the risks and best practices to
protect your UnionBank online accounts.

_________________________________
SIGNATURE OVER PRINTED NAME

_________________________________
DATE