Business24 and your security

Follow our simple steps when transacting online and stay safe.

There are several forms of fraud where fraudsters will contact customers directly in an attempt to trick them into handing over sensitive data.

Please note: We will never call, text or email you requesting any financial information.

Phishing/vishing and smishing fraud

This fraud is a very prevalent form of fraud where by criminals use e-mails, phone calls and SMS to trick customers into handing over their online login credentials. These attempts can be very sophisticated, with fake sites giving the appearance of genuine banking sites and the fraudulent emails constructed accordingly. See telephone frauds and Online and Computer frauds section

Important Information: Remember, PTSB will never call, email or text you asking for: your account details, your Open24 number, Internet Password, Personal Access Number (PAN), your Visa Card CVV number or One Time Passcode. If you ever get an unsolicited phone call, email, text message or pop-up asking for any of these please contact us on 0818­ 50­ 24­ 24 or +353­ 1­ 212­ 4101.

Invoice re-direction fraud

Criminals intercept genuine invoices and change the beneficiary account number. Criminals may also attempt to have these details amended by sending an e-mail purporting to be from an existing customer requesting a change to the payee details. 

All invoices received should be confirmed either over the phone to a known contact or via a central system for company invoice information where strict processes are in place for updating/changing information within the system.

Spear phishing

Spear Phishing is a type of fraud that is on the increase. This type of fraud specifically targets the CEO or employees of a company in an attempt to install malware/virus onto their PC/Tablet or to obtain access to the business banking accounts.

This is done in an attempt to obtain log in details/credentials for company systems and/or online banking details through those infected devices.

Criminals may also target individuals claiming to be a CEO seeking outward payments as a matter of urgency.

All employees should be made aware of the dangers of clicking on links within emails even when the emails are received from known sources. They may also access your wireless (Wi-Fi) network if it isn’t secure to get to your personal information.

Protect your business accounts

• Be aware of unsolicited emails/sms/phone calls asking for your online details, bank card or PIN numbers and never divulge this information.
• Never disclose your online password or PAN (Personal Access Number).
• Do not write down your PAN number or online password, or keep them with your Business24 card.
• Do not share your PAN number or online password with your employees or co-workers. If they require access arrange to have authorised access with your financial institution.
• Make sure your computer has the latest up to date anti-virus software including an active firewall and update it regularly when using it for online banking.
• When accessing Business24, we highly recommend you use a secure or separate computer or device with restricted access only for online banking.

It is the responsibility of your own business to control who does and does not have access to Business24 online banking as you are responsible for authorised users on your account. For example, if an authorised user is no longer employed by your business, please contact your branch to block their access to Business24.

Protect your business

• Ensure that you have an up to date antivirus/malware detection/prevention of a professional standard in place.
• Ensure that all employees are aware of the dangers associated with clicking links in unsolicited emails (even from known associates).
• Make sure that all employees are aware of the dangers of downloading files to business PCs as they may contain viruses/malware or software which may give others control/access to systems.
• Ensure that all employees are aware of the current fraud trends of phishing (email), Smishing (SMS) & Vishing (Phone calls).
• Ensure employees are aware of “Invoice Redirection Fraud
• Transact with well-known, reputable companies where possible.
• Ensure employees are aware never to allow an external party to gain remote access to their business (or personal) PC’s for any reason.
• Be aware that purchases from private sellers may be more at risk than those from registered businesses.
• Ensure your Wi-Fi network is secure & don’t use public Wi-Fi networks.

Protect yourself online

• Check the URL when you are providing payment details for an online purchase; the “http” should turn into “https”.
• Check the lock symbol on any website’s homepage to see if it’s secure before entering your security details.
• Be aware of emails/websites that ask you for personal information including mobile telephone numbers, mother’s maiden name and date of birth etc.
• Never send money to or share the details of a money transfer with someone that you do not know.
• Where a site shows the last time that you logged in, always check that this reflects the last time you accessed the website.
• Take care when downloading files such as music, software etc. These files may be infected or have “malware” programs attached.

For more tips on protecting yourself online, take a look at the Protect your identity section.

Useful links

fraudSMART.ie  

bpfi.ie

ptsb.ie

garda.ie/en/Crime-Prevention/Protecting-your-business

cyberstreetwise.com/cyberessentials

getsafeonline.org