Let's take care of your online safety together!

The fraud attempts will continue in 2024! Can you spot the tell-tale signs? Here are the most common fraud attempts this year:

"Bank" call:

Fraudsters call with a fake number (e.g. referring to a suspicious online transaction) in the "name of the bank". Your display may show the "real" phone number or name of the bank (whether your own or another financial institution), because fraudsters can even change the caller ID!

• It is IMPORTANT to know that other financial institutions (if you do not have a bank account there) CANNOT know your phone number and that the customer services of different banks CANNOT be connected!
• Do NOT give out your bank details or install any other application on your devices (e.g. AnyDesk, RustDesk, TeamViewer)!

Online giveaway:

This type of scam is most common in social media messages or phone calls. Scammers contact you by claiming that you have “won”, but need your bank details or a specific code to send you via SMS to finalise the prize. It can be deceptive that scammers often copy profiles of influencers or sites with larger followings.

• It is IMPORTANT to know that you do NOT need to download, approve or enter an approval code to make a transfer!

Fake online sales:

there are many different types of online shops nowadays, so it is important to always check the website where you are buying or selling: especially the company name, the location of the company, the "about us" section, the legal information and the terms and conditions. Be suspicious if these are missing or worded in a way that is not in English, if the customer service is not properly indicated or if there is only a form to contact the store, and if there is no option for multiple payment methods (e.g. cash on delivery).

• They are also copying existing websites! Always check the web address, the amount and the name of the beneficiary company in the payment authorization!
• If you are selling, the most important thing is that the buyer does not need any personal or other identification other than the account number!

"High-yield" savings:

fraudsters exploit the fact that everyone wants to find the investment that will give them the highest returns. This is why they often pose as investment advisors or salesmen. 

• Be suspicious if you are offered an investment that promises "temptingly high returns", "high short-term returns" , often with the name of a well-known person.
• DO NOT install a third-party application on your devices and DO NOT transfer a registration fee!

Another form of phishing is to have your bank card digitised (tokenised) in Apple Pay or Google Pay on your behalf to access the money in your bank account associated with your bank card. In addition to your bank card details (card number, expiry date and CVV code), a critical element of the digitisation process is the activation code sent by the bank to the phone number you have provided to the requesting bank in the form of an SMS. This message will specifically indicate whether the code is being sent to initiate the Apple Pay or Google Pay registration process. If this code is given to an unauthorised person, the registration can be successfully closed, so it is very important that if:

• You did not request to have your bank card digitised (Apple Pay/Google Pay) and therefore did not ask for an activation code to digitise your bank card, but you received one on your phone via SMS, do not give it out verbally or in writing on any platform, as this could give fraudsters access to your money. 
• In addition, if you receive an SMS with an activation code that you did not request, you should immediately call our 24-hour CIB24 call centre (+36 1) 4 242 242) and cancel your card (button 9 in the menu), as the fraudsters may already have access to your card details. It is also advisable to check what websites you have visited and where you may have entered your details.

You can make a complaint through the following channels:

• CIB24 Call Centre (+36 1) 4 242 242,
• at any bank branch by filling  the relevant form

From the bank branches / CIB24 call centre, the central area responsible for the recall will receive the form filled in with the relevant data, on the basis of which the recall will be initiated for the given transaction, the success of the process being at the discretion of the beneficiary. If the deadline for response has expired (30 banking days for GIRO transfers, 15 banking days for SEPA transfers) and the beneficiary's bank has not replied or the funds have not been returned, our customers with an electronic channel will be informed by push message or, in the absence of an electronic channel, by postal letter of the failure of the recall.

Section I. of the form contains the details of the transaction to be recalled and must be completed for each recall. 

In the case of phishing, i.e. if you are requesting a recall of a transfer order that you have not authorised/recognised, you must also complete section II. and include a complaint.

In the case of phishing, we also recommend that you report the fraud immediately to the police, as your report will give the police authority the right to investigate and thus have the opportunity to detect the fraudsters and take any necessary measures. Our Bank will cooperate with the police if requested to do so and will provide them with all the information necessary for a successful investigation.

Further information is available on the following page (in Hungarian)

Important information

If you receive an e-mail or message with suspicious content sent on behalf of CIB Bank, please contact us on (+36 1) 4 242 242 (button 9 in the menu) or by e-mail at cib@cib.hu.

CIB Bank regularly contacts its customers by e-mail and telephone, but we never ask them to do the following:

• PIN code, Telephone Identification Code, user ID, login password, password generated by withkey token, codes sent by SMS, bank account details (account number, limit, balance, etc.) and bank card details. These data can only be requested directly from you via our online interfaces (e.g. internet banking, mobile application) or via the automated menu system of our CIB24 telephone customer service!
• Re-authentication/authorisation for updating certain settings or functions: in this case, we will also communicate with you directly via our online interfaces (e.g. internet banking, mobile application). 
• Installation of remote access software on the device used for online banking (fraudsters typically request the installation of AnyDesk).

If the data required for access/transaction approval has been compromised, please take immediate action:

CIB Bank Mobile App, CIB Bank Online and CIB Business Online:

• Disable your password generator:
  • Disable #withKEY (CIB Bank Mobile App) / Disable ViCA
  • Disable CIB Hard token tool

For CIB Bank Mobile App and CIB Business Online / ViCA application:

• If unknown software (e.g. AnyDesk) has been installed on your mobile phone, re-register your access!
• If you have been informed by the police, and if this has already been approved by the authorities, reset your phone to factory settings. 

In all cases, please use the latest version of the application, which is always available in the application stores. Please do not install an application from a foreign source!