Secured Login The 128-bit encryption protects all data that is transferred between your Online MCB Account, internet and your personal computer used by large scale online merchants, banks and brokerages worldwide. This is the highest level of encryption which secures your information online.
Virtual Keyboard Login
You can now use your mouse to log in with the new MCB online virtual keypad login screen. The virtual keypad is dynamic and the position of characters changes every time. This protects you from malicious 'Spyware' and 'Trojan Programs' designed to capture your keystrokes and reveal your password.
One Time Password (OTP)
Get the advantage of double protection with the One Time Password (OTP). It is a unique password which will be sent to your mobile number & email address registered with MCB for performing addition of any New Beneficiary, Bill registration, Credit Card registration & payments and Setting Alerts. This OTP acts as an additional layer of security to your login ID and password and the transaction you performs.
Please note that OTP received is for single activity/transaction with unique “Reference No” and will be expired with your session timeout.
Encryption is a method of scrambling your information to protect its transmission across the Internet. Encryption transforms data into an unreadable form and decryption reverses that process. Both encryption and decryption require the use of a special code, usually referred to as a key. The encryption of data provides a strong degree of protection against tampering while data is moving through the Internet.
Besides maintaining the confidentiality of your MCB Internet Banking User ID & Password, you should take the following precautions:
DO NOT reveal your ID and password to anyone, write down or use it where someone else can see.
Change your password IMMEDIATELY, using the 'Change of Password' service, if you suspect it has been revealed.
DO NOT use easily recognized numbers such as your telephone number etc. as your password.
REMEMBER TO LOG OUT of the system and close your browser whenever you leave your computer, even for a short while.
Clear your browser's cache on a regular basis so that your account information is removed. This is particularly important if you are using a shared PC. You should clear it after each session.
Always use the latest recommended internet browser so that you are using the most updated security features available.
Call our phone banking immediately if you notice any unusual transactions on your account.
Security Measures on Mobile browser While using Internet Baking on your phone, your information is protected by the following security measures:
Internet banking mobile interface does not store personal account information on your mobile device, so your account(s) is not exposed if your phone is lost or stolen.
When you use internet banking through your mobile phone, your information is protected by 128-bit encryption, just as when you bank online on a PC or Laptop.
Ways to keep your information safe
Secure your phone with a strong pass code or other privacy feature
Do not store your bank account number or Password on your mobile phone
Be careful when typing out your account number and password details on the mobile phone, especially while using the phone in a public spot, to prevent shoulder surfing
Please report the loss of your mobile phone to the bank so that we may lock the User ID and access to your account.
Take the same precautions on your mobile phone as you do on your computer with regard to messaging your account information, downloading applications and online safety.
Be aware that email or SMS messages requesting for your personal identification number, account number or other information is certainly fraudulent.
Download anti-malware protection for your mobile phone or tablet device.
Do not root or jailbreak your mobile device to get around limitations set by your carrier or device manufacturer. It may remove any protection built into the device to defend against mobile threats.
Be aware of everything you download onto your smartphone, especially applications. Only use reputed applications from the market. Look at the developer's name, check out reviews and star ratings. Always check the permissions an application requests and ensure that the requests match the features the application provides
You need to be aware of and take precautions regarding security issues with smartphones. You could still be at risk if not properly protected. Below are some methods by which you can stay protected while enjoying the benefits of mobile advancements.
Use a PIN/Key-lock code The reasons for doing so are obvious - if a phone is lost, stolen or simply left unattended, anyone that picks it up will have unrestricted access. This could involve data being stolen, phone calls being made or unwanted services being registered for, and could result in considerable financial cost.
Many new phones offer a "pattern lock" - a personalized shape or pattern that is drawn on the screen to grant access, and this is often faster and of lesser hassle than entering a password. Alternatively a PIN code offers a numeric alternative to a standard password and can also save time. Obviously a password that is easy to guess is less secure - so avoid "1234", "password" and other common phrases.
Rooting your phone Since rooting allows a user's access to system-level resources, it also opens up for potential infection by malware. Part of the reason why this critical data is inaccessible is to protect it from such threats, and while you may benefit from more flexibility in the short term, writers of malicious code can also benefit from full access to your device if it becomes infected.
Security softwareSecurity software can help you avoid many of the potential dangers associated with smartphones and modern suites are tailor-made to address issues that are unique to handhelds. As well as offering more standard malware, spam and firewall protection this software can help you control your phone from afar. If your phone has GPS capabilities, it can show you the location of a device if it is lost or stolen.
Furthermore, it's possible to lock a device remotely, requiring password access on the handset or a specific unlock request to enable it. If a phone has simply been misplaced in the home, an audible alert request can be sent to the device to signal its location, and it's even possible to erase sensitive data remotely if you're sure it has found its way into the wrong hands.
Firewall acts as a gatekeeper. It controls the information that goes to and from your computer.
Firewalls prevent unauthorized access to your computer. They also protect your sensitive information from being transferred to unauthorized sources.
Installing a personal firewall is important, especially if you are using a broadband connection
Although Internet browsers have built-in security, some Internet files that get downloaded to your computer whenever you are online may pose a security risk.
Anti-Virus Protection Computer viruses can cause serious damage to your computer's performance. The following measures minimize the risk of your computer getting affected.
Install anti-virus software on your computer.
Configure the anti-virus software to automatically notify you when new updates are available for download.
Perform a complete scan of your computer at least once a week
Configure the anti-virus software to scan all in-coming and out-going emails
Anti-virus software does not provide protection against spying or Trojan horse programs. In addition to having a personal firewall installed, ad/spyware scanner software is recommended to protect you against spying software.
Install Anti-Spyware software on your computer. This software does a full system scan to detect any ad/spyware on a regular basis.
Get this software updated regularly on your computer.
Protect Your Account Information Online safe banking
Change your MCB Internet Banking Password often
Do not send sensitive personal or financial information unless it is encrypted on a secure website.
Act quickly if you suspect fraud.
Keep your Internet Password confidential.
Use a secure alphanumeric password that cannot be easily guessed. Do not use commonly used passwords like your vehicle registration number, birthdays, etc.
Log off from MCB Internet Banking after you complete your transactions every time and then close your browser.
Clear your browser cache regularly so that your browser does not store data.
Avoid accessing MCB Internet Banking from a public/shared computer and if it is necessary use the virtual key board to login and clear the cache before leaving that device.
Login to MCB Internet Banking regularly to monitor your transactions.
Always remember to log out of your Internet Banking account and close your browser when you have finished.
Never fill an email with input fields that ask you for sensitive data such as User ID, Passwords, VDC PIN and account number information.
Check for the padlock in the address bar of your browser window (it indicates a secure site). You can click on this padlock to verify the websites “owners”.
If you suspect a website is fraudulent, leave the website. Do not follow any of the instructions it may present to you.
Add or bookmark the URL - http://www.mcb.com.pk/ to your favorites to access information and carryout transactions on your MCB Bank Account.
Fraudulent emails The fraudulent email appears to be from a legitimate bank seeking to collect sensitive personal and financial information.
How to identify a fraudulent email?
As a provider of online banking services, MCB frequently communicates with its clients via email. The majority of these communications are to provide you with information and updates about our services
If we request information from you, we'll always direct you back to a MCB Bank site using links. These are for your convenience - you can also reach our site (http://www.mcb.com.pk/) using your bookmarks. You can add any of the MCB Bank URLs to your list of favorites or bookmark them
If you use a link in an email from us, you can make sure that you are on a MCB Bank page by comparing it against the known URL you use to access your online banking application
MCB Bank will never send you an email with any input fields asking you for your personal, account or other sensitive information.