Let's take care of your online safety together!

Phishing

The phisher usually attacks with a seemingly official email, text message or phone call to direct you to a website similar to your previously visited ones and asking for your personal and banking details.

Never click on a suspicious link from an unknown source and only give your data on websites you know well, and which address you have entered in your browser. You can check if you are on an official website by looking at the address of the website, which should contain the official name of the company and should end with '.hu', for example (https://www.cib.hu). 

Internet scams

Pay close attention, when shopping online! Online shopping is quick, easy, and convenient but it’s important to shop only on secure websites and use your credit card responsibly.

Psychological manipulation

In case of psychological manipulation, or social engineering, the scammer uses emotions to get money out from you.

Fraudsters may contact you via social media, email, or phone to ask for financial support for a noble case, and then convince you to enter your banking username and password to fasten the transaction - after which they can easily access your money.

Fraudulent trader (repeated charging fraud)

One of the identified types of fraud in the online space is where online traders operating with specific fraudulent intentions deceive customers by hiding subscription information during the sales process. The deception is that a product or service is offered at an attractive price on a website, typically abroad, but the fraudulent merchant hides the fact that by making the purchase and approving it with strong customer authentication, the customer is in fact approving a recurring charge. Then, despite the customer's real intentions, the Deceptive Trader charges the customer's account with up to a few thousand to tens of thousands of forints every week.

It’s important, that you:

• read the terms and conditions of the purchase carefully, whether it is a product or a service.
• make sure that the payment will be recurring, i.e. that the amount will be automatically deducted at regular intervals.
• use a virtual card or a virtual single-use virtual card, with a balance topped up with the amount needed for your shopping habits and the transaction
• set purchase limits for your credit cards that are adapted to your own habits
• check the merchant (where we pay) on the internet, look at reviews and how long they have been on the market, and see if there is any information about fraudulent behaviour
• don't fall for too good offers, if something looks too good to be true, most of the time it isn't, it's just a decoy!
• if the information is in a foreign language, such as the terms and conditions of purchase or the trader's web shop or website, and you do not understand that language, do not register and pay or ask someone who understands the foreign language text to help you!
• if you are a victim, call CIB24 immediately on the phone number on the Bank's website and we cancel the card in the mobile app!
• non-payment may not mean that the payment is no longer due, so the service in question must be cancelled/terminated!

Online prize draw with a „Call from your bank”

You will first be contacted by phone and informed that you have won a prize draw. During the conversation you will be told that you are a CIB Bank customer, then shortly afterwards you will be called again, this time on behalf of „our bank and suspicious movements will be reported in your account. Finally, you are offered help and asked to download the AnyDesk application.

Unfortunately, many people think that the first call was a scam and the second call is from the bank, while giving the scammers all the information they need.

It is IMPORTANT to know that our bank does NOT run prize draws. Please always bear in mind that although we regularly contact our customers by email and phone, we NEVER ask you for the following details:

• PIN code, Telephone Identification Code, User ID, login password, password generated by withkey token, codes sent by SMS, bank account details (account number, limit, balance, etc.) and debit card details. We may only ask you for this information directly on our online interfaces (e.g. internet banking, mobile application) or via the automated menu system of our CIB24 telephone customer service.
• Re-authorisation/re-authorisation to update certain settings or functions: in such cases, we will also communicate with you directly via our online interfaces (e.g. internet banking, mobile application).
• Installation of a remote access program on the device used for online banking. Fraudsters typically request the installation of AnyDesk.

"Bank" call

Fraudsters call with a fake number (e.g. referring to a suspicious online transaction) in the "name of the bank". Your display may show the "real" phone number or name of the bank (whether your own or another financial institution), because fraudsters can even change the caller ID!

• It is IMPORTANT to know that other financial institutions (if you do not have a bank account there) CANNOT know your phone number and that the customer services of different banks CANNOT be connected!
• Do NOT give out your bank details or install any other application on your devices (e.g. AnyDesk, RustDesk, TeamViewer)!

Online giveaway

This type of scam is most common in social media messages or phone calls. Scammers contact you by claiming that you have “won”, but need your bank details or a specific code to send you via SMS to finalise the prize. It can be deceptive that scammers often copy profiles of influencers or sites with larger followings.

• It is IMPORTANT to know that you do NOT need to download, approve or enter an approval code to make a transfer!

Fake online sales

There are many different types of online shops nowadays, so it is important to always check the website where you are buying or selling: especially the company name, the location of the company, the "about us" section, the legal information and the terms and conditions. Be suspicious if these are missing or worded in a way that is not in English, if the customer service is not properly indicated or if there is only a form to contact the store, and if there is no option for multiple payment methods (e.g. cash on delivery).

• They are also copying existing websites! Always check the web address, the amount and the name of the beneficiary company in the payment authorization!
• If you are selling, the most important thing is that the buyer does not need any personal or other identification other than the account number!

"High-yield" savings

Fraudsters exploit the fact that everyone wants to find the investment that will give them the highest returns. This is why they often pose as investment advisors or salesmen. 

• Be suspicious if you are offered an investment that promises "temptingly high returns", "high short-term returns" , often with the name of a well-known person.
• DO NOT install a third-party application on your devices and DO NOT transfer a registration fee!

Digitizing a bank card in your name

Another form of phishing is to have your bank card digitised (tokenised) in Apple Pay or Google Pay on your behalf to access the money in your bank account associated with your bank card. In addition to your bank card details (card number, expiry date and CVV code), a critical element of the digitisation process is the activation code sent by the bank to the phone number you have provided to the requesting bank in the form of an SMS. This message will specifically indicate whether the code is being sent to initiate the Apple Pay or Google Pay registration process. If this code is given to an unauthorised person, the registration can be successfully closed, so it is very important that if:

• You did not request to have your bank card digitised (Apple Pay/Google Pay) and therefore did not ask for an activation code to digitise your bank card, but you received one on your phone via SMS, do not give it out verbally or in writing on any platform, as this could give fraudsters access to your money. 
• In addition, if you receive an SMS with an activation code that you did not request, you should immediately call our 24-hour CIB24 call centre (+36 1) 4 242 242) and cancel your card (button 9 in the menu), as the fraudsters may already have access to your card details. It is also advisable to check what websites you have visited and where you may have entered your details.

Interbank and intrabank ad hoc transfer orders

You can make a complaint through the following channels:

• CIB24 Call Centre (+36 1) 4 242 242,
• at any bank branch by filling  the relevant form

From the bank branches / CIB24 call centre, the central area responsible for the recall will receive the form filled in with the relevant data, on the basis of which the recall will be initiated for the given transaction, the success of the process being at the discretion of the beneficiary. If the deadline for response has expired (30 banking days for GIRO transfers, 15 banking days for SEPA transfers) and the beneficiary's bank has not replied or the funds have not been returned, our customers with an electronic channel will be informed by push message or, in the absence of an electronic channel, by postal letter of the failure of the recall.

Section I. of the form contains the details of the transaction to be recalled and must be completed for each recall. 

In the case of phishing, i.e. if you are requesting a recall of a transfer order that you have not authorised/recognised, you must also complete section II. and include a complaint.

In the case of phishing, we also recommend that you report the fraud immediately to the police, as your report will give the police authority the right to investigate and thus have the opportunity to detect the fraudsters and take any necessary measures. Our Bank will cooperate with the police if requested to do so and will provide them with all the information necessary for a successful investigation.

Further information is available on the following page (in Hungarian)

Unauthorised card use

If you notice a block or a debit on your account due to unauthorised card use, you have the possibility to make a claim.

In all cases, you can lodge a complaint with the bank that issued the card.

It is possible to submit a claim for both blocked and debited items, but please note that, according to international card-issuing rules, debits following a successful authorisation request must be accepted by the issuing bank and cannot be prevented.

Furthermore, we would like to inform you that issuing banks can only claim for transactions that have already been debited.

We therefore ask you to block or debit your card immediately whenever you detect a block or debit resulting from unauthorised card use. You can make a complaint through the following channels:

• Our CIB24 call centre (+36 1) 4 242 242,
• at any bank branch
• by completing and signing the Bank Card Complaint Form below and sending it to kartyacb@cib.hu or cib@cib.hu. Please attach all documents related to the complaint to your letter at the same time as you send the form.

The time limit for the investigation of the claim is 15 working days, according to the MNB Regulation 46/2018 (17.12.2018), however, in cases where our Bank has the possibility to contact the acquiring bank for the financial settlement of the disputed transactions, our Bank is not able to complete the investigation within the above mentioned time limit due to the time limits imposed by the card company rules, i.e. compliance with external rules. In these cases, the maximum investigation period is 120 days.

Further information is available on the following page:

Using your bank card, useful information

Manage your cards easily and reliably!

Set a daily purchase and cash withdrawal limit for your card that matches your shopping habits, while being safe and convenient!

Set a daily purchase and cash withdrawal limit for your card that fits your shopping habits, while being safe and convenient.

You can find card-related functions by clicking on "Cards" in the main menu. Activation can be initiated in the mobile app on the cards to be activated by pressing a green "Activate" button.

Please consider!

• DO NOT give your bank details, instead call CIB24 customer service.

• DO NOT act quickly, do not give in to "pressure".

• DO NOT install a foreign application (e.g. AnyDesk, RustDesk, TeamViewer) on your computer or smart device.

• DO NOT give your payment details for online payments and transfers byphone, e-mail or SMS: bank account details, user ID for internet or mobile banking access, login and approval PIN.

• DO NOT start an online payment or transfer and DO NOT start downloading programs by clicking on a link you receive by SMS or e-mail.

• Please be aware that other financial institutions CANNOT know your phone number (if you do not have a bank account there) and that the customer services of different banks CANNOT be connected!

• In case of a suspicious transaction, our bank may contact you via the official CIB24 Call Centre in an identified call and will never ask you to initiate a transaction or to enter a code.

• Always read carefully if you receive a notification from our Bank via SMS (e.g. Google Pay/Apple Pay card authorisation) or in your mobile app. If you don't know why you received it, you should always call CIB24 Customer Service.

• Always enter CIB Bank Online from the official CIB website or manually enter https://online.cib.hu in the address bar of your browser. Never call up the site from a Google search.

• Always access CIB Business Online from the official CIB website or manually enter https://businessonline.cib.hu in the address bar of your browser. Never access the site from a Google search.

• PROTECT your data, use the secure virtual card available in the CIB Bank Mobile App* for your online purchases.

• Save your physical bank card details only on the website of a trusted merchant that you use regularly and primarily initiate recurring transactions (e.g. subscriptions, utility bill payments).

• IF you see anything suspicious, immediately set all limits to HUF 0 in your mobile app.

• In case of transfer, our Bank might contact you by phone to confirm a transaction!

• If you are contacted via phone by our Bank, please ask for cross-identification! The cross-identification is a PUSH message sent by a CIB24 call centre colleague, which indicates that the customer is currently speaking to a CIB Bank colleague.

More tips

• Make sure the website you choose is a real provider; search for it on other websites, social media, read reviews. Try the site's customer service, check the cost of shipping goods, the complaint options and the conditions for returning goods.

• Check the provider's credibility thoroughly before you authorise regular charges to your credit card or save your card details on any site. Save your physical bank card details only on the website of a trusted merchant that you use regularly and primarily initiate recurring transactions (e.g. subscriptions, utility bill payments).

• Install anti-virus software on your device, change your password if the system suggests it.

• Do not save your passwords when sites offer this option.

• If you receive an e-mail with a link to an external site, do not enter your card details on the page where the link is located.

• Use a virtual payment card! This feature allows you to create a new virtual payment card for your online purchases, with a limited validity period and a separate frame for one or more uses. This will reduce the risk of online fraud with your card and ensure that your entire account will not be affected by a potential fraud.

• Back up regularly!

• Encrypt the data stored on your device.

• Set an automatic lock on the device screen.

• Use a PIN code with at least 5 digits to unlock the screen lock.

• Install virus protection.

• Be sure to regularly update the security of your multifunction devices and keep them up to date!

Credit card limit setting/ Transfer limit setting

This is a service where the customer can transact up to a daily maximum amount set by the customer or submit a transfer order up to this amount. It is advisable to set these values low to prevent future abuse.

Introduction of a new transaction limit in our electronic channels

A daily and a monthly transaction limit and a daily and a monthly transaction limit maximum have been set for our customers on our CIB Bank Mobile App and CIB Bank Online channels.

The Transaction Limit Maximum is the maximum amount up to which you can enter orders in the CIB Bank Mobile Application and CIB Bank Online. The daily limit is HUF 200 million and the monthly limit is HUF 500 million.

The Bank will set the following transaction limits (Transaction Limit) as default settings in CIB Bank Online and CIB Bank Mobile Application Services for retail Users who have a contract for the provision of CIB Bank Online and/or CIB Bank Mobile Application Services as of 5 August 2024: basic transfer limit HUF 1 million per day, HUF 30 million per month.

Each User shall be entitled to change the Basic Limit - and the Transaction Limit set by themselves - for their own account via the Electronic Service interface electronically, provided that the amount of the Transaction Limit shall not be higher than the basic setting of the Transaction Limit maximum by the bank. The change will take effect immediately after the User has made the setting. The Transaction Limit Maximum cannot be changed by the User.

Introduction of number limits for credit card transactions

For bankcards issued by CIB Bank, basic limits have been introduced for both cash withdrawals and purchases, i.e. by default, you can make up to 50 cash withdrawals and up to 40 purchases per day with your bankcard (whether debit or credit).

You can view and change the limits in person at a branch or via the telephone helpline.

Virtual payment card

This special product is designed exclusively for online shopping, allowing you to make convenient and secure purchases in online shops. For online credit card payments, we always recommend using a virtual payment card to minimise your losses.

Instant card cancellation via mobile app

This is a security feature that helps you with immediately limiting your card, or the settings associated with your card (amount, limit) through the app if you detect an unauthorized credit card transaction. This way, the card is immediately protected against further fraud attempts in the future.

Requesting operation monitoring notifications

Transaction monitoring messages are provided by the Bank via the push channel, which can be set up in our CIB Bank Mobile App and CIB Bank Online channels.

This is a service where the customer can decide and request which events they would like to receive notifications about. Within the service, notifications can be set/requested for account movements (credit and debit notifications can be handled separately), card transactions and loan repayment due dates. It is highly recommended to set up these notifications, as this is the earliest way to detect possible fraud and take the necessary measures.

Our sole trader, self-employed and corporate clients can also request a free personal Data Change Monitoring Notification service:

Changes in personal authentication data (e.g.: requesting a new user ID for an electronic channel) or notification data (e.g.: change of e-mail address or notification address) will be notified free of charge via CIB Bank Mobile App after the request. You also have the option to request an SMS notification to a mobile phone number with a Hungarian caller ID, which is optional and subject to a fee. For detailed information on the fees, please refer to the current Corporate Account Management Terms and Conditions.

New SMS notifications for bank cards

New SMS notifications for card-based cash substitutions
From 6 December 2024, we will be introducing a new SMS messaging service for our retail customers.

The service will notify you by SMS if

• a limit change has been made to any of your debit cards or the companion cards linked to your bank account, and
• if any of your debit cards or the companion cards linked to your bank account are activated.

Prohibition of contract modification by electronic

Prohibition to modify a contract electronically

Business customers, including self-employed people and farmers, may, at the time of conclusion of the contract or at any time thereafter, declare whether they authorise/consent to the electronic modification of contracts.

If the Customer does not consent to the amendment of the contract by electronic means: the Bank will only accept requests for additional cash substitute payment instruments, in particular mobile banking, internet banking applications, physical or virtual payment cards, etc., limit changes, - changes to the user authorisation of cash substitute payment instruments, amendments to the Framework Contract for the cancellation or amendment of the free of charge Data Change Notification, in person or by means of an audited electronic communication.