Velocity@OCBC - OCBC Group

1. SERVICE MAINTENANCE (27 FEBRUARY 2010)

We are upgrading our system to serve you better. Please note that Velocity@ocbc will not be available from Saturday 27 February 2010 5pm to Sunday 28 February 2010 1am. We apologise for any inconvenience caused.

2. SERVICE MAINTENANCE (6 MARCH 2010)

We are upgrading our system to serve you better. Please note that Velocity@ocbc will not be available from Saturday 6 March 2010 5pm to Sunday 7 March 2010 5am. We apologise for any inconvenience caused.

3. SECURITY ADVISORY (MAY 2009)

Security Alert on Malicious Trojan (Banker) in Circulation

It has come to our attention that there is a new Trojan in circulation on the internet. This malicious program infects your computer and at the login stage, is able to steal your Velocity@ocbc login information such as your User Name, Password and Organisation ID.

When you attempt to log in to Velocity@ocbc from an infected computer, the Trojan will present to you a page that looks like the Velocity@ocbc login page. Your browser may hang for a period of time and trick you into entering your login details multiple times. The Trojan will then capture the information and send it to the culprit.

The URL to OCBC Bank’s official website is http://www.ocbc.com/. We advise our customers and other members of the public to only log in through this URL.

If you experience the following while on the site:

a. Multiple prompting to enter your login information

b. Your computer hangs for a period of time

c. Indications of suspicious activities in your Velocity@ocbc account, i.e. Adding of Beneficiary unknown to you or unauthorised 3rd Party Funds Transferr to an unknown account.

DO NOT proceed with your online banking activities but alert us immediately by calling (65) 6538 1111.

If you do suspect that your computer may be infected :

• Do not use it for any internet banking transactions
• Perform an antivirus scan immediately

Free online antivirus/anti-malware removal tools are available at the following websites :

http://vil.nai.com/vil/content/v_157491.htm

We advise our customers to be cautious when accessing the internet. These are some of the precautionary measures that you can take :

• Ensure that your antivirus software is up to date with the latest virus signatures
• Frequently scan your computer for viruses/malware
• Do not open attachments or click on hyperlinks from unknown sources
• Avoid visiting websites housing software or other illegal online resources

• Ensure that your operating system is up to date with the latest patches. This helps to tighten vulnerabilities that such malware may exploit
• Refrain from using internet banking facilities on public computers

Protecting your information has always been our priority. To learn more about our privacy and security policies as well as other useful information about online security and tips on protecting yourself from fraud, please visit www.ocbc.com/personal-banking/tools%20and%20info/Toi_Poc_SecPriPolicy.shtm.

4.TWO-FACTOR AUTHENTICATION (2FA)

With effect from 9th July 2007, all Velocity@ocbc customers are required to use the new Digipass for login to Velocity@ocbc.

If you have not received your new Digipass, please contact us at (65) 6538 1111.

New Digipass

The Two-factor Authentication (2FA) process is designed to provide additional security for customers on Velocity@ocbc, our online business banking service.
2FA is a security process in which the User provides two means of identification.
One is typically a physical token (e.g. Digipass) which generates a security code. The other is typically something memorised (i.e. USER NAME, PASSWORD, ORGANISATION ID). Used in combination, these two factors provide greater peace of mind in performing banking transactions over the Internet.

Since the inception of Velocity@ocbc in 2001, Authorisers have been approving transactions online using the Digipass. In this 2FA exercise, we will be issuing new Digipasses to all Users of Velocity@ocbc.
For more information about 2FA, click here.

Please note that the Bank will NOT require you to activate your Two-factor Authentication via email.