Online Services
Become a customer

Security

This web page provides information to individuals and institutions to avoid fraud and fraud attempts that may cause harm to customers. The Bank advises all individuals and institutions to take caution in dealing with individuals who claim to be the Bank’s employees, or its representatives, to ensure the validity of any of these transactions.

Important Security Alert for Accounts and Cards

For the security of your accounts with us, please note that any update or confirmation of your security details can only be executed through either logging into your personal accounts on Crédit Agricole Egypt’s website (www.ca-egypt.com) or through the PhonePlus (19191).

During phone calls, Crédit Agricole Egypt staff will never ask you to disclose your security details such as your PIN (Personal Identification Number),TPIN (Telephone PIN), password, or the 3 digits indicated on the back of your Credit Card. In case of receiving such phone calls, please do not release any information and contact our Call Center at 19191, international (+202) 3332-9300.

CAE may send emails that links to CAE marketing announcements & news. These links will not lead to any pages that will ask for login username/password whether belongs to CAE or any other parties. Crédit Agricole emails will not link to any pages that will ask for any personal information like: passwords, credit card numbers, or even personal data. CAE emails only contain important news, offers and information about the Bank. In case of receiving an email requesting an update of your personal information, please discard the link and forward the email to webmaster.egypt@ca-egypt.com or contact our call center at 19191, international (+202) 3332-9300.

Reporting such incidents to the Bank will allow us to secure your banking activity from potential threats, in order to be able to serve you better.

ATM Fraud

At Crédit Agricole Egypt customer security is our first priority regarding ATM. Crédit Agricole Egypt provides the following advice and guidance to help protect against fraud perpetrated by criminals.
Review ATM Fraud

Social Engineering Techniques and Terms
Social Engineering is simply the art of getting unsuspecting persons to reveal sensitive information about a system, personal identity and passwords.
This is usually done by impersonating someone or by convincing people to believe you have permissions to obtain such information. A typical example would be someone is phoning you and identifying himself as a trusted person from a reputable bank and discussing some secure information and details about your financial account.

Please follow below:

  • Don’t tell him any personal secret information (PIN numbers or password)
  • Notify call center at 19191 about any suspicious or attempts to record
  • In case of anyone calls you and claims that he is from Crédit Agricole Bank, and ask about your Telephone PIN (TPIN) or any of your personal secret words/numbers; please take his name and call him back at the branches telephone lines ONLY, published on our official webpage www.ca-egypt.com
    User Security Guide
     

USER SECURITY GUIDE

Crédit Agricole Egypt customer security is our first priority regarding online banking. Crédit Agricole Egypt provides the following advice and guidance to help protect against fraud perpetrated by criminals over the Internet.

When you access the Internet it is important that you safeguard your personal information. All users of Crédit Agricole Egypt Online Banking have a responsibility to protect themselves against Internet crime.

Online Banking Security Top Rules, Ensure that you maintain the following:

  • Operating System Updates & Patches
  • Antivirus Software
  • Personal Firewalls
  • Password Advice
  • Updates & Patches

Periodically, vulnerabilities are discovered in programs running on your PC. The publisher will then release a fix, often referred to as a patch to correct this weakness. These weaknesses are regularly exploited by virus writers and hackers to gain unauthorized access to those PC’ s that have not been patched.

Microsoft users can visit: http://windowsupdate.microsoft.com which can automatically check what is required for both operating system and browser and then download it at your request.

Antivirus Software

You may already be using anti-virus software but to be effective, the software should be updated on a regular basis with the latest virus definition files. If you are unsure how to do this, you should refer to the program’s Help function.

Personal Firewalls

A personal firewall is another small program that helps protect your computer and its contents from outsiders on the Internet. When installed, it stops unauthorized traffic to and from your PC.

Password Advice

Passwords are the key to your online account information. Avoid using the same password for different systems that are important to you. Doing so puts your money at risk should anyone discover this single password and for this reason, you are strongly advised to have a strong password.

When choosing a strong password, you might consider the following:

  • Be different: Avoid using the same password for different services.
  • Don’t be personal: Do not be tempted to use passwords that can be easily guessed, e.g. children s names, pets’ names, birth dates, telephone numbers.
  • Never write them down: We strongly recommend that you never write down or otherwise record your passwords. If, however, you feel that you have no alternative but to do so, you should ensure that you never write down or otherwise record your passwords in a way that can be understood by somebody else.
    In any event, never disclose your Internet login details anywhere online except at your usual online banking website which should be accessed in the normal way and NEVER via a link in an email.

Online Banking Security

Online Security – Measures Implemented by Crédit Agricole Egypt to safeguard your account

As a bank we are used to thinking about security. At Crédit Agricole Egypt, we use industry standard security technology and practices, focusing on three key areas privacy, technology and identification to safeguard your account from any unauthorized access.

Privacy

We use industry standard encryption within our Online Banking services.

Secure Sessions

When you log in to Online Banking you are said to be in a secure session. You know you are in a secure session if the URL address begins with https:// or a padlock symbol appears in the lower right hand corner of your browser.

  • To ensure that you are in a secure session when you log in to banki Online – Online Banking Service, make sure that the URL address begins with https:// or a padlock symbol appears in the lower right hand corner of your browser
    sec_1
  • To secure your log in credentials:
    • Your password should be complex as much as possible, consisting of: Lowercase, uppercase letters, and numbers.
    • “Questions/ Answers” should be carefully selected and regularly updated
  • To validate your transactions through banki Mobile or banki Online, you will be required to use banki Token which will provide you with a one-time secure code of 6 digits (expires every 30 seconds).
  • When you finish performing your transactions on banki Online or banki Mobile, make sure that you close the session by pressing the “Logout” button located at the top of your navigation screen. Otherwise, it will close automatically after few seconds.
    sec_3

Encryption

Secure Sockets Layer (SSL) Encryption technology is used within your Online Banking session to encrypt your personal information before it leaves your computer to ensure no one else can read it. Depending on your browser setting, a pop-up window will appear to notify you that you will be entering a secured page.

Encryption converts your data into an encoded form before it’s sent over the Internet, thereby stopping unauthorised users from reading the information. At Crédit Agricole Egypt, we use 128-bit SSL encryption, which is accepted as the industry standard.

Session Time-out

When you log in to Online Banking you are said to be in a secure session. You know you are in a secure session if the URL address begins with https:// or a padlock symbol appears in the lower right hand corner of your browser.

Technology

We use many layers of security. Obviously, we cannot disclose all of them, but the following are typically used:

  • All our operating systems are regularly updated with the latest security patches
  • Our anti-virus software is kept regularly updated
  • We use Multiple firewalls to prevent unauthorised intrusion
  • Secure data centers
  • Identity Privacy

We use log-ins and passwords to make sure we’re dealing with you

Online access to your account is only possible once you have authenticated yourself using the correct Online Banking ID and password. For this reason, it is vital that you do not share your password.

Automatic Lock-out

After a number of incorrect attempts to log in, we disable online access to your account. To re-activate your account, you should contact your usual help-desk number.

Online Security – Your Role

In addition to our security measures, you also play an important part in safeguarding your online information. There is much that you can do to protect yourself online. To start, please follow the Top Rules stated above.

Please also take in consideration the detailed information below:

  • Keep your details and identity secured
  • Keep your password secured
  • Keep your computer secured
  • Keep your Online Banking session secured
  • Keep your email secured
  • Protect yourself, even when you’re offline
  • Keep your Details and Identity Secured

Identity theft is the act of stealing or using an individual’s personal information without their knowledge or consent, for example, to illegally make purchases, or gain access to funds. Victims may not become instantly aware of the increased debt until.

  • They receive statements
  • They receive an unexpected notice
  • They are tracked down by creditors
    Identity theft can take a long period to detect and even longer to clear. Reduce your risk and protect your personal information in all your financial dealings, whether over the Internet, by following these tips:

Take care when you go online from public sites
Try to avoid using Online banking, at Internet Cafes, Libraries, and other public sites to avoid the risk of information being copied and abused after you leave.
Get wise to online fraud
Be aware that there are fraudulent web sites designed to trick you and collect your personal information. Sometimes links to such web sites are contained in email messages purporting to come from financial institutions. Make sure to use the official known web address, to link to bank pages. Crédit Agricole Egypt will never send you this kind of mail.
Change your passwords
Always change passwords that may have been compromised. It is recommended that you change your password at regular intervals.

Contact your bank if you think someone else knows your Online Banking password
Password protect your computer
Use a password on your computer to prevent unauthorized individuals from accessing your information.
Disable the ‘AutoComplete’ function within your browser
This will help prevent others from seeing personal information. On Internet Explorer, for example, the AutoComplete’ function remembers data you have input, sometimes including passwords.
Keep your Password Secured

Passwords are the key to your online account information, to accounts at online stores and a host of other online activities. Your Crédit Agricole Egypt Online Banking password, together with your Online banking ID, permits access to your bank accounts. For this reason your password should be unique and very well protected.

Keep it to yourself and never share it
Be unique, try and create unique passwords that are not easy to guess.
Use letters, numbers and symbols Passwords containing upper and lower case letters, numbers, and symbols are far harder to guess.
Never write them down if you really need to record your password then try to code it.
No one at Crédit Agricole Egypt will ever ask you for your Online Banking password. If someone does ask you for it, they do not represent Crédit Agricole Egypt.

Keep your Computer Secured

The Internet offers hackers the opportunity to access your system. In fact, although the web’s a great way to find the software, downloads, and music you may want, it’s when you are doing this that you could be most at risk. Please make sure you are using the top rules to secure your computer.

Keep your Online Banking Session Secured

Logging in

Ensure you enter your correct password(s) without the details being inadvertently disclosed to someone who may be looking over your shoulder.

Logging Off

Always remember to log off from the Online banking session and close your browser when you have finished your online banking. This will clear all traces of your visit from the PC’s memory.

Memorize the keys to your access
Your Online Banking ID and password are your keys to accessing our online services. Only the right combination of these allows you access.
Don’t use links to access our site Always enter the official web address. Do not use a link as this may take you to a fraudulent web site that may look exactly like ours.
Avoid using shared computers for Online Banking
Try to avoid using shared public PCs, such as those in Internet cafes, to access Online banking.
Keep your Email Secured

Generally, email is not secure or encrypted to protect the content. Therefore, any personal information you include in an email is at risk of being intercepted by unauthorized individuals. Do not send your Online Banking ID and/or passwords by email to anyone ever.

Never send sensitive information by email
Don’t answer any unexpected email messages requesting personal information.
Be wary of opening any unexpected email messages with attachments
A common way for a virus to spread is via email. Never open an email attachment that contains a file ending with .exe, .pif, .vbs as these are commonly used with viruses.
Any file that appears to have a double extension is almost certainly a virus and should be deleted.
Protect yourself Even When you’re Offline

Even when you are offline, there’s much that you can do to protect yourself. This keeps private information strictly private.

Keep your details safe
Don’t be tempted to share your User IDs, passwords or any unique personal identifiers/details with someone else. Nor should you supply personal information to anyone over the phone or to a web site unless you have satisfactorily verified the identity of the recipient of such information. Crédit Agricole Egypt would never ask for Internet passwords over the phone.
Read your statements
Review your bank and credit card statements for any unusual transactions or withdrawals and notify the bank immediately if you think a transaction is suspicious.
Warning About Cybercrime
 
Customers should be aware of the following methods which criminals use in attempts to convince you to reveal your confidential access information:

E-mails purporting to be from a bank which ask customers to click on a link which sends them to a fake bank website (ghost website) E-mails asking customers to be a sales agent for goods or a service, with the promise of commissions delivered to your bank account (job scams)
E-mails purporting to be from a bank or another legitimate business and asking for confidential information (phishing’ e-mails)
Trojans/spy ware – computer programs which conceal hidden programming which infect computers and are used by criminals to record and remit your access keystrokes or to destroy people’s data
Threats & What to do
 
Fraudulent and spoof websites

These are authentic-looking websites created by internet fraudsters which look like other respectable websites, such as ours. They attract people to their sites through phishing emails and often ask for personal and/or confidential information

These are authentic-looking websites created by internet fraudsters which look like other respectable websites, such as ours. They attract people to their sites through phishing emails and often ask for personal and/or confidential information

Call spoofing

Call spoofing is a technique whereby the fraudster fakes the phone number on caller ID to give the impression that you are being contacted by a genuine Credit Agricole number. The phone number showing on your mobile/call ID screen will look very similar to a bank phone number but may have extra zeros at the front, e.g. 00 3332-9300. rather than  +202-3332-9300..

Customers who may be wary of unsolicited calls are told by the fraudster to check the caller ID screen for reassurance that the call is genuine. The fraudster then advises the customer that their account has been compromised, often claiming that payments have already been debited or that funds are at risk. The fraudster then instructs the customer to transfer money into a “safe” account to protect their funds from further attack. The fraudster may allege bank staff are involved or that the customer will lose their money if they do not do exactly as instructed.

As with all unsolicited phone calls we advise customers to terminate the call and contact the bank either on a different phone line or after waiting 10 minutes to ensure the line is properly disconnected. Alternatively, visit a branch to discuss your concerns and confirm if the call was genuine.

“Vishing”

This involves a fraudster making phone calls purporting to be from a reputable organization, such as a bank, the fraud investigation team or police. The call is made to obtain personal financial information, which often includes credit/debit card details (including PIN), bank account details and personal information such as full name, date of birth and/or address, passwords and security codes. This information is then used to gain access to their victim’s finances.

Investment or share sale (boiler room) fraud

Boiler room fraud is the common name for illegal and/or aggressive miss-selling of worthless, bogus or vastly overpriced stocks and shares or those traded in very limited volumes/markets. The sole purpose of the exercise is to defraud unwitting investors. If the victim does decide to deal with a share sale fraudster, they will almost certainly lose any money invested and will not be entitled to compensation.

These scams can come in many forms. However, there are a number of common factors you should look out for. These include:

  • Unsolicited approaches
  • Unrealistically high returns offered for “low risk” investments
  • No independent evidence of the validity of the scheme
  • Pressure to make quick decisions
  • Instructions to keep the approach confidential
  • Telephone numbers quoted are often untraceable mobiles

If it sounds too good to be true – it usually is.

Advance fee or “419 Fraud”

This involves unsolicited letters and emails offering the recipient a generous reward for helping to move large sums of money, usually in US dollars. These funds are said to be anything from corporate profits, accumulated bribes or unspent government funds to unclaimed money belonging to a deceased person. The fraudsters are trying to obtain your banking details. The transactions typically require the recipient of the letter or email to pay something like a fee/tax/bribe to complete the deal – this is the advance fee. However, any fees paid will be lost.

Lottery fraud

This involves letters or emails which advise the recipient that they have won a prize in a lottery. To obtain the funds, they are asked to respond to the letter or email. A request will then be made for the recipient to provide his bank account details to allow for funds to be transferred. The recipient may also be asked to pay a handling/processing fee. If paid, this fee will be lost. Also, any details given will probably be used to commit further fraud.

Keystroke capturing/logging

Anything you type on a computer can be captured and stored. This can be done using a hardware device attached to your computer or by software running almost invisibly on the machine. Keystroke logging is often used by fraudsters to capture personal details including passwords. Some recent viruses are even capable of installing such software without the user’s knowledge.

The risk of encountering keystroke logging is greater on computers shared by a number of users, such as those in internet cafes. An up-to-date anti-virus software program and firewall will help remove the harmful software before it can be used.

Pharming

Pharming is when a fraudster creates false websites in the hope that people will visit them by mistake. People can sometimes do this by mistyping a website address – or a fraudster may redirect traffic from a genuine website to their own. The ‘pharmer’ will then try to obtain your personal details when you enter them into the false website. Double checking that you recognize the website’s URL and looking out for the padlock sign can help you avoid falling victim to pharming.