About security

UniCredit Bank attaches the utmost importance to securing its services and uses the best state-of-the-art methods as proven by the experience and know-how of the entire UniCredit Group.

Security of UniCredit Bank products

Internet banking

Logging into Internet banking requires entering a user ID (assigned by the bank) and a code from the security key. The security key can either be the Online Banking key, SMS key or token (calculator). You can select your security method at the branch when taking out the product. The code from the security key is used for logging into the application (authentication) and for signing transactions (authorisation). The data transfer between the bank and your computer is secure. There is a possibility of setting automatic SMS or e-mail notifications of every login in the Internet banking. Of course, you can set the daily limits for payments and automatic logoff from the application after longer inactivity.


Smart Banking

Access and payment authorisation is PIN-protected in Smart Banking. The application is linked directly to the client’s mobile phone, but does not save any sensitive information in it. The maximum amount sent through Smart Banking must not exceed CZK 50,000. The application logs itself off after three minutes of inactivity.

Infoline

Disclosure of confidential information or execution of users’ requests related to security features is strictly tied to the unambiguous proof of the caller’s identity based on the code from the security key or entry of the special password for communication with the bank.

Types of security keys

1. Online Banking key

Online Banking key is a mobile application which generates one-time use and time-limited codes. Smart device owners can get the Online Banking key by downloading the Smart Banking application from Google Play or the App Store. Other mobile phones (with Java) download a separate application from a link sent by the bank in an SMS.

The Online Banking key is recommended if you:

  • want to have security that is free
  • want to have security at all times and do not want to carry additional equipment
  • want to have absolute control over transactions you are signing
  • often travel to exotic lands where an SMS code may not be delivered in time.

2. SMS key

Codes for login and payment in Online Banking will be delivered via SMS. When selecting this type of security, you need your own e-mail address to receive the login security code and mobile phone number for sending one-time SMS codes.

The SMS key is recommended if you:

  • reside mainly in the Czech Republic
  • want to have security at all times and do not want to carry additional equipment
  • send individual transactions where the SMS code also contains information about the relevant transaction

3. Security key (calculator)

An additional device in the form of a calculator that you activate using your own PIN and generate your code for login or signature of payments.

The security key (calculator) is recommended if you:

  • use a company account (the owner pays a single fee for the token and thus has security costs under control)
  • also use Telebanking

Principles of secure communication and data protection

Following these simple rules will allow you to securely control your accounts via direct banking products and minimise the risk that your personal data will be misused by unauthorised persons.

Login details, passwords, PINs

  • Never disclose your security information (user ID, password, PIN, security code) to another person.
  • Do not leave your computer or mobile phone unattended; use keyboard locks and device access codes.
  • Avoid using direct banking products in public (such as while using public transportation) and in monitored rooms (such as in the sight of security cameras).Be conscientious about your privacy and check that other people cannot observe your login data, especially when logging in.
  • Do not work with direct banking using computers you cannot ensure do not contain malware (e.g. in public internet cafés).

E-mail

  • The bank never sends e-mails calling for disclosure of identification information, passwords, PINs, etc. Do not respond to such calls and please inform the Client line if you receive one.
  • Open only trustworthy e-mails from known and expected senders. If an e-mail seems suspicious, it is risky to open it and to work with the attachments and links.

Internet

  • You should only visit known and trustworthy websites on the Internet.
  • Avoid downloading unknown files from the Internet to your computer. They can conceal dangerous programmes and viruses.
  • If the login screen for your direct banking products seems suspicious in any way, do not log in. Instead, contact the Client line.
  • Be especially cautious when using open wireless networks (use only trustworthy Wi-Fi connections).

Mobile applications

  • You should only install applications from official application stores to your mobile phones.

Viruses

  • Perform regular scans using an anti-virus program. You should update the program regularly. We recommend using up-to-date versions of anti-virus programs that also include malware detectors. We also recommend using a firewall on your computer.
  • Even smartphones and tablets should be provided with anti-virus protection.

Operating system, web browser

  • Update your computer’s operating systems with security patches or by using update packages issued by the manufacturer.
  • You should also update your programs regularly; it is especially important to update your web browser and its plugins (e.g. Flash Player).
  • For smartphones and tablets, we also recommend using the current versions of firmware officially offered by the manufacturer for the device.

You should check your account balances and transactions regularly – for example, by SMS messages or e-mails that are sent automatically and which include the appropriate content.