You Are In

  • Business Insights
  • Solutions & Products
  • Digital Banking
  • Promotions
  • Help & Support
  • Quicklinks
Solutions & Products
  • Solutions
  • Deposits & Investments
  • Cards
  • Financing
  • Trade Finance
  • Cash Management
  • Treasury
  • Insurance / Takaful
  • More Services
Digital Banking

Preventing Fraud

Feel safe knowing how we work with you to prevent fraud and identity theft. We take that extra initiative to protect you as well as inform you on how to stay safe online. 

Learn More About Types of Fraud

Malware stands for Malicious Software. It can be viruses, trojans, and spyware to "PC Optimization" programs that harm your electronic devices.

Phishing is a type of identity theft where criminals blast emails to a mass audience in their malicious attempt to bait you into fake websites.


You'll then be asked to disclose confidential financial and personal information, passwords, credit card numbers along with any other highly confidential questions.

You may receive an SMS or a call requesting you to call a given number to confirm a transaction involving your's account information or disclose the one-time password (OTP) that you have received via SMS.

For fraudsters, transferring stolen funds directly into their accounts would make their whereabouts and activities be easily traced by law enforcement agencies. In efforts to stay under the radar, money mules are recruited or used to help facilitate the movement of funds to the criminals. In other words, money mules are used specifically to receive and transfer out stolen money.


Fraudsters will try to recruit customer to use their personal banking account as intermediary account by promising them rewards. Recruitment will normally be promoted via social media, chat sessions or even newspaper ads offering work-from-home job offers.

Get Started to Protect Yourself

Avoid accessing your bank account with public computers or WiFi

Always use secure networks. 

Install anti-virus and anti-malware

Protect your computer/mobile devices from virus and malware by installing anti-virus and anti-malware software. To maximize your protection, update them regularly to make sure you always have the latest virus definition.

Do access to BizChannel@CIMB via URL

Never access the BizChannel@CIMB website from attachments or website links in any email.

Never disclose your user ID, password or OTP to anyone, not even someone claiming to be from the bank or police

Memorise your password and do not write it down. Always remember to use a combination of letters, numbers & special characters in your password.

Do log out when you have completed your banking transaction

Report any unusual transactions in your statement immediately.

Install a personal firewall

Firewall software and/or hardware helps provide a protective shield between your computer/mobile devices and the Internet. This barrier can help prevent unauthorized people gaining access to your computer/mobile devices, reading information from it or placing viruses on it while you are connected to the Internet.

Install anti-spyware software

Spyware is a term for hidden programs on your computer/mobile devices that tracks what you do on your computer/mobile devices. Spyware is often bundled together with file sharing, email virus checking or browser accelerator programs, and it is installed on your computer/mobile devices without your knowledge to intercept information about you and your computer/mobile devices.


The type of information gathered can include personal Internet usage, and in some instances, confidential data such as passwords. You can download and run a specialist program designed to help identify and remove threats from spyware. Like an anti-virus program, it also needs to be regularly updated in order to recognize the latest threats.

More Tips

Avoid running programs or opening email attachments from any unknown or untrusted source

You should not install software or download any files (e.g. programmes, games, screensavers) from websites that you aren't completely sure about. You should also scan all email attachments for viruses and avoid opening any from people or organisations that you do not know or trust. However, some virus may forward infected email to everyone in an address book. Therefore, you can also get an infected attachment from someone you know. If you are unsure about the contents in the attachment, do not open it.


Important note: CIMB or BizChannel@CIMB will never send you an email asking you to reconfirm or revalidate your Online Banking information via email or any links from an email. If you have received this sort of email, please contact us immediately at

Be cautious when using public or shared computers/networks

If you access your accounts using a computer in a cyber café, a library or your workplace, try to ensure the computer has the latest anti-virus, firewall, anti-spyware and browser software installed. Although Wi-Fi is a convenient way for you to go to the Internet, it is not advisable to access your account via Wi-Fi connection, especially in public places like airports, hotels or shopping malls.

Avoid rooting or jailbreaking your mobile devices

It is not advisable to use BizChannel@CIMB App on a rooted or jailbroken device as they are more vulnerable to fraudulent attacks. A rooted or jailbroken device have minimal security, making it easier for fraudster to gain access to your personal details and other information stored or transmitted through your device and might result in illegally using it to perform transactions such as funds transfer.

Prepare payments early

This is to allow adequate time to verify payments. For bulk payments, download your transaction details into a report to match and verify the transaction details against your source of information.


Verify uploaded files immediately

Once you uploaded a file, always verify the details of the file immediately. Click on the hyperlink of the uploaded file name to verify BEFORE confirming the payments.


Always validate your transactions*

Ensure the details of the payment instructions, such as Beneficiary Account Number are correct before submitting for approval.

*Please note that receiving bank does not validate the beneficiary account number and name for Interbank GIRO (IBG) and Payroll payments.