#onlinebanking comes with a host of undeniable advantages and benefits that have made everyday life easier over time. But let’s not forget about staying safe online. That’s why we’ve put together a list of good practices to help keep your data and money secure.

1. Be extra careful with the emails you receive 📧



🔸 Never open email attachments from unknown sources

We all receive plenty of emails every day — from friends, acquaintances or various companies. A good practice is to filter out messages that have an attachment and come from people or businesses you’ve never heard of. Most cyber‑viruses spread as attachments to emails received from unknown sources.

So if a message lands in your inbox urging you to open an attachment as soon as possible because it’s “urgent,” and you don’t know the sender, the best thing to do is delete it — and remove it from Trash as well.

🔸 A suspicious email

A key point when dealing with us: don’t open emails that look like they’re from BT, but aren’t. If something appears in your inbox and raises even the slightest suspicion, it’s best to contact us. Whether you do that via our website, by writing to contact@btrl.ro or by calling 0264 30 80 28, until you manage to reach us do not, under any circumstances, open the attachment or click the links in such an email. You’ll see why below 😊.

🔸 Phishing – stealing by email

Phishing is a form of identity theft that tries to obtain personal or confidential information from a company’s customers. Malicious actors can then use that information illegally to make transactions right from your account.

How does phishing work?

Think of an electronic message sent to hundreds of thousands of recipients (yes, literally) claiming to be from a legitimate source — Banca Transilvania in our case. Often the subject line is designed to grab your attention, for example “Important message – Update your personal data”.

In most cases, the content of a phishing message is worded to pressure you into acting, such as: “Failure to confirm your online account details will result in permanent suspension.”

Most often, you’ll be asked to enter confidential data via a link provided in the message. That link will take you to a fake website that closely mimics the original page — in our case, the Banca Transilvania site or the e‑banking product you use.

If you choose to enter and submit your personal details on such a fake site, bad actors gain access to your information and can use it to carry out operations on your bank account.

❗ Remember: We will never send you messages via electronic channels such as email, social media or to your phone number that include links to sites where you’re asked to enter your personal identity details, account information, card number, expiry date, PIN or data about other banking products and services you hold. The exception is the SMS we send to your phone number for accessing the BT Visual Help app.

2. Eliminate vulnerabilities on your devices 💻



The most effective way to keep your personal devices safe is to update them regularly. You know those pop‑ups from the operating system saying “software updates are available”? The first instinct is often to hit “remind me later” because it takes time, right?

Unfortunately, that’s not the best decision, because you’re leaving the door open to attackers who could access your private data, putting you at risk of identity theft or losing money from your account. Even if it doesn’t seem crucial at the time, these updates are vital because they include fixes for potential security vulnerabilities — in both operating systems and browsers (the main weak points attackers look for when trying to compromise your computer).

Also install a reputable anti‑malware program to protect your computer and keep it updated whenever needed. Such software will help keep your computer safe at all times, protecting both your files and your personal data.

Some anti‑malware products also include special features designed to protect you when shopping online or accessing banking sites. Choose one that fits your needs and consider it a long‑term investment in your security.

3. Always check the URL 🔒



When you visit a site that asks you to enter confidential information — even just to log in — check the page’s URL carefully so it matches the site you intended to access. If the URL contains random strings of numbers or looks suspicious in any way, do not enter your information. For extra safety, type the URL yourself, especially when accessing your bank accounts.

4. Take care with your phone 📱



Avoid using devices whose operating system has been modified (rooted or jailbroken from the official version), as this changes — and in some cases even removes — the security measures implemented by the manufacturer, exposing you to additional risks. As much as possible, keep your device’s operating system up to date with the latest security patches and upgrades. We also recommend using an antivirus app. You can never be too careful, so make use of every method available to you.

5. Online payments 🛒



🔸 Look for HTTPS

Make sure that when you make a payment or access a site where you need to enter personal login details, the connection is encrypted. You can easily check this in the URL. If it starts with “https” and you see a closed padlock, the connection is verified, so you’re on a secure link. To be certain, click the padlock and check the site’s SSL certificate. You’ll see details such as who the certificate was issued to, the period it was issued for, who issued it and how long it’s valid.

🔸 Use your own internet connection

Whenever possible, use your own internet connection — whether mobile data or Wi‑Fi — when accessing your bank account, using banking apps or shopping online. And to make sure nobody else can access your connection, it’s best to set a complex Wi‑Fi password known only to you.

Public Wi‑Fi makes things more complicated, because there are real risks such as third parties intercepting your traffic and easily stealing confidential data like your credentials, instant messages and emails.

Even if it seems a bit more work at first, secure your accounts with strong passwords — and never use the same password for all accounts. We know a single password can feel convenient, but when it comes to your money, it pays to be cautious.

🔸 Check unfamiliar websites

Better safe than sorry. If you’ve found a new site with interesting products and you’re thinking about buying, but you’re unsure because it’s your first time with that online store, here are two options to keep things 100% safe.

First, choose cash on delivery so you pay when the parcel arrives and you can check it. If that’s not available, the second option is to check the site. In other words, type “WhoIs IP service” into a search engine and do a quick check. All you need to do is copy the online store’s URL and run it through such a tool. You’ll quickly find details such as the IP address and its location, how long the site has been up, and the company behind it — helping you make a much better‑informed decision.

6. Extra security 🔔



For added security, we also recommend the SMS Alert service. This lets you monitor activity on your bank account 24/7, right on your mobile phone. You can see all transactions made with your BT cards in real time on the same phone number, giving you full control over what’s happening.

We want you to stay safe at all times. Please report any issues affecting the security of your information as soon as possible by calling *8028 or 0264-308028 or by sending us an email at contact@btrl.ro.

Editor: Mihaela Ban, Communication & PR Officer, Banca Transilvania