Security of online business | NKBM

General rules:

• Turn off the computer you use for online banking when you are not using it (when you're away from the office or on vacation).
• Do not open emails or email attachments sent by unknown senders; we also advise to exercise care when opening emails and attachments received from known senders, as computer viruses commonly spread that way as well.
• Do not install any software from unknown sources on your computer.
• Never visit any websites by clicking a link in the email; always type the website URL into the address bar in your browser.
• Choose passwords that are difficult to guess, and never share your password with anyone. Keep your passwords at a safe location or remember them, and make sure to change them regularly.
• Make sure that the latest security patches, firewalls and anti-virus software is installed on your computer and run regular anti-virus scans.
• Use the latest version of your preferred web browser and operating system and update both regularly.

Rules for online banking

• If you don't know the person who introduces himself/herself as the client support officer, or if his/her identity is not made known otherwise, make sure to ask about his/her identity.
• The Bank will never request of you to allow remote access to your computer.
• Never send any sensitive data (username, password, etc.) by email.
• Communicate with the Bank only through the Messages feature in your online banking profile.
• Regularly check your account balance and turnover.
• Remember your username and password and do not write them down.
• If you receive an email from the Bank requesting sensitive data, call or visit the Bank to check whether the message is authentic.

The new Payment Services, Services of Issuing Electronic Money and Payment Systems Act('ZPlaSSIED') came into force on 22 February 2018. The law transposes into Slovenian national law the European Payment Services Directive ('PSD2'). According to the new law:

• Users get a one-stop-shop solution (online portal, single online bank and application)to manage transaction accounts they keep with different Slovenian banks and savings banks;
• You can check all your accounts and make payments from a single location;
• With certain service providers you can also make a payment directly from your account instead of using your credit or debit card, cash on delivery, or other means of payment;
• You can give registered users your explicit permit and consent to use or submit to them your personal authentication elements for online and mobile banking (username, PIN, SecurID one-time password, (SMS) one-time password for additional verification of payments):
• When using these services, be especially cautious when submitting your authentication elements to a payment service provider other than a bank. It is very important to check whether the service provider is registered before you submit your data. The list of registered payment service providers will be published on the Bank of Slovenia website.

How to prevent phishing?

Phishing is a form fraud in which attackers steal for data and use it to access online services in your name and, in certain cases, even to steal your money. The most common scenario is when you receive an email from an attacker to visit a fake bank or online banking website, often under a false pretence of having to check your data or scoring additional benefits. The email will request of you to log in and 'check your data'. After you enter your data into this fake, phishing website, they are transferred to the attacker.

How to avoid fraud?

• Never reply to emails requesting of you to provide personal and financial data. Never click on links to these types of websites. No company will ever send this kind of request by email or over the internet.
• When visiting websites that have anything to do with money or finance, always type the URL directly into the address bar.
• Never send personal or financial data by email, as this type of communication is never completely secure.
• Regularly check your account statements and turnover, and check the transactions made with your cards.
• Always install the latest patches and updates (npr. windows update) and keep your anti-virus software up to date..

If you suspect any fraud, please contact the online and mobile banking administrators. The administrators are available Monday through Friday from 7.00 until 20.00.