Useful Safety Information

Alpha Bank’s secure environment

When you want to access the Alpha Bank website, you must only do it by actually typing the address of the official website: www.alphabank.com.cy. You must type the address directly into your browser’s address bar and not use links you find on other websites.

It is important that you do this on currently used browsers (e.g. Chrome, Firefox, Safari, Edge), and their latest versions at that. Older versions may have a slower response, not be compatible or even put your computer’s security at risk.

To make sure you are in a secure environment, check that a lock icon appears at the beginning of the address and that the URL. For a security boost, you can also check your browser settings:

Microsoft Edge

• Click on the lock icon at the beginning of your address at the top of your Microsoft Edge window.
• In the appearing dialogue box, choose “Connection is secure” and click on the certificate icon on the right.
• Make sure that the “Common Name (CN)” field has been populated with the following text: alphabank.com.cy.
• Make sure that the “Organization (O)” field has been populated with the text ‘ALPHA BANK CYPRUS LTD’

Google Chrome

• Click on the lock icon at the beginning of your address at the top of your Google Chrome window.
• In the appearing dialogue box, choose “Connection is secure”.
• Make sure the “Security” field has been populated with the text “aeb.alphabank.com.cy’
• Make sure that the “Certificate is valid” field has been populated with the text ‘ALPHA BANK CYPRUS LTD’

Mozilla Firefox

• Click on the lock icon at the beginning of your address at the top of your Mozilla Firefox window.
• Make sure that the appearing dialogue box reads “Site information for secure.alpha.gr” and “‘ALPHA BANK CYPRUS LTD’”.

Avoid public access networks

When you carry out transactions, make sure to:

• Log into secure corporate or private networks as opposed to public access networks.
• Use your own devices.

Do not answer messages you think are unusual

You might receive an email or SMS that appears to be from Alpha Bank. Such messages or SMS texts usually include a link they prompt you to use, so that scammers may steal your credentials. Under no circumstances should you answer such messages or follow the links in them. On the contrary, you should ignore and delete them.

In case you suspect or realise any physical or electronic theft attempt of your security codes:

• Inactivate your subscription by calling us on 8000-3333 (free local calls) or at +357 22 888333 (international calls), everyday, 8:00 a.m.- 17:00 p.m.
• Contact immediately Alpha Bank by e-mail at: callcenter@alphabank.com.cy or by phone at the above phone numbers

Your devices (computer, mobile phone, tablet) are essential tools for carrying out transactions. This is why it is common for scammers to target these devices to steal your credentials, documents etc.

Scroll down for some practical advice on boosting security on your computer, mobile phone and tablet to protect yourself against such malicious actions.

Use protection software

Operating systems, such as Windows, usually come with security mechanisms for your protection. To boost your security as much as possible, we recommend downloading and installing more protection apps, such as firewall, antivirus and antispyware software etc.

In any case, make sure that even the pre-installed mechanisms that come with your OS are activated and in working order.

Download the latest updates

Your applications and software are constantly updated to offer you new functionalities and better security. It is crucial to check that you always have the latest version of your software, including your browser, antivirus, Viber etc., as well as that you have activated and installed all the security updates regularly issued by the developers. This is how you can make sure your operating system and applications function properly and securely.

Be mindful of your devices’ operation

If you notice a sudden change in how your device operates, do not ignore this, as it may be a sign it has been infected with a virus.

Use some security software, such as your antivirus, to diagnose your device, or take it to an authorised technician.

Delete your temporary internet files

Your temporary internet files record information that may be useful to scammers. Therefore, it is advisable to delete these files every time you log out of Alpha 360.

To do this, navigate to your browser settings, go to History and delete the relevant files. 

Only trust applications provided by official app stores

Your mobile phone is as vulnerable to viruses as your other devices. To protect it, we recommend downloading your apps only from official sellers based on your phone’s operating system(Google Play, App Store, Huawei App Gallery).




 

Alpha Bank takes constant care to ensure the maximum possible security of its electronic services.

We are taking care of your transactions’security

At Alpha Bank we apply modern methods that safeguard your e-Banking transactions, protect your data and shield you from potential threats.

Controlled access

The Bank has in place specialized security systems to control and record all accesses and prevent any unauthorized action in its systems.

Encryption

Each transaction that is carried out, the data exchanged is encrypted using TLS encryption.

Personal security codes

We apply automatic locking of your subscription in case of five continuous incorrect login attempts as well as automatic logout from Alpha 360 (Web, Mobile, APIs) after 10 minutes of inactivity.

You can recover your User name and Password by contacting us on 8000-3333 (free local calls) or at +357 22 888333 (international calls), or on callcenter@alphabank.com.cy (email). All support channels are available between Monday-Thursday from 7:30am to 3:00pm and from 7:30am to 2:30pm on Friday (except weekends and Bank holidays). Alternatively, you can visit any Alpha Bank Branch to obtain a new Password.

Strong Customer Authentication

Alpha Bank has applied a series of alternative authentication methods for transactions that are carried out via e-Banking or e-Commerce, in line with the European Anti-Fraud Directive (PSD2/Strong Customer Authentication-SCA), to further enhance your safety.

Your identity is being verified by using two (2) or more unique data, that only you remember or own, such as:

• The password you use to login to Alpha 360 or the Alpha SecureCode code you receive via Viber/SMS.
• Your Mobile phone.
• Biometric identifiers, such as your fingerprint or your facial features.

Controlled access (Firewall), Encryption, and data transfer privacy

We have specialized security systems to control and record all access and prevent any unauthorized activity in our systems, while each transaction is encrypted (TLS) of the data that are exchanged.

Automatic sign off

For security reasons, there is a 10 minutes idle time ("Session Timeout") in order to complete your actions, after which the connection is automatically terminated by the system. As part of the consent (approval) process for specific transaction/ instruction/ action types, Alpha 360 will send push notifications, QR codes and SMS/Viber One Time Passwords (OTP) to you which have a predefined expiration time of 180 seconds. It will be impossible for the transaction/ instruction/ action to be executed/submitted to the Bank if you do not provide your response within this timeframe.

Upper transfer limit

For the safety of your transactions, we have set maximum daily limit on various transaction types.

Alpha Alerts Notification Service

Using the Alpha Alerts notification service, you receive notifications at any time, by SMS, of the transactions and other actions in your profile, which you carry out via the electronic services of Alpha Bank. Furthermore, you can be informed about your cards and accounts.

Learn more about the most common fraud tactics

Keeping yourself up to date with online scams and get protected

Each type of fraud is intended to steal personal data and passwords, such as Username, e-Banking passwords, additional passwords Alpha SecureCode, debit/credit card details and PINs, with the aim of accessing your bank accounts and cards. Find below the most common types of online scams and how to protect yourself:

Advertisements on the internet or social media

Online adds fraud for selling products, renting houses online, buying cars or for virtual jobs has recently become widespread. The prospective victim who has posted an ad on the internet or social media receives a phone call from an alleged interested party, who then asks him/her for personal e-Banking codes, the number and/or PIN of his cards and other relevant information in order, supposedly, to make a payment. By intercepting the victim's e-Banking codes, fraudsters manage to access their bank accounts and cards and carry out online fraud transactions.

 

Investment scams

When an investment comes with the promise of quick returns and zero risk, it is usually a scam. Scammers will try to convince you the investment is secure. It is advisable to seek impartial financial advice before you proceed to invest (Crypto, ForEx,etc) What is more, before you open an account on an online investment platform, you should confirm the platform is certified by the competent supervisory authority.
 

Phishing emails

Deceptive emails that are designed to deceive their recipients and disclose to fraudsters their personal and financial information or security codes. They usually copy the logo, features and style of the actual messages you receive from the Bank. They use terminology that gives the feeling of urgency and urge you to download an attached file or follow a link to your device.

Smishing (SMS Phishing)

Scammers try to obtain personal and financial information or security codes via SMS messages. They usually ask the prospective victims to follow a link or call a phone number to verify or, update their details. The link leads to a fake website and the phone number leads to the fraudster claiming to represent the legitimate business.

SIM Swapping

Perpetrators take advantage of the possibility of changing a SIM card and pretend to be either the SIM card holder or someone authorized by the legitimate subscriber, thus trying to deceive mobile operators and obtain a new card to replace the one that the legal holder has. Once the new card has been activated, the old one, which is in the possession of the legitimate subscriber, is disabled and so all services (calls, SMS, etc) are received on the device in the possession of the fraudsters, enabling them to carry out illegal activities without the advice of the legitimate subscribers (e.g. receiving calls and messages intended for them, intercepting disposable codes or security verification messages, etc).

Vishing (Voice Phishing)

It concerns a fraud telephone call, which intends to deceive the victim to disclose his personal and financial information or security codes or to transfer money to the fraudsters. A typical example is telephone communication to repair a computer software failure. Alleged IT company representatives are communicating with prospective victims and asking to gain remote access to their computer to correct an unstated failure. In this way they manage to extract the victim's e-Banking codes and transfer funds from their accounts.