Digital Risk Guidelines

1. 1

   Keep your email secure and never share your username, password, or one-time password (OTP) with anyone under any circumstances. Do not enter this information on social media or suspicious online forms.

2. 2

   Regularly check bank notifications, login attempts, and security alerts sent to your registered email address.

3. 3

   If you receive an OTP by email, SMS, or an application without initiating an action yourself, contact the bank immediately to have the activity reviewed and access blocked if necessary.

4. 4

   If you access your email or internet banking from a public computer or another person's device, always sign out and clear your session. Change your password if necessary.

5. 5

   Update the passwords for your internet banking, email, and social media accounts, and use different passwords for each service.

6. 6

   Install trusted antivirus software on your phone and computer and keep your operating system up to date.

7. 7

   Do not open suspicious links related to surveys, lotteries, promotions, deliveries, tax refunds, or similar offers.

8. 8

   Use only the bank's official website, applications, and official communication channels to access banking services.

9. 9

   If you suspect that malicious software may have been installed on your device, have the device inspected by a professional and update your sensitive information.

1. 1

   Immediately call the bank's customer service number at 1800-1646 to block Internet Banking and SocialPay access.

2. 2

   Contact the relevant law enforcement authorities if necessary.

3. 3

   Update your Internet Banking and Smart Bank usernames, passwords, and registered email address.

4. 4

   Review and remove unrecognized devices from your registered device list.

5. 5

   Disable online transactions for your payment cards.

6. 6

   If your social media account information has been compromised, update the registered information and security credentials.

• Contact your mobile network operator and deactivate your SIM card.

• Change the usernames and passwords used to access your social media accounts, email, and banking applications.

• Do not log in to, register, or save your banking credentials on another person's mobile device.

• If necessary, contact the bank and temporarily block your Internet Banking access.

• Configure appropriate authorization and approval controls for your organization's Internet Banking.

• Do not share Vasco or token devices with others or leave them unattended.

• If you use a 2FA application, do not allow others to access your mobile phone or email account.

• Do not share your Internet Banking username or password with others.

• When an employee with Internet Banking access leaves the organization or changes roles, contact the bank to revoke the relevant access and change passwords as necessary.

In the Smart Bank application or on the main egolomt.mn website, follow these steps:

1. Customer Profile
2. Access History
3. Tap the three-dot menu (⋯) next to the unrecognized device
4. Delete

Malware is related to the security and use of your own device rather than the bank's products or services. To reduce this risk, protect your devices and review the information, applications, and websites used on your computers, mobile phones, and other devices.

Information-stealing malware may obtain the following information:

• Usernames and passwords stored in your web browser.

• Login credentials and passwords for websites you use regularly.

• One-time passwords (OTP) and multi-factor authentication codes.

• Important information and files stored on your computers, mobile phones, and other devices.

• Verification codes received through email.

1. 1

   Identify the device that may be infected with malware.

2. 2

   Do not access Internet Banking or email from the suspicious device.

3. 3

   Install and use trusted antivirus software.

4. 4

   Use a legitimate and supported operating system.

5. 5

   Completely reinstall the operating system if necessary.

6. 6

   If reinstalling the operating system is not possible, remove all passwords stored in the web browser.

7. 7

   Remove unknown applications and browser extensions from your computer or mobile device.

8. 8

   Create a new email address if necessary.

9. 9

   Change all other passwords previously stored in the affected browser.

If you receive such a call or message, treat it as a potential scam and contact the bank using its official contact number.

Protect yourself from financial loss by never sharing sensitive card information with others or entering it on suspicious websites.

• Card Number
• Cardholder Name
• CVV Code
• Online Payment Code
• Expiration Date

Automatic charges may occur when you link your card to applications or websites without reviewing their service and payment terms.

• Before registering, carefully review the payment terms, including whether payments renew automatically and how to cancel the service.

• Choose trusted and official services and applications to reduce the risk of card and personal information being compromised.

• Remember that deleting an application does not automatically cancel a subscription. Cancel the subscription separately.

• Remember to cancel the service before the free trial period ends if you no longer wish to use it.

• When you are not making online purchases, disable online transactions for your card through Internet Banking.

• If unexpected recurring charges begin, submit a cancellation request immediately.

If your card is lost, stolen, or used for an unauthorized transaction, disable the card immediately.

1. Services
2. Card
3. My Cards
4. Card Details
5. Disable / Enable

• On Egolomt.mn
• In the Smart Bank Application

1. Services
2. Card
3. My Cards
4. Card Details
5. Enable or disable online transactions