Security of online payments

Ukrainian banks offer instant virtual card issuing, so this will not be a problem. Top up your card when you plan to make online payments – transfer the required amount just before making a purchase.

How to check it? A lock should be next to the website address , and the address itself should start with 5 letters “https://“. The most crucial letter here is “S“, which means “secure”, i.e. a secure connection. Depending on your computer’s or smartphone’s settings, you may see either a padlock or “https://“. Оn a secure site one of those things will be for sure.

Modern browsers can identify untrustworthy sites and warn users when payment authorization is requested.

It will be helpful to check suspicious sites through the Stop Fraud services from the Cyber Police and the EMA “blacklist”.

Set a limit for online payments. The amount should be calculated based on your own number of online payments.

Read the terms and conditions you agree to when making a payment. They may include repeated charges to your card, even if it’s not obvious at the time of purchase.

Enable notification of payment card transactions via SMS and push notifications in the application on your smartphone.

Attackers create copies of official websites to fraudulently obtain payment data from users’ bank cards. Pay attention to the website address, not just its appearance.

To pay online, you need to enter your card number, expiration date, and CVV2 code (three digits on the back of the card). Some stores, primarily foreign ones, may ask for the cardholder’s name. All other information, such as date of birth or mother’s maiden name, etc., is not required for payment. If the site asks for them, you’re dealing with fraudsters.

We also want to remind you that the CVV2 code should be indicated only in online payment forms. Do not disclose it to anyone, not even a bank or security officer.

The PIN is used in ATMs. For online payments, you only need:

• card number;
• expiration date;
• CVV2 code (three digits on the back).

If the website supports 3D-Secure technology, you need a one-time password sent via SMS, Viber, or your bank’s mobile application.

Occasionally, your last name, first name, and patronymic are required.

The card expiration date, CVV2 or CVC2 codes on the back, and one-time passwords from bank messages are never required to credit funds to your account. Keep them confidential.

The mobile number to which the cards are linked should be removed from social networks. Do not use it in ads under any circumstances. The fewer people know it, the better.

Link the number to your name or transfer it to a contract service. Prohibit remote SIM card replacement. Register an online account on the mobile operator’s website to manage your number remotely.