MySMEBank Alert Notice

Heading

Alert Notices

Phishing Phishing is the attempt to obtain sensitive information of an individual or organization (“the Victim”) by fraudsters, often for malicious reasons. Such sensitive information includes usernames, passwords and other relevant details of the individual and organization. Phishing is typically committed by fraudsters by disguising as a trustworthy entity (“the Trustworthy Entity”) via several means including email, short messaging services (SMS) or phone call.

Email Scam

Email scam is the forgery of an email (title and/or content) so that the message appears to have originated from the legitimate source i.e. the Trustworthy Entity other than the actual source i.e. the fraudsters. Email scam may contain a link, once opened by the Victim may result to the disclosure of the Victim’s account information (including user name and password) to the fraudsters.

Please note that SME Bank will only send email to you using SME Bank’s official email address, which will be notified by SME Bank from time to time at its website i.e. www.smebank.com.my. SME Bank will never request you to provide the details of your MySMEBank User ID or your Online Application Password in any email to be sent by SME Bank to you.

In the event you receive any email claiming from SME Bank and you have been requested by such email to provide the details of your MySMEBank User ID or your Online Application Password, you may fall victim to email scam whereby in such case, please ignore, delete and do not reply to or act upon the said email.  You also are required to lodge a report or complaint to SME Bank through here.

Similarly, if you have any suspicion as to any potential email scam, you may contact SME Bank for further clarification or confirmation through here.

Short Messaging Services (SMS) Scam

SMS scam usually involves the fraudsters claiming themselves as representative of the Trustworthy Entity informing the Victim via SMS of a fake problem that need urgent and immediate attention by the Victim. SMS scam typically comes with a phone number or a link which will eventually require the Victim’s account information (including user name and password) in order to solve the alleged problem.

Please note that SME Bank will send SMS to you in respect of MySMEBank ONLY in the following circumstances:

  • one time password (OTP) for verification purposes in relation to  your first (1st) time registration as the user of MySMEBank;
  • one time password (OTP) for verification purposes in relation to the retrieval of your MySMEBank User ID and the reset of your Online Application Password used by you in relation to the account maintained by you with SME Bank via MySMEBank; and
  • any other circumstances which will be notified by SME Bank from time to time at its website i.e. www.smebank.com.my.

Further, please note that in sending out the SMS in the circumstances mentioned above, SME Bank will never request you to provide the details of your MySMEBank User ID or your Online Application Password.

In the event you receive any SMS claiming from SME Bank in the circumstances other than those listed above and you have been requested by such SMS to provide the details of your MySMEBank User ID or your Online Application Password, you may fall victim to SMS scam whereby in such case, please ignore, delete and do not reply to or act upon the said SMS.  You also are required to lodge a report or complaint to SME Bank through here.

Similarly, if you have any suspicion as to any potential SMS scam, you may contact SME Bank for further clarification or confirmation through here.

Phone Scam

Phone scam usually involves the fraudsters deceiving the Victims into believing that they are speaking to a member of the Trustworthy Entity or a representative of the Trustworthy Entity. These fraudsters aim to get the Victim’s information (personal, financial or any other relevant information) using various tricks which includes convincing the Victims that they have been a victim of fraud or there is a problem with the Victim’s account.

Please note that SME Bank will never request you to provide the details of your MySMEBank User ID or your Online Application Password in any phone calls made to you by SME Bank’s representatives.

Should you receive a phone call from SME Bank or from any other person impersonating himself/herself as a representative of SME Bank, you should never share the details of your MySMEBank User ID or your Online Application Password with such caller.

If you have any suspicion as to any potential phone scam, or you have become victim of a phone scam, please lodge a report or complaint to SME Bank through here.

Malware

Malware or also known as “malicious software” comes in various forms such as viruses, Trojans, spyware or any type of malicious code that infiltrates a computer. These malicious software were specifically written and designed to gain access or damage a computer with the intent of doing harm to the Victim, his/her/its data, devices without the Victim’s knowledge. Malware could affect a computer or any other devices mostly by downloading malicious software or completely by accident.

Please be aware that MySMEBank is only accessible via its online website at www.smebank.com.my. There is no downloading involved throughout the registration as well as the use of MySMEBank.

Your computer or devices may be at risk of malware infiltration under the following circumstances:

  • Outdated version of browser or software;
  • Prompt installation of unknown software without checking;
  • Automatic download or installation;
  • Downloading simple image, video or audio file with malicious program;
  • Downloading software from unknown resources;
  • No antivirus/antimalware program installed;
  • No observation made on any malicious activities in download files and active files;
  • No precautions taken to prevent malware; and
  • Opening email and other messaging attachments from unknown people or organizations.

You are advised to take the necessary precautions to prevent any malware infiltration to your computer or devices.

If you have any suspicion as to any potential exposure of your computer or devices to malware, which may compromise the details of your MySMEBank User ID or your Online Application Password, please lodge a report or complaint to SME Bank through here.

Others

SME Bank will notify you from time to time on any other existing or possible security threats in relation to your MySMEBank User ID or Online Application Password at its website i.e. www.smebank.com.my

What should you do?

Should you believe that you have been a victim of phishing via an email scam, SMS scam, phone scam, through exposure to malware or any other form of phishing in relation to your account maintained by you with SME Bank via MySMEBank, please lodge a report or complaints to SME Bank. You may write in, e-mail or call the Customer Care Centre at the following address and contact number:

Customer Care Centre : 03-2603 7700
Fax : 03-2694 7834
E-mail :customercare@SMEBank.com.my