At Mashreq, we take the security of your accounts very seriously. While we continuously upgrade our online security features to ensure you are always protected, it is also important you understand your role and obligations to ensure the safety of your information regarding online / mobile banking, ATMs, and Credit / Debit cards.

Guarding Yourself Against Phishing Emails We have noticed a recent rise in the number of Phishing emails claiming to be sent out by reputable financial institutions, including Mashreq. Phishing is an attempt by fraudsters to ‘fish’ out your banking details by using a web-page that usually looks very similar to the bank’s web page. You are then asked to provide sensitive financial information including online banking passwords that can then be used to tap into your accounts. Phishing emails typically claim that access to your account is blocked, or a wrongful credit has been done to your account, or that your account needs to be re-activated. They then ask you to sign on to internet banking to confirm your details. Mashreq will never contact you and seek your personal details such as account information, password etc at any time. Such information is only required for the normal Personal Internet Banking Sign On process.

Please do not to respond to or share any personal information by clicking on any of the links provided within such emails.

Please Take The Time To Find Out What You Can Do To Protect Yourself Against Online Risks If you receive an email requesting your Online Banking security details like PIN / Transfer Challenge Code, Password or Account Number, please do not respond or click on any link in the email. Mashreq will never send emails that ask for confidential information, other than the normal Online Banking sign on process. Whenever you use a link to access MashreqOnline, check for the web address (URL) it should always begin with https://banking.mashreqbank.com and should have a security padlock as shown below. Any phishing email will display the link as "www.mashreqbank.com", but after clicking the web address (URL) of the website that you are taken to will be totally different. On the Sign On page where you entre your User ID and Password please check the thawte certificate displayed on the right hand bottom below the virtual keyboard. Date displayed on this icon will always be current. This enables you to check the site's validity yourself. Always check a site's certificate before entering any sensitive information. Recommend that you type in the URL yourself whenever you access www.mashreqbank.com or bookmark / save the URL in your list of 'Favorites'. Delete suspicious e-mails without opening them. If you happen to open them, do not click any link or attachment they may contain. Regularly Sign On to your online accounts, so that you can identify any suspicious activity. What Are We Doing To Provide You A Secure Online Banking Environment Enhanced security features by introducing multi-level transaction limits initiated through online banking. Instant alerts on almost all financial transactions initiated through MashreqOnline sent to your registered mobile number on our records (Please make sure you keep your mobile number contact address updated by visiting any of our branches) Important:If you receive an email claiming to be from Mashreq asking for your financial / personal information, please let us know immediately by calling our 24-Hour Customer Service Centre on 19677 and forward the original email to reportphishing@mashreqbank.com General Online Security Tips Here are a few suggestions to further help you enjoy a secure online experience: • Act quickly if you suspect fraud. If you believe someone is trying to commit fraud by pretending to be your bank, notify the bank immediately. • Change your online banking password often. • Do not visit suspicious sites. If you suspect that a website is not what it claims to be, leave the site immediately. Do not follow any of the instructions it presents. • Make sure your home computer has the most current anti-virus software. Install a personal firewall to help prevent unauthorized access to your home computer. This is especially important if you connect to the Internet via broadband. • Monitor your transactions. Review your order confirmations, Credit Card and Bank statements as soon as you receive them to make sure you are being charged only for transactions that have taken place. Immediately report any irregularities to your bank. Other Resources: How to reduce the risk of online fraud (Microsoft) Evaluating Your Web Browser's Security Settings (US-CERT) Website safety reporting service like McAfee SiteAdvisor, WOT etc.