Security

1. Use a unique password: Your myAncoria password should be exclusive to your bank account and never reused for other websites, emails, or services.
2. Create a strong combination: Avoid easily guessable information such as names, birthdays, or common words. Strengthen your password by combining upper- and lower-case letters, numbers, and symbols.
3. Keep your security details private: Never share your passwords, PINs, or One-Time Passwords (OTPs) with anyone—including Ancoria Bank. We will never ask you to disclose your security credentials.

Social engineering is a tactic where attackers exploit human trust and psychology—rather than technical hacking—to trick you into sharing sensitive details or taking actions that compromise your security. Attackers often impersonate trusted parties, such as bank representatives or technical support personnel, to steal email passwords, online banking credentials, and personal data.

Red Flags to Watch For:

• High Urgency: Requests demanding immediate action, rapid fund transfers, or threatening severe consequences if you hesitate.

• Unsolicited Requests: Unexpected calls, texts, or emails asking for personal credentials, passwords, or One-Time Passwords (OTPs).

• Too-Good-To-Be-True Offers: Unrealistic prizes, high-return investment claims, or unexpected monetary offers.

How to Protect Yourself:

• • Verify unexpected requests: If a friend or family member asks for urgent funds, call them directly on a trusted number to confirm.

  • Contact us independently: Always confirm suspicious banking requests by reaching out directly through our official channels.

Fraudsters use deceptive emails and fake websites to trick you into revealing sensitive personal and financial details. For instance, you might receive an email designed to look like an official communication from Ancoria Bank, directing you to a fake login page that mirrors myAncoria. If you attempt to log in, attackers can capture your credentials.

Warning Signs of Phishing:

• High Urgency: Messages threatening account suspension or demanding immediate action.

• Suspicious Elements: Poor spelling, unusual formatting, or unexpected file attachments.

• Unfamiliar Links: Links that appear legitimate on the surface but direct you to an unofficial address when hovered over.

Best Practices & Tips:

• Never click email links: Avoid using links within emails to access online banking. Instead, open a new browser window and type https://my.ancoriabank.com directly into the address bar.

• Verify before acting: If you are unsure whether an email is genuine, contact us directly before taking any action or clicking any links.

• Report suspicious emails: Forward any suspicious emails claiming to be from Ancoria Bank to info@ancoriabank.com.

Social Engineering – Smishing (SMS Messages)

Smishing is SMS-based fraud where cybercriminals send deceptive text messages masquerading as your bank or another trusted organization. These messages often prompt you to click a link, verify an account, or share personal details.

Warning Signs of Smishing:

• Links in text messages: Messages containing links that urge you to log in, update details, or track a package.

• Urgent warnings: Claims that your account or debit card has been blocked, suspended, or flagged for fraudulent activity.

• Requests for sensitive data: Texts asking for passwords, PINs, or One-Time Passwords (OTPs).

Important Protection Rule:

• Ancoria Bank will never send text messages containing links. If you receive an SMS claiming to be from us that includes a link, do not click it, it is fraudulent.

• Never reply with personal details: Avoid sharing passwords, card information, or OTPs via SMS.

• Verify directly: If you receive an unexpected message regarding your account, contact us directly through official channels to verify its legitimacy.

Vishing (voice phishing) occurs when a fraudster calls you directly, posing as a bank employee, police officer, or representative from a trusted business. Their goal is to manipulate you into revealing confidential information or transferring funds under the guise of an “urgent” security issue.

Warning Signs of Vishing:

• Requests for sensitive credentials: The caller asks for your passwords, card PIN, online banking credentials, or One-Time Passwords (OTPs).

• Pressure tactics: Threats of legal action, account suspension, or immediate financial loss if you do not act right away.

• Caller ID spoofing: The incoming phone number may appear to match Ancoria Bank’s official phone number on your screen.

Important Protection Rule:

• Ancoria Bank will never call you to ask for your passwords, PINs, or OTPs. If a caller asks for these, hang up immediately.

• Hang up and call back: If you feel pressured or unsure about the caller’s identity, disconnect the call. Wait a few minutes (or use a different phone) and call back directly using our official phone number listed on our website.

• Never transfer funds on demand: We will never ask you to transfer money to a “safe account” or “protection account.”

Malicious software such as a virus or trojan, that installs on your computer without your knowledge, attempting to steal personal information such as your online banking login details.

Tip: Protect your computer by installing security software, such as an antivirus. Always keep it up to date and run regular scans and system updates.

A fraud that occurs when a business receives a fraudulent email claiming to be from an existing supplier, advising of new bank details for payment. This information is usually associated with an unpaid invoice that the fraudster may have found on the victim’s computer or it was created from scratch with characteristics collected from a real invoice.

Tips:

• Be careful with changes. Always verify any request to change account details by calling the supplier directly using the contact details you already have verified, not the ones in the request. If your supplier is from one country but you receive a change of account to another country be very suspicious. Something is definitely not right.
• Treat all requests as suspicious. Be wary of requests from suppliers to change contact details, like phone numbers.
• Don’t rush. Don’t change any details until you’re sure the request is genuine, even if it seems urgent.
• Confirm payments. After making a payment, check with the recipient to make sure they received it.

The One Time Password (OTP) is the unique code that is sent to your mobile and acts as a once-off authorization password when performing particular transactions on myAncoria, such as funds transfers or online registration. OTP fraud involves scammers tricking you into revealing your unique code by contacting you by phone or sending you an SMS, claiming that they represent the Bank.

Tips:

• Never share your OTP with anyone. Just like with passwords, the Bank will never ask for your OTP.
• Double-check before entering the OTP by examining the website address (for web) or the legitimacy of the app (for app on your mobile). myAncoria on the web is: https://my.ancoriabank.com/ and the official myAncoria app can be downloaded from Google Play (Android) or Apple Store (iOS) or Huawei App Gallery only.
• Report any suspicious activity to the Bank.

A romance scam is a type of fraud where criminals create fake profiles on dating websites, social media, or other platforms, to establish romantic relationships with victims. Once trust and emotional connections are built, the scammer manipulates the victim into sending money or sharing personal information.

Common signs of romance scammers:

• They express strong, often intimate emotions.
• They claim to need money for emergencies, such as hospital bills, to start-up a new business or travel to visit you.
• They try to convince you to continue communicating through personal email or instant messaging.
• They plan to visit you, but always postpone because of some “emergency”.