Online Banking allows customers to manage their accounts securely over the internet. It is important to only access banking websites by typing the URL directly and to watch for indicators that the site is secure like https and padlock icons. Banks use encryption, firewalls, and logging customers out after periods of inactivity to protect information. Customers should also use antivirus software, update their operating system regularly, and clear their cache/cookies after banking to enhance security. If suspicious activity is noticed, customers should contact the Canadian Anti-Fraud Centre or credit bureaus.
2. www.greenhectaresonline.com www.zephyrtraining.ca
info@greenhectaresonline.com info@zephyrtraining.ca
THESE MA LS A COPY
TERIA RE RIGHTED WITH A RIGHTS A RESERV THIS DOCUMENT MA NOT IN WHOLE OR IN PA BE COPIED, PHOTOCOPIED, REPRODUCED, OR
LL RE ED. Y RT
REDUCED TO A ELECTRONIC MEDIUM OR MA
NY CHINE-REA BLE FORM WITHOUT PRIOR CONSENT, IN WRITING, FROM Z R SOFTWA TRA
DA EPHY RE INING LTD. A GREEN HECTA
ND RES
CORP.
A SOFTWA COMPUTER, A PRODUCT NA MENTIONED A MA CTURER A PUBLISHER TRA
NY RE, ND MES RE NUFA ND DEMA A A USED ONLY FOR THE PURPOSE OF IDENTIFICA
RKS ND RE TION
Entrust is a registered trademark of Entrust, Inc.
Firefox is a registered trademark of Mozilla Corp.
INTERA is a registered trademark owned by Interac Inc.
C
Microsoft, Outlook, and Windows , are either registered trademarks or trademarks of Microsoft Corporation in the United States and/ other countries.
or
Safari, Mac OSX and Apple are trademarks of Apple Inc., registered in the U.S. and other countries.
VeriSign is a registered trade mark of VeriSign, Inc.
Wikipedia is a registered trademark of the Wikimedia Foundation, Inc.
3. What are Cookies?
“Cookies” are information that a
website puts on your hard disk so that
it can recall something about you at a
later time.
If you are going to Bank online, you
will need to enable Cookies.
4. S ecurity Tips
Important! Never send personal identification numbers or
confidential information in response to unsolicited email.
When you connect to the Internet, the Internet also connects back to
you. Even before you connect to a Bank's web site, someone out
there could potentially get access to your computer. A as you
lso,
surf the Internet, there is a trail of information left behind. This is
done through your computer’s ‘cache’ and ‘cookies’ mentioned later
in this workshop.
5. What Banks do for S ecurity
Banks:
• use 1 28-bit encryption which ensures that data passing between
your computer and their web server is secure.
• use digital certificates issued by trusted third party companies
• will log you out after approximately 1 0 minutes of inactivity.
• use firewalls to protect your account information.
•will NEV ask you for personal or account information through
ER
email. Email messages are normally not encrypted or secure –
you should not share sensitive information using email.
6. Encryption
Encryption is a technique used to help safeguard private
information while it is sent via the Internet. To recognize that
your transmission is encrypted, some browsers will display a
small icon on your screen that looks like a padlock or a key,
and the URL starts with "https" instead of "http" (the extra "s").
Most banks and online purchasing sites will use 1 28-bit
encryption, which is a very high form of encryption. In order to
use Online Banking, you must have a 1 28-bit encryption level
browser.
7. What You S hould do for
S ecurity
• V erify your bank’s web address!
• Keep your virus software up-to-date!
• A ntivirus updates come out approximately once per week.
• Protect your computer by disabling File Sharing in Windows
products.
• Update your operating system, including security patches on a
regular basis.
• A lways log off the site when you have completed your banking.
• Clear your cache! (we’ll discuss this later!)
8. Logging in!
Navigate to Log In or Sign In screen.
Enter in Bank Card number. (Y may be
ou
directed to another screen after entering in this
information.)
Enter in Password – whoa – let’s move to the
next slide for this one!!
9. All about Passwords!
For your first time on a bank site, you will be asked
a number of security questions. These can be text-
based or graphical or a combination of both.
Y Bank will also provide you with a temporary
our
password and when you first log in. Y will be
ou
prompted to change this to your own password.
10. Account Information
A each banking site there should be a main page
t
that provides you information on your accounts
once you’ve signed in. It may be called: Financial
Summary, V Aiew ccounts, My A ccounts, etc.
These are all your account details: typically
chequing accounts, savings accounts, mortgages,
line of credit, credit card.
11. Add Billers/ Pay Bills
1. The first step to paying bills online is to add billers to your list.
2. When you enter the name of the company be certain to choose the
correct account you will be paying.
3. Enter in your account number and add the biller to your list of billers.
This list will remain until you delete them from your list.
4. To pay a bill, choose the biller from your list, enter in the payment
amount, the date you want the payment to be processed and the
account you want the payment to come from.
5. Y will be prompted to confirm your selections and will be provided a
ou
reference number of your transactions, which you should record.
12. Transfer Funds from One
Account to Another
Within the same bank, you can easily transfer funds from
one account to another.
Select the account that you want the funds to be
transferred from and the account that should receive the
funds and the amount to transfer.
For most Banks this transfer happens immediately unless
you choose to have recurring transfers that happen at
regular intervals that you set.
13. Email/ Interac Transfers
®
Please talk to your Bank, or read through
the Disclosure Statements carefully before
proceeding to use these features.
This workshop will not be covering this
information.
14. Going Paperless
If you make changes to your accounts to not receive
paper statement through the mail, you will most likely be
able to view your statements and cheques online for free.
Y may be able to print statements for up to the
ou
previous 1 2 months.
If you receive paper statements, and try to access this
information through your banking site, you may be
warned that you will be charged a fee.
15. Messages
This is the safe way that your Bank will communicate
with you. They will use their website based message
system to send you messages.
This is also a safe way for you to communicate to your
Bank.
To see if they have responded to your message your bank
site will have a prominent icon letting you know that
messages are waiting for you.
16. Log Out and Clear Your Cache
and Cookies
Each banking site will have a logout link.
Y should always log yourself out. The Bank
ou
will log you out after the site is idle for about
1 0 minutes, but your screen is still visible to
others. A Y log yourself out.
LWA S
17. Purchasing Through Third Party
S ites
Interac payments can be made through some
websites and they will direct you to your
Bank site to confirm the payment.
18. General Online Purchasing
With whatever method you choose to pay
(Interac, V , MasterCard, etc.) every secure
ISA
site will have an https and the lock or key
icons to indicate that it is a secure and
encrypted site.
If the site does not have these features, you
should not purchase from them.
19. Clean Your Cache and
Cookies
Clearing your cache and deleting cookies require the same
action.
The cache leaves information on your computer from the
sites you visited, so that your computer can process
information from that site faster.
Cookies provide the site with information so that the site will
recognize your computer the next time it visits that site. It
may record your likes and where you visit on their site in
order to make informed marketing decisions in the future.
Many times this information is harmless, but as with any
feature, it can be abused.
20. S uspect Fraudulent Activity?
Canadian Anti-Fraud Centre (CAFC)
(a Canadian national call centre)
Toll Free: 1 -888-495-8501
Toll Free Fax: 1 -888-654-9426
And/or to the Canadian credit bureaus:
Equifax: 1 - 800-465-71 66
Trans Union Canada: 1 -877-525-3823
Editor's Notes
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Welcome to Online Banking - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - *Instructor notes will be distinguished by italics The purpose of this workshop is help participants learn to access their banking information, pay bills and transfer funds online. They will learn to check for site security signs and clean up traces of banking information from their computers. This workshop has sensitive information. Each computer should be arranged for optimal privacy – place dividers or upright binders between computers if they are close together. Make sure the following are installed / updated: Browser for Windows (Internet Explorer 7, 8 or Firefox 1.5 or above) Or Browser for Macintosh (Safari 3.0.4 or above or Firefox 1.5 or above) Other Requirements: Windows XP or above Or Macintosh OSX Internet Connection (High Speed Preferred) Cookies enabled – check all computers for this setting * Please familiarize yourself with several online banking sites and preferably you online bank yourself.
* Be prepared to answer questions about Cookies and how to enable them on the computers you will be using. More about Cookies: When you enter a Web site using cookies, you may be asked to fill out a form providing such information as your name and interests. This information is packaged into a cookie and sent to your Web browser which stores it for later use. The next time you go to the same Web site, your browser will send the cookie to the Web server. The server can use this information to present you with custom Web pages. To Enable Cookies: Internet Explorer 7 and 8 settings click on "Tools" on the menu bar select "Internet Options" click on "Privacy" (third tab at the top) adjust the slider on the bar to the desired level. If you click on "Advanced", you can customize the chosen level. click "OK" Firefox settings Click "Tools" and select Options on the Firefox menu bar. Click the "Privacy" Icon on the option menu bar, to open the Privacy Properties. Click on the PLUS sign in front of the Cookies option to extend the menu. Add a check mark to the box in front of Allow sites to set cookies option. Remove the checkmark from the for the originating web site only option. Click the down arrow to expand the drop down menu after the Keep Cookies field and select "until they expire". Note: If this option is already checked, close the window to accept the Cookies settings. Click "Ok" to return to the browser main page. Exit and re-launch the browser.
* It is important to provide your students with information regarding security but not to scare them from doing online banking. Phishing – as defined by Wikipedia In the field of computer security , phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication . Communications purporting to be from popular social web sites, auction sites, online payment processors or IT administrators are commonly used to lure the unsuspecting public. Phishing is typically carried out by e-mail or instant messaging , and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. Phishing is an example of social engineering techniques used to fool users, and exploits the poor usability of current web security technologies. Attempts to deal with the growing number of reported phishing incidents include legislation , user training, public awareness, and technical security measures.
Digital Certificate A digital certificate is an electronic "passport" that authenticates a web site when doing business or other transactions on the Web. It is issued by a certification authority (such as Entrust® and VeriSign®). It contains, amongst other things, the name, a serial number, expiration dates and the digital signature of the certification authority, so that a recipient can verify that the certificate is genuine. You can verify a digital certificate by clicking (or double-clicking) on the closed padlock icon that appears at the bottom of the browser when doing business with a secure web site. Note: if the user receives a security alert that the certificate has expired or is not valid, have them check their computer dates and adjust if necessary. The problem usually resides on the user’s computer. Firewall A firewall helps to limit online access to only those with proper authorization. Consider a firewall as a virtual wall that separates a trusted environment (such as corporate or home networks) from an untrustworthy environment (such as the Internet) by controlling and regulating the traffic between these two environments such that the trusted environment is protected from any harmful activity (such as viruses, worms or intrusion attacks) initiated on the untrustworthy side. Note: to also protect from harmful activities users should have up-to-date antivirus software.
Bank web addresses: The five major banks in Canada and their URL’s are: Royal Bank of Canada – https://www1.royalbank.com Toronto Dominion – https://easyweb.tdcanadatrust.com Bank of Montreal – https://www1.bmo.com Bank of Nova Scotia – https://www.scotiabankonline.com Canadian Imperial Bank of Commerce – https://www.cibconline.cibc.com All these sites may direct you to other URLs, but this is the safest way to enter onto a banking site, entering from their root directory. To make it easier in future, they may want to add the site to their favorites. File Sharing Windows family of operating systems uses a feature called "File Sharing" which allows other computers on the network to access your computer, even from across the Internet. The help feature included in the Microsoft products will help you disable this feature (Start>Help> Index and type "disabling folder or drive sharing" to find out instructions). Instructions vary depending on version of operating system.
* Help your students log onto their online banking sites. Students will need their bank card information and log in password. They need to obtain this information from their bank prior to attending this workshop. First time logging in: This may take some time as there may be a series of security questions the participants may have to go through to proceed. They should record the questions and their answers. If they are logging onto a new computer, this will trigger these security questions.
* Students that have already been on their bank sites previously will need a distraction at this point. You may want to have them take a break or open another browser window and amuse themselves on the internet. Encourage new online banking students to write out their security questions and answers for future reference. Have paper and envelopes available for the students to use and seal their secure information in the envelopes to take home. Helping them to Choose a Secure Password Each Bank will have different requirements but here are some tips: DO Use 10-digit passwords and use as many characters as the site will allow! Avoid birthdates, numeric sequences or any other combinations that can be easily guessed. Change your passwords frequently. Use different passwords for every system you access. This is mandatory for most banks that your passwords between banks be different! DON'T Use words from dictionaries, names of friends or relatives, calendar dates or common phrases Use combinations of your name and initials Tell anyone your password Write passwords on easily accessible places such as your desk calendar or under your keyboard Once everyone is logged in, have them check for the https in the URL and also for the lock indicating they are in a secure and encrypted site.
* Have the students click on the links into their accounts to view the account details. Go over settings. Most chequing and savings accounts will give a default date line view – show the students how to change settings to gain more information.
* Have Students add a biller and pay a bill. Billers/Payees that have multiple accounts: many of those companies will have a different variation. Some will have 7 digits or a combination of text and numbers, so that a customer doesn’t accidently set these linkages incorrectly. Different banks have different biller/payee options. For example: one bank may have Municipal Property Tax as a biller and another bank may not have that relationship, and so the student may not find that biller in the banks list. The methods that each bank uses to go through the bill payment process is as varied as the number of online banks; however, each bank will require the same information. When moving money – either by bill payment or money transfer – the student will always be prompted to check their selections before confirming the action.
* It is recommended that you not comment on these features. Leave the explanations to the banks. Each bank’s fine print varies greatly on their rules surrounding these processes.
* Each Bank varies in their rules. Some banks will charge a fee if they have gone paperless and then require a paper copy unless they print it themselves. An official record may incur additional charges. Allow Popups If students try to print, they may have to Allow Popups from their Browsers.
* Again, each bank will have various ways of communicating through their message centre, but the common denominator is that there will be a way to receive messages, an icon letting the student know a message is waiting for them, and a way for them to communicate to their bank. Requests are usually responded to within 24 hours. For urgent messages it is better to contact the bank directly, either by phone or in person.
* Have students note the https and lock icon indicating an encrypted and safe purchasing site. You may want to go through this process before talking about it. You can go all the way through the steps and then not do a purchase at the end. A site that may work to show your students: www.cineplex.com Find a theatre and movie to use as an example. Click on preferred ShowTime Click on Proceed with Checkout Click on Skip SCENE and Proceed with Checkout Fill in Select Ticket information Enter in Promo codes if you have any Click on Proceed with Checkout Enter and confirm your Email address Scroll to bottom and click on Checkout with Credit or Interac Online Click on Pay from Your Bank Account Choose your financial institution and this will take you to a secure online banking page. Proceed with your Online Banking logging on procedure, entering in your Bank Card information. This will take you to a page to confirm the payment and you will be re-directed back to the Cineplex site and a confirmation email will be sent to you from Cineplex. Again, the Bank will never send you an email.
*The student handout contains steps for various browsers. From your browser menu click Tools > Internet Options > General tab From the Browsing History section click on Delete ….. Button Click Delete Files in the Temporary Internet Files section Click Yes Click Close Click OK