What we are doing
What we are doing to protect you
We know you want the convenience of banking online without constantly worrying about the security of your money and your personal information.
We take your online safety seriously, that’s why we use state of the art anti-fraud systems to identify unusual activity and a telephone challenge process to block fraudsters even in in the unlikely event that they get hold of your details.
We also give you peace of mind with our online fraud guarantee.
Our online anti-fraud system
Card readers and password tokens are one security option but we use a different online anti-fraud system for customers. We're constantly improving our security to prevent online fraud and Enhanced Internet Authentication is another measure to make you even safer online. If a fraudster acquires your sign in details and gains access to your accounts, they are unlikely to have access to your phone as well.
How Enhanced Internet Authentication works to prevent fraud.
When you set up a new recipient, new standing order or reset your online security details, we may call you to make sure the request is genuine. All you need is a phone nearby. You'll be able to choose which number we call you on, provided it's a number we already hold for you. You'll receive an automated call asking you to confirm the details about your transaction and then to enter a four digit number that will appear on your computer screen into your phone keypad. The whole process takes less than a minute and you can see it on our demo.
Unfortunately, the phone security check isn't compatible with a Textphone. Customers with a hearing impairment can follow the onscreen instructions while the security check is in progress. If you use a mobile to text friends and family, we recommend you include this number in the mobile section of your phone details. If security checked, you can then select your mobile number and follow on screen instructions. If you are unable to do this then please visit your local branch or contact us by textphone and we will arrange the payment for you.
Help us contact you
In order for the phone security check to be effective we need you to provide us with up to three phone numbers, for example work, mobile and home, as we may need to contact you to verify your activity whilst you are logged in to our online service.
It’s important that you provide as many different phone numbers as you can to make it easier for us to contact you.
You can find more information on how the phone security process works.
When using our Online Banking service your security is our number one priority. Card readers and password tokens are one security option but we use a different online anti-fraud system for customers. We're constantly improving our security to prevent online fraud and Enhanced Internet Authentication is another measure to make you even safer online.
What is Enhanced Internet Authentication (EIA)?
Why have you introduced phone security checks?
Is there a charge for this service?
What happens if I don’t supply my phone numbers?
If I update my phone number online will I be able to use this number immediately?
What happens if I do not answer the call?
What should I do if my access is suspended?
What if I receive a call asking me to confirm a recipient I did not set up, what do I do?
Will I need to have my phone with me every time I want to make a payment?
You don’t hold any numbers for me so how can I set up a new recipient?
I have a dial up connection; can I give my landline number?
How will the security call work for dial up users?
Can I use a Textphone to receive the phone security check?
Can I use VoIP (Voice over Internet Protocol) to receive the phone security check?
Find out more about how to update your phone details.
When you set up a new recipient, new standing order or reset your online security details, we may call you to make sure the instruction is genuine. All you need is a phone nearby. You'll be able to choose which number we call you on, provided it's a number we already hold for you. You'll receive an automated call asking you to confirm the details about your transaction and then to enter a four digit number that will appear on your computer screen into your phone keypad. The whole process takes less than a minute and you can see it on our demo.
Some banks are using card readers or password tokens to generate unique passwords when customers undertake specific transactions. This involves sending customers a particular gadget that they will need to keep with them when using online banking. We believe this extra gadget is unnecessary and so have chosen a common item, such as your phone, to communicate with you during your online banking session.
If a fraudster acquires your sign in details and gains access to your accounts, they are unlikely to have access to your phone as well.
We recommend you read and follow instructions about staying safe online by looking at our security help centre. There is advice about the dangers of 'phishing' emails, and about keeping anti-virus and anti-spyware software up-to-date.
No, however your mobile service provider may charge you for receiving the call if you are abroad.
If you do not supply us with a number you may be unable to use parts of the online service such as setting up new recipients.
For security reasons, new phone numbers entered will take three days to become active.
During this time we will be unable to call you on any of the numbers you have provided.
You'll be directed to our phone support team who'll be able to assist you.
If you don't answer the call or a connection can't be established, you'll have two further attempts to choose one of the phone numbers we have for you so we can contact you. If we can't reach you after three attempts we won't be able to set up your new recipient.
Our security team will try to contact you within the next 3 hours during the working day (8am - 9pm Monday to Friday, 8am - 8pm weekends). If they can't reach you within 24 hours they'll send you a letter with further instructions.
You will be given two opportunities during the security check call to advise us that were not expecting the call and it’s not you trying to set up the recipient. We will then suspend your online access/accounts and our security team will contact you.
No, you may only receive a phone call when you create a new recipient, set up a standing order or reset your security details.
Unfortunately, if we don't hold any number for you, you'll need to call us on 08457 21 31 41, 24 hours a day, 7 days a week so we can set up the new recipient for you.
If you’re calling from abroad or would prefer not to use the 0845 number, you can call us on +44 (0) 1313 37 42 18.
You must be registered for phone banking to use this service. Alternatively, you'll need to call into your local branch. Please make sure that you update your phone numbers for future.
If we verify your activity we'll need to be able to contact you whilst you are online. You can provide up to 3 numbers - mobile, work and home - which should mean you are contactable wherever you are.
If the number we call you on is engaged, we will enable you to select again from the set of numbers you gave us.
Unfortunately, the phone security check is not compatible with a Textphone. However, customers with a hearing impairment can still receive a challenge on another phone and follow on screen instructions. If you are customer with a hearing impairment that uses a mobile to text friends and family, we recommend you include this number in the mobile section of your phone details. If security checked, you can then select your mobile number and follow onscreen instructions. You can update your telephone numbers in the 'Change details' section of online.
Unfortunately, VoIP technology is not compatible with our phone security check process. You'll need to use a standard phone or mobile to receive the automated call. However, most internet-enabled phones (such as the iPhone) will accept security checks while you're on online banking on your phone.
Examples of VoIP providers include Skype and Vonage. Please note that Bank of Scotland is not affiliated with these service providers.
Our online fraud guarantee
We do all we can to protect you online. Even in the unlikely event of fraud, we promise you won't lose out. As a Bank of Scotland online banking customer, you automatically benefit from our online fraud guarantee:
If you use our online service and become a victim of online fraud, we guarantee you won't lose any money from your account, and will always be reimbursed in full.
For the vast majority of our customers, this situation will never arise, especially if you take a few simple steps:
- Keep your password secure and do not let anyone else make use of your security details, even if they share a joint account with you
- Do not let anyone watch you enter your security details and log off after each Internet Banking session
- Carry out regular virus checks on your devices and have the latest operating system and web browser installed.
Find out more about how to protect yourself online.
Worried that your online personal or security details may have been compromised? Call 08456 02 00 00, 24 hours a day, 7 days a week.
If you’re calling from abroad or would prefer not to use the 0845 number, you can call us on +44 (0) 113 279 8302.
Stay secure online - New security certificate
We have introduced a new feature to our online banking service, designed to give you even more confidence when using our service.
How does it work?
Extended Validation Secure Socket Layer, or EVSSL for short, means that our site has undergone many rigorous checks to confirm its validity, and has been provided with a 'certificate of authenticity' which can be recognised by your browser.
In the majority of cases, this validation is shown within your address bar, displaying a 'traffic light' style response of green, amber or red.
This feature gives you the added confidence of knowing the site you're using has been confirmed as genuine.
What will you see?
This certificate of authenticity is recognised by most browsers, though there are variations in the way the different browsers display the validation.
The majority of users running Internet Explorer versions 7 and 8 (IE7 and IE8), Mozilla Firefox 3, Opera 9.5 and Safari 3.2 will see the following 'traffic light' responses on their address bars:
- Websites recognised as authenticated will display a GREEN address bar plus a padlock symbol, referencing the certificate and the authenticated website provider
- Websites considered to be suspicious will display an AMBER address bar with no padlock symbol
- Websites identified as fraudulent and a phishing site, or as having a revoked or expired validation certificate, will display a RED address bar
Users running Internet Explorer 6 (IE6), Mozilla Firefox 2 and Google Chrome will continue to see their standard address bar. No 'traffic light' notification will be given though authenticated websites will display a padlock symbol in the address bar.
Other browsers not mentioned above will continue to see their standard address bars
Update your browser version
We always recommend you upgrade your browser now to one of the versions that is compatible with EVSSL. You can usually upgrade your browser version from your browser providers' website. Here are the most common providers*:
Upgrade your Internet Explorer browser
Upgrade your Mozilla Firefox browser
Upgrade your Safari browser
Upgrade your Chrome browser
Upgrade your Opera browser
*Links to external sites are provided as part of our commitment to making Internet Banking safe and secure. However, we cannot accept responsibility or liability for the content or availability of external sites. We cannot guarantee that any software downloaded from these sites will work, or be free from viruses or malicious code.