Security

Security is Important!

Methods of internet fraud change in time depending on the developing technology. Please pay attention to the following security measures in order to make your transactions securely at Bank Asya Online Banking.

Our Security Measures;

Şifreci

Mini Şifreci

Turkcell Mobile Signature

Avea Mobile Signature

Account Authorizations

SMS Verification

Access Settings (IP Restriction)

Limit Authorizations

Transaction Authorizations

Security Question

Keypad

About Safe Access to Bank Asya Online Banking

Security Advices for Wireless Network used at Home and Office

Recently, wireless modems have become widespread. While we benefit from the facilities provided by these modems, we must pay attention to the security settings. A wireless modem can broadcast signal to the next building, even to the street and accordingly security gains importance. An unprotected modem may cause a malicious person to infiltrate your computer and steal your PIN. Therefore, we advise you to take following measures and consult the place you have bought your modem for the ones that you do not know about. If you use wireless modem at home or the office;

1. Change username and password of your modem.

While some modems allow to change only admin password, both password and username can be changed in some others. You must primarily change your admin password and username as much as possible. If no password is assigned, you must set a password. It is important that your password is not easily guessed.

2. Change network name (SSID) of your modem

It is recommendable to change the network name of your device, if it is possible. Since the person who wants to use your modem without permission has to know this value in addition to the password, it provides superior security. Disabling SSID broadcast of your modem makes your access to internet much safer.

3. Place your modem properly and turn it off, when you do not use.

If you do not use your modem for a long time, it is advisable to turn it off. Also it is more appropriate to place it close to the center of the house rather than the window.

4. Encrypt the connection.

Many wireless modems can encrypt their connection with computer. Thanks to this encryption the connection of the modem with your computer will be much safer. You must adjust the settings of both your modem and computer. It is recommendable to use your own keyword for encryption.

You can implement the following tips for improved security settings.

If you want to make further restrictions on the access to your modem, you can disable automatic IP address assignment to each computer connected. Just disable DHCP in the settings of your modem. You must make an adjustment also in your computer for this restriction.
Every device has a hardware address (MAC Address). If your modem supports, define MAC address of your computer to the modem and activate MAC infiltration.

How can I distinguish fraud spams?

The Security Points That You Should Pay Attention When Logging into Online Banking

General Information

Login to Online Banking

Always visit Bank Asya Online Banking by typing www.bankasya.com.tr into the address bar of your browser and clicking Online Banking button
() at our homepage. Never use the links (URL) sent by e-mail or in other websites, including the ones in search engines.
Look for the icons which verify that data security is provided by SSL encryption. These icons which are () for Internet Explorer, () for Netscape
and () for Firefox are displayed at the lower right corner of the transaction and PIN pages and indicate that the page is encrypted by SSL and the website really belongs to Bank Asya.

User Name, PIN and Password

Never save your user name on your computer or browser and don't write it down anywhere. Change your user name at regular intervals.
Don't share your PIN and password with anybody including Bank Asya Customer Services representatives, don't save them to your computer or browser, and don't write them down anywhere.
Don't choose consecutive or repeating numbers or easily guessed numbers as your PIN and password, such as date of birth or marriage, and installation numbers on your bills.
Use different PINs for your accounts in different banks.
Please don't make any banking transaction in public places such as internet cafes. If you have to make transaction in public places, don't allow (Auto Complete) computer programs or the web sites you visit automatically remind you of your PINs or credit card numbers.
If you are suspicious of that somebody has obtained your PIN or password, change your PIN or password immediately at Bank Asya Online Banking or by calling our call center on 0850 222 4 888.

Logout of Online Banking

Use "Logout" button after you complete your transactions at Bank Asya Online Banking.

Follow-up and Check

Check your last login date and hour at your every visit to Online Banking to view if there is any login or use apart from yours.
Check your account transactions and statements regularly. If you discover a transaction which is not performed by you, immediately call Alo Asya at 0850 222 4 888.

Computer Security

Install regularly security patches issued by the producing company to your operating system in order to improve the security of your computer.
If you use Windows Operating Systems, you can click following link to install new security patches to your system; http://v4.windowsupdate.microsoft.com/tr/
Scan your computer regularly with new anti-virus softwares for viruses.
Don’t accept the agreement without reading when you download a program.
You must set up several utility programs in your system in order to close the security gaps and protect your computer against potential attacks. You can download new security patches for Microsoft Windows Operating Systems from the following link;

http://www.microsoft.com/downloads/
Free softwares may carry small spywares, use anti-spyware softwares in order to be protected from such programs. You can click following link in order to set up related software issued by Microsoft in your computer;

http://www.microsoft.com/downloads/Browse.aspx?displaylang=tr&categoryid=7
Set up a personal firewall in your computer to be protected from cyber attacks and prevent partially the suspicious communication conducted by your computer.
If you use file sharing programs, activate automatic start of such programs and don’t login to Online Banking when these programs run.
Prefer authorized companies for repair of your computer.
When using Bank Asya Online Banking, use a secure browser which supports 128-bit encryption for the security of your transaction and account information.

What is SSL?

SSL (Secure Sockets Layer) protocol is used to protect the confidentiality and integrity of online data traffic between the user and the bank by encryption. SSL protocol is supported by all common web servers and browsers. SSL enables that the data that is sent is deciphered definitely and only by the correct address. Before data is sent, it is automatically encrypted and deciphered only by the correct address. Data is mutually verified, and confidentiality and integrity of the transaction and the information are protected. The power of the encryption method used for data flow depends upon the length of the key. The length of the key is extremely important. 40 bit and 128 bit encryption methods are used in SSL protocol. 128 bit encryption method has 2128 different combinations of the key.

If the browser you use does not support 128-bit encryption, you can use the following links to update your browser for 128-bit encryption.

Internet Explorer 7.0 | Firefox 3.0 |

What is secure data flow and how is it provided?

The definition of security and secure data flow must be firstly known in order to understand if secure data flow is provided or not. The conditions below must be provided for a secure connection:

Identity must be checked.
Data must be encrypted.
It must be assured that data is not changed.
Access must be provided within authorization limits.
All the transactions must be encoded to be proved later.

SSL enables the user who uses a standard web browser to verify the address of the server to which he is connected. In another words the user asks and confirms the identity, before he conveys information / identity to the browser.

On the other hand SSL launches an encrypted session and carries it to a level that others cannot watch it. In this secure connection SSL checks if the data is changed or not, in addition to encryption.

The working method of SSL is based on certificates. When the user connects to a secure site with a web browser, the steps proceed as follows:

The browser firstly asks for identity,
The web server program conveys its certificate to the browser,
The browser checks out the identity information and certificate. (Check-out method can be described as the comparison of signature of the organization providing the certificate in the identity with the signature of certificate organization within the browser.)
The browser checks automatically if the address to which it is connected and the address on the certificate are identical.
If the identity is verified, the process of detecting a key for encrypted communication by mutual messaging starts.
The browser and the web server choose the single-use session key after a series of messages.
Key is indeed a PIN and it enables the whole communication by using the same PIN.
SSL will check if the data that is mutually sent is changed.

The widely known terms, such as 40-bit or 128-bit, can be defined as the length of the security key (PIN). The longer the PIN is the harder to break it. Because nowadays 40-bit PINs can be broken by enhanced systems, SSL systems allowing 128-bit encryption are much more secure.

For your questions about our security measures you can call Alo Asya at 0850 222 4 888.

Security

Security is Important!

Our Security Measures;

Why should I use Şifreci?

What is Dynamic PIN?

What is card dynamic PIN system?

Types of Şifreci

What are the properties of Şifreci?

What are the advantages of Şifreci over other PIN devices?

How can I apply for Şifreci?

What are the properties of Mini Şifreci?

Why should I use Mini Şifreci?

How can I apply for Mini Şifreci?

How much should I pay for Mini Şifreci?

How can I activate my Mini Şifreci?

How can I login to Bank Asya Online Banking using Mini Şifreci?

Although I enter the PIN generated by Mini Şifreci correctly, I always receive an error message indicating that my PIN is incorrect. What should I do?

What is Turkcell Mobile Signature?

Who can use Turkcell Mobile Signature?

How can I have Turkcell Mobil Signature?

Pre-Application

After Pre-Application

Activation

How can I use Turkcell Mobile Signature?

Charges

What is Avea Mobile Signature?

How does Avea Mobile Signature work?

Who does provide the certificate for Avea Mobile Signature service?

Is Avea Mobile Signature service secure? Can SIM card be broken?

How can I subscribe ?

How can I subscribe to Avea Mobile Signature?

Who can use Avea Mobile Signature service?

How many Avea Mobile Signature subscription can I buy for the same line?

Can I subscribe to the service without having a line?

How Can I use?

How can I use Avea Mobile Signature?

PIN and Certificate Problems

How can I change my Avea Mobile Signature PIN?

My Avea Mobile Signature PIN has been blocked. What should I do?

I have forgotten my Avea Mobile Signature PIN. What should I do?

How long is qualified electronic certificate valid?

Can I allow others use my qualified electronic certificate?

Can I use Avea Mobile Signature abroad?

My Avea Mobile Signature service does not work. What should I do?

Telephone Problems

Which telephones support Avea Mobile Signature service?

What should I do if my mobile phone is stolen or lost?