Firewall
Virtual electronic fence that prevents unauthorised access to the ICICI Bank server

128 bit Secure Socket Layer (SSL)
SSL stands for "Secure Sockets Layer". It is a protocol designed to enable applications to transmit information back and forth securely. Applications that use this protocol inherently know how to give and receive encryption keys with other applications, as well as how to encrypt and decrypt data sent between the two. SSL has been universally accepted on the World Wide Web for authenticated and encrypted communication between the user's computer and servers.

Some applications that are configured to run SSL include web browsers like Internet Explorer and Netscape, email programs like GroupWise, Outlook, and Outlook Express, FTP (file transfer protocol) programs, etc. These programs are automatically able to receive SSL connections.
To send an SSL connection, however, or to open a secure connection, your application must first have an encryption key assigned to it by a Certification Authority. Once it has a unique key of its own, you can establish a secure connection with every other application that can "speak" the SSL protocol.

VeriSign Digital Certificate
Digital certificates are issued by certification authorities to authenticate a Web site or elements of Web sites. The certificate identifies the originator of the site, or element, and verifies that it has not been tampered with. When your Web browser is presented with a certificate, it will check to see if a legitimate certification authority issued the certificate. If there is a match, your session will continue. Otherwise, your browser will issue a warning and your safest action is to cancel your activity.

Data encryption
A way to make data unreadable to everyone except the recipient of a message. Encryption is often used to make the transmission of login passwords secure.

Technology updates
In order to effectively counter the latest security threats, we ensure that our systems are constantly updated to maintain the security of your details.

Install and Update Anti-Virus Software
You should always protect your computer by using up-to-date anti-virus software that is capable of scanning files and email messages for viruses. This will prevent your files from being corrupted or lost and also prevent your PC from getting infected with the virus.

Anti-virus software protects you from Trojan horses. Trojan horses are typically sent to computer systems through email. They are particularly dangerous because they have the potential to allow others to gain control of your computer system remotely, without your knowledge or consent. These programs can capture and send sensitive information stored on your hard drive to any other person who has gained remote access to your computer.

A variety of anti-virus software packages are available on the market today. Many of these products install anti-virus updates to your computer automatically, as long as you have the update feature enabled. Installing an Anti-Virus software package is simple and will save your hours of frustration spent on trying to restore an infected computer system.

Keep your browser and operating system up-to-date with Software Updates
The software you use and the Internet itself can impact the security of your online activities. Therefore, you should watch for security bulletins that warn you about various security "holes" or "bugs" that may impact the software and Web browser you are using. It is very important to check the Web sites of your operating system and Web browser vendors for software "patches" and "updates". Some operating systems and software can be configured to automatically check for new updates.

To access current Microsoft Security Updates, please visit their Security Updates Web site.

Activate a pop-up blocker
Several free, publicly available programs exist that will block all pop-up windows from occurring while you are online. You can download such programs from the Internet.

Scan your computer for spyware regularly
Spyware and adware are programs that monitor your Internet activity and potentially relay information to a disreputable source. Free spyware removal programs are available on the Internet.

Change your Passwords Periodically
We recommend that you change your passwords regularly, at least every 30 days or so. To change your Passwords, login to ICICI Bank website and access the Change Password section .

Keep your Passwords Confidential
We assure you that ICICI Bank officials will never ask you for your login passwords.

Add the website to your List of Favorite Sites
We recommend that you bookmark / add to your favorites the ICICI Bank website in order to access information and transact using your login details.

Look for the padlock symbol on the bottom bar of the browser to ensure that the site is running in secure mode before you enter sensitive information.

Clear your browser's cache
Clear your browser's cache and history after each session so that your account information is removed, especially if you have used a shared computer to access ICICI Bank website.

Shred unnecessary financial documents immediately
iscard pin or password mailers immediately after memorizing them. Never write them down.

Avoid downloading programs from unknown sources
Some sources may have hidden forms of spyware or viruses that could compromise the security of your computer.

Never open email attachments that have file extensions like .exe, .pif, or .vbs. Such files are usually dangerous.

Do not keep computers online when not in use
Either shut the PC off or physically disconnect it from the internet connections.

Do not use shared computers
We recommend that you avoid accessing ICICI Bank website from a public/ shared computer, for eg. cyber cafe etc.

Online fraud occurs when someone poses as a legitimate company (that may or may not be) in order to obtain sensitive personal data and illegally conducts transactions on your existing accounts. Often called "phishing" or "spoofing", the most current methods of online fraud are usually through fake emails, Web sites and pop-up windows, or any combination of such methods.

The main objective of the online fraud is to steal your 'identity'. This phenomenon is commonly known as "Identity theft". Identity theft occurs when someone illegally obtains your personal information - such as your password, bank account number, or other identification and uses it repeatedly to open new accounts or to initiate transactions in your name.

Phishing Emails
Every user of the Internet should be aware about the common attempts of fraud through means like 'phishing' or 'spoofing'.

Phishing is an attempt by fraudsters to 'fish' for your banking details. Phishing attempts usually appear in the form of an email appearing to be from your bank. Within the email you are then usually encouraged to click a link to a fraudulent log on page designed to capture your details. Email addresses can be obtained from publicly available sources or through randomly generated lists. Therefore, if you receive a fake email that appears to be from ICICI Bank , this does not mean that your email address, name, or any other information has been taken from our systems.

Although they can be difficult to spot, 'phishing' emails generally ask you to click on a link which takes you back to a spoof web site that looks similar to your bank's website, wherein you are asked to provide, update or confirm sensitive personal information. To prompt you into action, such emails may signify a sense of urgency or threatening condition concerning your account.

The information most commonly sought through such means are:

You Bank Account/Credit Card/Debit Card number

Counterfeit Web sites
Online thieves often direct you to fraudulent Web sites via email and pop-up windows and try to collect your personal information. One way to detect a phony Web site is to consider how you arrived there. Generally, you may have been directed by a link in a fake email requesting your account information. However, if you type, or cut and paste, the URL into a new Web browser window and it does not take you to a legitimate Web site, or you get an error message, it was probably just a cover for a fake Web site.

How to Identify a Fake email/ website?
ake emails/ websites are not always easy to identify, however the below given indicators can help you safeguard against such emails or websites, should you ever come across one of these:

Protect yourself against Online fraud:
With a few simple steps, you can help protect your account and personal information from fake emails and web sites.