Safety Guide for Card Use

Safety Use Manual of IB Natural Life Family Wealth Management Card

1. Introduction

2. Safety of Card

3. Safety of Password

4. Safety of ATM Operation

5.Safety of Swiping Card on POS

6. Safety of Online Shopping

7. Safety of Internet Banking

8. Mobile Banking Security

9. Common Cases on Fraud Prevention

10. Loss Report

11. Preventing Telecommunication and Internet Fraud

 

1. Introduction

It is our unchanged goal to deliver better services and functions for IB Natural Life family wealth management card ("wealth management card") which is also our promise in building an excellent card brand. To ensure "care-free use and safe payment" of wealth management card, and avoid trouble due to incorrect use, we hereby present you with this safety manual. It includes necessary information and tips on safe use as well as the analysis and prevention skills to common fraud cases, which will help you to have a better experience in using wealth management card.

 

2. Safety of Card

★ Obtain your card

Please set a 6-digits safety transaction password if you apply for and obtain wealth management card from our bank's counters; or be sure the envelope containing password is intact if you apply for and obtain card in batch. Please change your password or reset your password at the card issuing bank as soon as possible if the envelope was broken.

★ Card keeping

Please keep your cards as carefully as you can, do not leave it unattended or lend to others.

Please keep your wealth management card and ID card separately in case of unnecessary loss.

Do not put your card in a bag, briefcase, coat pocket and other places that is easily forgotten when you are in public places.

To protect the magnetic stripe, please do not put cards close to magnetic or sharp objects

If your card is lost, stolen, or you suspect unauthorized use, please promptly contact our customer service hotline at 95561 or report the loss via our mobile banking app.

★ Protect card information

Please destroy the magnetic stripe (or chip) of the old card when you get a replacement due to the old one is worn out.

Carefully keep your sales slip, statement of account and other bills of your wealth management card or destroy them in due time. Do not just discard them as they contain sensitive information such as card number.

Do not tell others your card number or reply suspicious email or SMS requesting card number, or leave such information in public computers.  IB will not send email or SMS requesting your card number in any circumstances. Please call 95571 to verify if you receive such information.

Please carefully check statement of account and pay attention to capital movement regularly, and contact the card issuing branch if there is unauthorized transaction.

★ Card use

Check your card and the card information from time to time

Write down the emergency telephone number of issuing branch, and keep such information away from your wallet.

You may change your password at our bank's counters, ATM, online banking and telephone banking anytime

It is suggested to have two or more wealth management cards, one for daily use and the other for investment. Avoid to use your investment card at ATM or POS, and limit the balance of daily use card as appropriate.

Keep an close eye on your card when swiping card at POS

While operating at ATM, note whether the inserting port has been modified; do not leave right after your card has been swallowed by ATM, and you may call service telephone number on ATM screen or 95561 for help. Please take back your card and cash timely when transaction is completed

While operating at ATM, do not let criminal offenders to switch your card by distracting your attention

Please check your card at our counters if you frequently encounter irregularities during consumption or withdrawal.

 

3. Safety of Password

★ Set Password

Please set password that is easy to remember but hard to decode. To prevent from being decoded by criminal offenders, do not set password which composed of simple numbers (such as 111111) or use birthday or telephone number as password.

★ Password keeping

Do not write down password or keep it at any reachable or accessible places to others. Do not store password in your mobile phone or even write it at the back of card

Never keep your password and card together.

Ensure that your password is known only to you. If you suspect any breach of your password, take immediate action to change it through our bank's branches, ATMs, mobile banking, smart kiosks, or online banking.

Do not disclose your password to anyone. Banks and public security bureaus will never ask about your password.

★ Card use

No need to enter password when swiping at the access control to self-service bank

Note whether there are extra devices or cameras at access control or ATM, or whether password keyboard has been modified.

When entering password, use the other hand or body to block the view of your gesture, preventing peep from others or pinhole cameraIf you detected the password has been peeped, please change your password immediately, or report loss by calling 95561, and conduct loss report in written at the counter of the card issuing branch with your valid ID documents in 5 days.

 

4. Safety of ATM operation

★ Before operation

No need to enter password when swiping at the access control to self-service bank

Make sure of your personal safety first. Then pay attention to the safety of nearby environment. Look out to the people around. Please move to another ATM if someone is too close with you and behaves suspiciously.

Check ATM. Do not use an ATM if there are extra devices or cameras at the ATM, or the inserting port or cashing port shows abnormal situations or has been modified.

Read bank's announcement carefully. Our bank never publish announcement which ask clients to transfer money into designated account. Never trust such announcement, and please report to our bank or public security bureau asap if you've found such announcements.

Be alert to SMS fraud. Please be alert to suspicious SMS, and inquire about it by calling 95561 if you have any doubt. Do not call the numbers contained in such message.

★ During operation

Focus on your operation; do not accept help "in good faith" or inquiry from strangers. Cover the inserting port with your hand when someone is distracting your attention, preventing cheaters from switching your card.

Enter password as quickly as you can and use your body to ward off your gesture, preventing peep from criminal offenders

Do not leave right after your card has been swallowed by ATM or cash has not been delivered, and you may call service telephone number on ATM screen or 95561 for help.

★ After operation

Remember to take back your card and cash before you leave

Please be sure the card returned is your own card.

If you choose to print transaction slip at ATM, please keep it carefully or destroy it timely, and do not discard it carelessly.

 

5. Safety of Swiping Card on POS

★ Before swiping

Upon receipt of wealth management card, be sure to sign your name at the back of card, and carefully set and store password according to the abovementioned tips.

★ During swiping

Always keep an eye on cards when swiping your card at malls, and pay attention to the times the cashier swipes your card.

When entering password, use the other hand or body to ward off your gesture, preventing peep from criminal offenders

★ After swiping

After cashier returns sales slip and card, please carefully check whether the amounts on the slip are correct and the card is your own card.

If there are abnormal situations, please keep the sales slips carefully. You can contact our bank with sales slips and statements of account when you encounter repeated payment or other situations.

Please check the card use according to your statement of account. Contact the issuing branch or call 95561 if you have any doubt.

 

6. Safety of Online Shopping

★ Know the online merchants you are dealing with

You should only shop at trusted websites. To verify the merchant's authenticity and reliability during your first deal, it is suggested to confirm their landline (not mobile) telephone and mailing (not postbox) address.

★ Visit safe websites

While paying at payment pages, please make sure the prefix of website address has become "https://" and  pattern has shown at the lower right corner of IE explorer, which indicates that your transaction is protected by encryption; if  is shown on the webpage, then that must be a fake mark made by criminal offenders.

★ Protect personal information

You are suggested to check the privacy protection provisions in order to understand which information about you has been collected by merchants, and how it will be used. Never disclose important information such as account info or password.

★ Save order and sales provisions

As shopping webpage may change at any time, it is suggested to print relevant information concerning consumption guarantee on orders and webpage, including delivery time, client service and return policy. If you're cheated, please report the case in time to the industrial and commercial administrative authorities.

★ Check your statement of account regularly

If you notice any suspicious transaction, please contact our bank immediately.

★ Protect your wealth management card

Never leave your card unattended. Avoid lending it to others or allowing others to copy the back of your card.It is suggested to have one card especially for online payment.

★ Prevent embezzlement of account

Do not disclose your card number, voucher number, password and other important information to made-up sellers. Do not log on induced payment platform offered by sellers, and be careful of false payment websites.

 

7. Safety of Internet Banking

★ Log on the official website of our bank

Enter www.cib.com.cn directly into your browser, and do not visit Internet banking via links from other websites. Please immediately report to our bank if you found any counterfeited website.

★ Check security lock

When using services from personal Internet banking, please make sure thepattern is shown at the lower right corner of IE explorer, which indicates that your transaction is protected by encryption.

★ Do not disclose your account and password

Do not disclose account and password to anyone. Do not trust any request of account number and password by email, SMS, telephone and other methods. If you already disclosed account number and password to an unknown person or website, please change your password via Internet banking or counter service promptly, or report the loss of your password by calling 95561.Try not to use Internet banking at public (such as Internet cafe); Remember to exit Internet banking when you finish operation or leave half way.

★ Set a complex password only for Internet banking

Do not use simple array of numbers, birthday, telephone number as password, and use separate passwords for Internet banking and other purposes. 

★ Use digital certificate correctly

Digital certificate is data that contain user's identity, public key and digital signature of identity certifying body. It is your identity certificate for your communication and business activities online. Certificate signature equals to your written signature at law. During each step of electronic deals, all parties in the transaction will need to verify the validity of the digital certificate of the opposite side, thus obtaining trust from each other. Therefore, you have to keep your certificate and password very carefully and do not disclose it to others. Generally, certificate signature is impossible to counterfeit. There will be no risk as long as you keep good care of your certificate and password.

★ Check balance and details of your account regularly

Please contact our bank in time to avoid loss if any unusual transaction or accounting error is found.

★ Ensure the safety of your computer

To protect your computer from hostile attack or damage from virus, please use complex power-on password on your computer, set up fire wall, install and regularly update anti-virus software.

 8.Mobile Banking Security

 Download the Official IB App

For iPhone users, download the app from the Apple App Store. Android users should download it from our official website or the phone manufacturer’s official app. For detailed instructions, visit "Home >> Download Center >> Client of Mobile Banking" (https://www.cib.com.cn/common/download/client.html). If you come across any counterfeit apps, please report them to us immediately.

 Do Not Disclose Account and Password Information

 Never reveal your account number or password to anyone. Do not trust requests for this information via email, text message, or phone calls. Immediately change your password if you have already provided your account details or password to an unknown individual or website.

 Set Unique Online and Mobile Banking Passwords

Ensure your online and mobile banking passwords are different from those used for other purposes.

 Safeguard Your Security Tools, like SMS Codes

Keep your mobile banking security tools, including SMS codes, secure and confidential.

 Regularly Check the Account Balance and Transactions

If you notice any unusual transactions or discrepancies, contact us promptly to avoid any loss.

 Ensure the Security of Your Mobile Device

Set a startup password on your phone to prevent loss or theft. Always download and install apps from the official app marketplace of your phone manufacturer to avoid malware or virus attacks.

9. Common Cases on Fraud Prevention

Case 1: Card swallowing + false notification

Fraud scenario: Cheaters would first set device at inserting port of ATM to swallow cards, and paste false bank notice beside ATM. After tricking cardholders into offering their password by acting as bank staff and asking cardholders to leave with some excuses, cheaters withdraw money illegally from ATM.

Tips: If an ATM goes wrong, you should stay on and call the service telephone on the ATM screen or 95561 to contact us. Be careful to the service number on the notice beside ATM. Remember, bank staff will never ask you about your password, which is only tricks of cheaters.

Case 2: Card swallowing + password peeping

Fraud scenario: Cheaters would first set device at inserting port of ATM to swallow cards and peep at the password from the back of cardholders or at a distance with a telescope. After cardholders left, cheaters take out of bank card and withdraw money with the password.

Tips: Be careful of suspicious person while withdrawing money at ATM. Please be alert and protect your password from peep when strangers approach.

Case 3: Card number stealing + card counterfeiting

Fraud scenario: cheaters peep card number or password with micro-camera, or pick up ATM/POS slip dropped by cardholders, and counterfeit bank card to withdraw money illegally.

Tips: Do not discard ATM/POS slip carelessly or disclose your card number and password to others.

Case 4: False notice

Fraud scenario: Cheaters would post a false bank notice which, with the excuses such as "bank program debugging", asks cardholders to transfer their money to designated account via ATM and acquire deposits illegally.

Tips: Any notice requiring transfer to designated account must be a trap. If you find any such notice, please report to our bank or public security bureau ASAP.

Case 5: Password peeping + card switching

Fraud scenario: Cheaters would peep at password while cardholders is withdrawing money, drop money on purpose and "friendly remind" cardholders to pick up money. In the meantime, his/her accomplice switches the bank card on ATM quickly.

Tips: Do not accept help from "warmhearted person", and cover the inserting port while distracted by others to prevent card switching.

Case 6: Cheat by pretending bank staff

Fraud scenario: Cheaters would first make a scene as if the ATM swallows your card due to malfunction, then trick you into telling the card number, password and other information by pretending bank staff for repairing the machine, and eventually make a counterfeit card and withdraw money illegally.

Tips: Bank staff would never ask you about your withdrawal password. Be alert to such "staff".

Case 7: False SMS

Fraud scenario: Under the name of "consumption to be confirmed" or "disclosure of card data" and with excuses such as transferring to a safe account or add safety code, cheaters induce cardholders through SMS or telephone to transfer at ATM or directly obtain victim's card number and password.

Tips: Be alert to such messages. If you have doubts about your consumption under your bank card, you should inquiry at the bank counters or by calling 95561. Do not call telephone number contained in such messages which might be a trap set by cheaters.

Case 8: Card swallowing+ fake access control or password stealing with fake keyboard

Fraud scenario: Cheaters would steal cardholder's password electronically and deposits illegally by setting device to swallow cards at inserting port of ATM or install fake password keyboard or fake access control on ATM.

Tips: While using ATM, check the parts that could be easily modified, such as inserting port, cashing port, keyboard or hidden camera. If your card is swallowed, please stay on and call 95561 for help. Remember, no password is required at access control.

 

10. Loss Report

In case your card is lost, stolen or being used illegally, please report the loss by calling 95561 to freeze your account and prevent loss from fraud. Holders of our wealth management card can report the loss by calling 95561, and must report the loss in written at a counter of the card issuing branch with your valid ID documents in 5 days.

Hotline of our bank and UnionPay Anti-fraud service center:

Industrial Bank 95561

UnionPay Anti-fraud service center 95516*1

11.Preventing Telecommunication and Internet Fraud

 Adhering to the “Three Don'ts and One Always” Anti-Fraud Principle

·Don’t click on unknown links.

·Don’t trust calls from strangers.

·Don’t disclose personal information.

·Always double-check before transferring or remitting funds. 

 Remember These Eight “Any” (Warning Signs of Scams)

·Any part-time job that requests upfront payment for order brushing (faking sales records) is a scam!

·Any investment promising "insider information, expert guidance, guaranteed profits, or high returns" is a scam!

·Any online loan advertisement claiming "no collateral, no qualification requirements, low interest rates, and quick disbursement" that requires verification codes, membership fees, security deposits, unfreezing fees, or account transfers is a scam!

·Anyone asserting to be customer service from e-commerce or logistics platforms, offering refunds, compensation, or returns, and requesting your bank card details and mobile verification codes is a scam!

·Anyone impersonating law enforcement or judicial staff, alleging your involvement in illegal activities and instructing you to transfer funds to a “safe account,” is a scam!

·Anyone asserting to be a “leader” who seeks to connect with you on QQ, WeChat, or other social media platforms, initially expressing concern for your welfare but subsequently requesting money transfers under the pretext of assisting relatives or friends, is a scam!

·Any unfamiliar link sent under various pretexts requesting you to enter your bank card number, mobile verification code, or password is a scam!

·Anyone adding you to social media groups via platforms like WeChat or QQ and urging you to click links to download apps for investments or refunds is a scam!

 Top Ten Common Types of Telecommunication and Internet Fraud

Case 1: Order Brushing and Cashback Fraud

Method of Operation: [Initial Engagement] Using text messages, websites, social media, and short video platforms to post part-time job ads, attracting people to become "order brushers, likers," or "promoters." They are then added to group chats or enticed into groups under the disguise of free home appliances or free skill training. [Small Cashback] Once in the group, victims are asked to complete tasks like brushing orders, following official account, liking and commenting on short videos, or boosting followers. A small commission is paid to gain their trust. [Executing the fraud] “Plants” in the group spread screenshots of high commissions earned, using bait like "more recharge, more orders, more cashback" to entice victims to download fake order-brushing apps and perform "advanced tasks." Various excuses, such as "incomplete tasks," "stuck orders," or "abnormal operations leading to frozen accounts," are used to deceive victims into investing more, ultimately defrauding them of substantial funds.

Preventative Measures: Remember that "order brushing" and "boosting reputation" are illegal activities and not legitimate part-time jobs. Don't let small profits tempt you. All order-brushing schemes are scams!

Case 2: Fake Online Investment and Financial Management Fraud

Method of Operation: [Targeting Victims] Victims are added to so-called "investment" group chats. Perpetrators act as investment tutors or financial advisors, using fake investment success stories or "live classes" to gain trust. Alternatively, they establish romantic relationships through dating platforms, then deceive victims by claiming to have special resources or platform loopholes for high financial returns. [Encouraging Investment] Victims are mandated to manage accounts on fake investment platforms and instructed on operations by the "tutor." Scammers manipulate backend data and share fake withdrawal screenshots to entice victims into investing. [Executing the fraud] Small initial investments by the victim may see returns. However, once a significant investment is made, withdrawal becomes impossible, and the victim is removed and blocked from the group chat.

Preventative Measures: Do not trust investment and financial management opportunities promoted through informal channels. Remember, any investment touting "insider information" or "stable high returns” is a scam!

Case 3: Fake Online Loan Scams

Method of Operation: [Promotional Luring] Scammers use deceptive promises such as "no collateral," "no credit check," "fast disbursement," and "free credit limit increases for cash withdrawal" to advertise fake loans, credit cards, and cash withdrawal services through digital media, phone calls, text messages, and social media. This entices victims to download fraudulent loan apps or visit fake websites. [Manipulative Guidance] Under the guise of loan approval, victims are instructed to pay "security deposits," "processing fees," or to "artificially inflate transaction volumes." They also receive fake loan disbursement messages. When victims realize the funds haven't been deposited, they are deceived again under various pretexts like operational errors, credit issues, or insufficient transaction volume, leading them to pay various additional fees. [Financial Exploitation] Once the scammers receive the victim's transfer, they shut down the app or website and block the victim.

Preventative Measures: If you need a loan, it's advised to proceed through official channels. Legitimate institutions do not charge any fees before disbursing a loan! Be wary of online loan ads, particularly those requiring upfront fees like membership or security deposits or transactions to simulate financial activity—these are all scams!

Case 4: Impersonating E-commerce or Logistics Customer Service Scams

Method of Operation: [Information Gathering] Posing as customer service representatives for e-commerce platforms or logistics companies, scammers falsely claim there are quality issues with the victim's purchased goods or that their listed products have been delisted due to violations. They use excuses such as "compensation refunds" or "reactivating a store" to coerce victims into providing bank cards and mobile verification code information. [Payment Inducement] Victims are deceitfully upgraded to VIP members, authorized as agents, or involved in product installment plans, with threats of additional charges if these services aren't canceled. Alternatively, victims are informed they cannot receive refunds or reactivate their stores without purchasing services like "security deposits" or "triple compensation for counterfeit goods," thereby inducing them to make payments. [Continued Deception] Claiming the victim's membership or credit points on the e-commerce platform are insufficient, scammers persuade victims to apply for loans to increase their points and then deceive them into transferring the loan amount to a specified account.

Preventative Measures: When contacted by someone claiming to be from e-commerce or logistics customer service, confirm with official platforms. Remember, legitimate online merchants do not require payment for returns or refunds. Avoid clicking on links provided by strangers, refrain from filling in your bank card PIN or SMS verification codes carelessly, and never follow instructions to enable screen sharing.

Case 5: Impersonating Judicial Authorities Scams

Method of Operation: [Luring the Target] Scammers illegally acquire personal information and impersonate judicial authority staff, contacting victims via phone, WeChat, or QQ and asking for their cooperation. [Threatening and intimidating] They intimidate victims with false accusations of money laundering, illegal immigration, drug trafficking in parcels, or passport issues, demanding cooperation with the investigation and strict confidentiality. Fake arrest warrants and asset freeze orders are shown to increase credibility. [Executing the scam] Under the pretense of helping clear their name, victims are lured to isolated spaces like hotels, cut off from outside contact, and then instructed to transfer all funds to a so-called "safe account" or to download specific apps. They may also be induced to borrow from legitimate loan platforms and transfer the funds out, maximizing the scam’s profitability.

Preventative Measures: If someone contacts you claiming to be from the judiciary, check with the local authorities right away. Remember, judicial staff do not send legal documents via WeChat or QQ, and there are no "safe accounts." Any request for fund transfers for verification is a scam!

Case 6: Fake Credit Report Scams

Method of Operation: [Impersonating Officials] Acting as bank employees, banking regulatory commission staff, or workers from an online loan platform, scammers establish contact with victims. [Gaining Trust] They falsely claim that the victim's past student loans or other accounts were not properly closed and need to be canceled. They also allege bad records on credit tools like credit cards, Alipay Huabei, or Jiebei, which need rectification to avoid damaging credit scores. [Executing the scam] Claiming to remove bad credit records or verify transaction history, scammers induce victims to take out loans on legitimate online platforms or financial apps and transfer the money to specified accounts, thereby defrauding them.

Preventative Measures: If in doubt about your credit report, always consult through official channels, and do not trust unsolicited calls. Remember, any claim to erase “student loan” records, upgrade student accounts, or clear bad records, as well as demands for fund transfers or transaction verifications, are scams!

Case 7: Fake Shopping and Service Scams

Method of Operation: [Targeting Victims] Posting ads on WeChat groups, Moments, online shopping platforms, or other websites offering low-priced discounts, overseas purchasing services, or zero-cost shopping, as well as ads for special services like ghostwriting, private investigation, or tracking and location services. [Creating Fake Transactions] After establishing contact with the victim, scammers encourage them to add friends through WeChat, QQ, or other social media for negotiations. They then suggest private transactions to save on fees or for convenience, asking for direct transfers. [Executing the scam] Once the victim makes a payment, scammers demand additional transfers for customs duties, deposits, transaction taxes, or processing fees, eventually blocking the victim after receiving the money.

Preventative Measures: When conducting transactions through social media platforms, thoroughly verify the real information of the merchants and assess them from multiple aspects. Always ensure a third party guarantees the transaction. Opt for official shopping and service platforms, be wary of abnormally low-priced goods, and do not trust services like ghostwriting, private investigation, or location services!

Case 8: Impersonating Leaders or Acquaintances Scams

Method of Operation: [Establishing Contact] Scammers create social media accounts using photos and the names of the victim's leaders, acquaintances, or children's teachers. They add the victim as a friend, invite them to specific group chats, or infiltrate groups they are part of. [Lowering Guard] Posing as a leader or acquaintance, they express concern for the victim or mimic the tone of leaders or teachers to gain trust. [Financial Exploitation] When impersonating leaders, they often request transfers under pretenses like being unable to appear in person or take calls, sending fake transfer screenshots to lower the victim's guard, then urging them to transfer money to a specified account quickly. Acting as a company leader or teacher, they mimic their tone to issue transfer or payment instructions, pressuring the victim with urgency or rare opportunities.

Preventative Measures: If someone asserting to be a leader or friend adds you as a friend or invites you to an unfamiliar group chat, always confirm their identity through multiple channels! Remember, if you receive a transfer request from someone asserting to be a leader or acquaintance, always verify it through a call or in person before making any transfer!

Case 9: Online Gaming Product Fraudulent Transactions

Method of Operation: [Posting Ads] Scammers post ads on social and gaming platforms, enticing users with offers to buy or sell online gaming accounts, items, or point cards. They also advertise free or discounted gaming items and eligibility for lottery activities. [Executing the scam] By claiming that transactions on alternative platforms or private deals are more cost-effective and convenient, victims are drawn away from official third-party platforms or directed to add so-called customer service accounts to engage in lotteries. [Inducing Transfers] Victims are asked to pay fees like "registration fees," "unfreezing fees," or "membership fees" under the pretext of resolving operational errors or insufficient levels. Subsequently, they find themselves blocked.

Preventative Measures: Scammers entice victims with low-cost recharges, high-priced buybacks, or free benefits. Always remember to conduct transactions for gaming accounts or items through official websites, as private transactions pose a risk of fraud.

Case 10: Romance and Dating Scams

Method of Operation: [Creating False Identities] Scammers create enticing profiles by using collected selfies and lifestyle photos of "white, beautiful, rich women" or "tall, handsome, wealthy men." They meticulously create various personas and upload personal information to dating websites. [Building Trust] After initiating contact, they leverage these images and concocted personal narratives to build the victim's trust, fostering romantic relationships through online chats. [Executing the scam] Scammers claim urgent financial losses stemming from unexpected events or the purported upkeep of the relationship, soliciting money from their victims. They consistently vary their justifications for needing funds, tailoring them to the victim's financial capacity, until the victim discerns the scam or is no longer able to afford transferring money.

Preventative Measures: Exercise caution when engaging in online dating, as true identities are challenging to ascertain in the virtual realm. Maintain a skeptical stance regarding financial matters, and refrain from trusting any excuses or explanations provided by individuals you encounter online for marriage or dating!