Secure Usage Guidelines - NetBanking

Do’s

1. Keep your Customer ID and IPIN confidential and do not disclose it to anybody, including Bank staff.
2. Always visit the HDFC Bank's NetBanking site through HDFC Bank's home page by typing the bank's website address (www.hdfcbank.com) on to the browser's address bar. Check the URL as https://netbanking.hdfcbank.com to verify the Bank’s NetBanking page and the PAD Lock symbol at the top left of the browser.
3. Disable "Auto Complete" feature on your browser.
4. Use virtual keyboard feature while logging into your NetBanking account.
5. Always type in your confidential account information. Do not copy paste it.
6. Monitor your transactions regularly. Use HDFC Bank's "InstaAlerts" service and bring any fraudulent transaction to the notice of the bank.
7. Always logout when you exit NetBanking. Do not directly close the browser.
8. Change your IPIN as soon as you receive it by logging into your NetBanking account. Memorize your IPIN, do not write it down anywhere.
9. Ensure your computer has a firewall and the latest version of anti –virus software installed.
10. Keep changing your IPIN regularly.
11. On the bank’s website, check for valid SSL security certificate (https). The “S” added to http represents a secure website.
12. Check your account statements periodically to ensure that all entries are correctly captured. In case of any discrepancy, inform the Bank immediately.

Don’t’s

1. Avoid accessing NetBanking from shared computer networks such as cyber cafes or public Wi-Fi network like hotel/airport etc.
2. Do not click on links in the emails or sites other than www.hdfcbank.com to access your NetBanking webpage.
3. Don’t write your passwords anywhere or share your computer with unknown sources.
4. Do not disclose your passwords, OTPs, Debit Card Number, CVV etc to anyone (including Bank Staff).
5. Don’t respond to emails that request personal information.
6. Do not choose passwords that are easy to guess like your date of birth, spouse’s name etc.
7. Never download an attachment if it is not from a trusted source.
8. Don’t leave your account unattended after logging in.