Protection

Security

Online account security

Fraud and identity theft are not only a risk to your privacy, but a risk to your finances, so knowing what to look for can help prevent you from becoming a victim.

Fraudsters use ‘phishing’ or ‘spoofing’ tactics to get sensitive information from you. The deception usually involves a counterfeit website or email which looks similar to one you’d normally trust. Information you give on a phishing site could be used by criminals to access your account or use your identity fraudulently.

In this guide you’ll find helpful information about protecting yourself and how we protect you.

What this guide covers

Know it's us when you log in

url - bar

  • Before you enter any details, look out for the genuine address of our Online Card Services site, starting with: https://www.bankcardservices.co.uk/.
  • In ‘https’, the ‘s’ indicates that you’re on a secure site - look for this anywhere you enter sensitive information.
  • If you’re on a secure site, click the padlock symbol on your browser to view that site’s certificate.
  • If you are using Internet Explorer 7, the address bar will go green when you access a secure site.

Login security

  • After entering your username, you’ll be presented with the SiteKey™ image and phrase you selected when setting up your Online Card Services account - giving you reassurance that it’s really us.
  • SiteKey™ adds another layer of security, helping to prevent unauthorized access to your account and protecting your information from those who would use your identity for fraudulent purposes.

Check the address

  • The address used by a counterfeit site may be very similar to our genuine website addresses. Look closely for spelling differences or the use of symbols, e.g. www.mdna.co.uk, www.mbna@banking.co.uk or www.verify-mbna.co.uk.
  • Hidden addresses - rest your cursor over a link in an email (but don't click on it) and a box will pop up showing you the link destination - do you recognize it as a legitimate address? If not it could suggest that the sender has something to hide.

Read about email security

  • Register with MBNA's Online Card Services service to regularly review your account for unusual transactions
  • Do not reply to emails that ask you to provide personal information or verify your account. MBNA and our credit card partners will never request sensitive information in any unsecured communications such as email.
  • So you know emails we send you are genuinely from us, we'll always quote the last four digits of your account number. We'll also always greet you personally with your title and surname. You can also be certain that you are at our authentic Online Card Services website and not a fraudulent look-alike site when you see your SiteKey image and image title when you log on.
  • It is important to keep your personal details up–to–date. If your personal details change, let us know so that we can update our records and contact you as soon as possible if we suspect that your account is being abused. You can make your changes on our Online Card Services service.
  • If you move house (even if it's only temporary), tell your bank, credit card and utility providers. Use the Royal Mail redirection service and consider registering with the mail preference service at www.mpsonline.org.uk to prevent mail going to your old address. Also tell your providers if you change your work, home or mobile telephone numbers.
  • Use a spam filter: this will help block “phishing” emails.
  • Regularly check your credit card statements within 30 days to detect any irregularities. Register for Online Card Services for ease of use.
  • Use the latest version of an internet browser such as Internet Explorer or Firefox.
  • Choose strong passwords with a mix of several letters and numbers. Use different passwords for different websites and never reveal them to anyone.
  • Shred all confidential letters and statements to stop anyone piecing together information about you.
  • If you are travelling abroad, please call MBNA in advance to let us know. This will help us to manage your account whilst you are away should any problems arise.
  • Always log off Online Card Services before walking away from your computer.
  • Always log off Online Card Services before accessing other websites.
  • When buying online always check for a padlock icon in the bottom corner of the browser and the prefix ‘https://’, which indicates that the site is secure

Secure Online Card Services

You will be able to use a self-selected username and password system that serves as our first line of security.

SiteKey

SiteKey provides an additional layer of security when you log in to Online Card Services, helping to protect your personal information.

Building your SiteKey:

  • Choose a memorable image from our library
  • Enter a memorable phrase to go with your image
  • Select three security questions we can ask if we need to confirm your identity

How does SiteKey work?

When you log in you'll see the image and phrase you've selected, so you know you're on our genuine Online Card Services site and can enter your password with confidence.

We also recognise the computer you log in from - as an extra security check when you log in from a computer that you don't use regularly, we may ask you one of your security questions before we display your SiteKey.

How we recognise youfootnote 1

We can recognise you by placing a 'cookie' on your computer when you select your SiteKey. This cookie contains a randomly generated number. We indentify your cookie when you log in, so we know you're using your own computer.

Get SiteKey

It's quick and easy - login or register for Online Card Services and you'll be prompted to set up your SiteKey, unless of course you've done so already. Just follow the simple on-screen instructions.

Once you've selected your SiteKey, you can manage it along with your other personal details in Online Card Services.

128-bit encryption

We will provide state-of-the-art 128-bit encryption of all data transmitted between your computer and our secure site.

Automatic log outs

We’ll automatically log you out of your banking session after a designated period of inactivity.

Automatic verification of details

We can block access to your account if your security details are entered incorrectly.

Secure sessions

All Online Card Services takes place in a secure session, indicated by a padlock symbol shown at the bottom of your screen.

Online Card Services secure email

Secure email is provided through your Online Card Services account, giving you peace of mind that your communications with us are always private.

a For more information about how we recognise your computer, please review our Privacy Policy.

Related content

FAQs

More FAQs