Safe Online Banking

• To safeguard your account from unauthorised access we have introduced login password re-validation after 60 minutes of continuous usage of db OnlineBanking. With this, for every session that crosses 60 minutes, you will be asked to login again
• Also, if your db OnlineBanking logged in session is idle for over 8 minutes, the system automatically logs you out of the session. To help you keep track of idle time, you can refer to the timer on the top left corner of the page and plan your transactions accordingly.

We provide multiple layers of protection to secure your online banking experience:

• 256 bit TLS encryption to keep your transaction safe from prying eyes.
• Virtual keypad to protect you from malicious ‘Spyware’ and ‘Trojan’ programs designed to capture keystrokes.
• Two levels of passwords to provide enhanced security to your financial transactions.
• OTP is an additional layer of security beyond the existing login and transaction password authentication. It is a 6 digit numeric code sent to your registered contact details, each time you attempt a sensitive / financial transaction. OTP is essential for authorizing the transactions mentioned below:
        —   Registration of beneficiary bank accounts of other banks
        —   Bill payments
        —   E-commerce payments
        —   db QuickPay
        —   Funds transfer to other Deutsche Bank accounts
        —   Mobile / Email ID change
        —   Alert profile change
        —   OTP generated during a transaction is valid only for that transaction for upto 5 minutes.
• Stringent password security measures to protect your passwords.
• In order to safeguard your account we have built an additional security layer of login password validation after 60 minutes of continuous usage. This will ensure that your login session is safe from unauthorized access. In case you do not wish to access db OnlineBanking, you may click on log-out button and terminate the session.
• Deutsche Bank monitors trojan programs on computers that are used to access db OnlineBanking. If any malicious program is detected on the computer, Deutsche Bank would disable the internet access of the customer logging from that computer. Our phone banking team would inform the same.
  

The virtual keypad is an online representation of your regular keyboard. Use your mouse to click in your password. It protects you from malicious ‘Spyware’ and ‘Trojan’ programs which are designed to capture keystrokes. We recommend that you use the virtual keypad while logging in from a computer if you are not confident about the computer's security. Examples of insecure environment include cyber café or a machine where the anti-virus software has not been updated.

While regular virtual keypads achieve this by dynamically jumbling the keys, this makes it difficult for the users to input characters. Deutsche Bank’s virtual keypad moves the entire keypad around in a dynamic manner without jumbling the keys, thereby achieving both security and convenience.

Passwords are automatically generated, printed on the password mailers, sealed and sent to your mailing address, without manual intervention. Passwords are not sent with any other documents carrying the Customer ID / User ID required for login for security purposes.Your passwords are kept completely confidential at all times in the Bank's secure systems. Please note that not even the employees of the bank have access to your password information and under no circumstances should the online banking password be shared with anyone including the bank employees.

The transaction password expires in 90 days, after which you are prompted to change the password in order to login at db OnlineBanking. Please note that if you are unable to enter the existing transaction password at the time of changing it to a new one, you will have to request for a new set of passwords.

If you have not logged in to db OnlineBanking for more than 180 days, your access to db OnlineBanking is automatically de-activated. Please call our Phone Banking team at 1860 266 6601# to get it activated.

You can also instantly create your IPIN online by using your active debit card number. For online IPIN creation we send you a random access code (RAC) and unique reference number (URN) on your registered mobile and email ID. In case of three invalid attempts we shall block your online IPIN facility and send an SMS / Email alert on the same.

'Phishing attacks' are attempts at obtaining confidential customer access information via e-mail using forged company e-mail sender addresses. These attacks use forged e-mail addresses of companies known to and trusted by the customer. The customer is asked to provide confidential account access information either by e-mail reply or through a link leading to a forged website. The information then may be misused without the customer’s knowledge.

Deutsche Bank will never ask for your confidential or personal information (such as your Account number, Debit Card number, ATM PIN or Online Banking passwords) via e-mail or SMS. Also, you will never be asked to login from a link given in any emailer sent by Deutsche Bank. In case you suspect an email claiming to be from Deutsche Bank is fraudulent, please report it to the Bank immediately.

It is always advised to scan the email attachments from unknown source before opening them.

In case you login to your db OnlineBanking and leave the session inactive for 8 minutes, then we automatically log you out of the session to protect against unauthorized access into your account.

To help track the idle time, you can refer to the top left corner of the page for session expiry timer and plan your transactions accordingly. If the session has expired then the timer would indicate you to login again.