FAQs

Enhancing Payment Card Security – New Measures to be Phased in from 2nd Quarter 2010 to 1st Quarter 2011

On 5th March 2010, The Association of Banks in Singapore announced key measures to adopt a holistic approach to further enhance the security for payment cards, giving cardholders in Singapore greater security and better protection against card fraud. This is in addition to the existing measures whereby banks and card issuers protect cardholders' interests through robust fraud detection systems that monitor and detect unusual/suspicious card usage.

As cardholders and consumers, it is important to ensure that you provide your bank with your current particulars, such as mobile phone number, email address and mailing address.

The following FAQ explain the rationale and benefits of moving to chip-based payment cards as well as activation procedures, introduction of new alert measures for transactions and the new protocols for Card Not Present Transactions.

(I) Replacing magnetic stripe-only cards with EMV chip cards

  1. What is EMV?

    EMV is a global security standard for chip card technology. It enables chip cards to be accepted anywhere in the world. With the EMV Smart Chip, your card is better protected against fraudulent activities.

  2. Why is there a need to replace my magnetic stripe card with a chip card?

    Chip cards are safer than magnetic stripe cards. A magnetic stripe card can be easily cloned. A chip card, however, contains a microprocessor chip that uses encryption to prevent its contents from being replicated.

  3. What are the advantages of having the chip in my card?

    The chip card complies with the Monetary Authority of Singapore's enhanced standard of data security. Compared to a magnetic stripe card, a chip card is able to store more data that uniquely identifies the card and the cardholder. This makes it nearly impossible for fraudsters to decode or tamper with the card.

  4. Does my magnetic stripe debit card also have to be replaced with a chip card?

    Yes. All credit, debit as well as prepaid cards would have to carry a chip. However, proprietary ATM cards issued by the banks do not need to be replaced at this time.

  5. My current card already has a chip. Will I still be receiving a new card?

    No. You can simply continue using your existing chip card.

  6. Do I have to pay for my new chip card?

    No, customers do not need to pay for the new chip card. The cost of upgrading your magnetic stripe card to a chip card will be borne by the card-issuing bank.

  7. What must I do with my current card once I receive the new chip card?

    Please destroy your old card by cutting it in half, to prevent unauthorised usage.

  8. How do I use a chip card?

    Use your chip card in exactly the same way as your old magnetic stripe card. Present your chip card to the merchant sales staff who will insert your chip card into the chip card reader instead of swiping it at the point-of-sale terminal.

  9. Can I use the chip card overseas?

    Yes. However, in some countries chip cards are not prevalent and not all terminals can accept chip cards. Your card transactions in these countries will revert to using magnetic stripe instead.

  10. Can I use the chip card for online transactions as well as at ATMs?

    Yes (see Part IV for more information regarding online transactions).

  11. What happens to my current PIN?

    Your current PIN will continue to apply to your replacement card.

  12. Will there be any changes to my statement and payment due dates?

    No.

  13. Are my reward points under the existing card affected in any way?

    No. In addition, you will continue to earn reward points in the same way as before.

  14. What happens to GIRO, installment payment plans and recurring payment arrangements that are charged to my current card?

    All GIRO, installment payment plans and recurring payment arrangements will remain unchanged, as your replacement chip card will bear the same 16-digit credit card number as your current card.

  15. I have credit cards with several banks. Will all these cards be replaced with new chip cards as well?

    Yes, banks are progressively sending replacement cards to customers.

  16. When will my magnetic stripe card be replaced?

    This depends on your bank's implementation timeline but we expect the exercise to be completed by Q1 of 2011.

  17. Do I not need to safeguard my credit/debit card after it is converted to chip card?

    Yes. You will still need to safeguard your credit/debit card just like your cash.

(II) Introducing first-usage alert and activation procedure for new/replacement cards

  1. What do I do when I receive the new chip card?

    To prevent unauthorised use of your new card should the card be intercepted or stolen in the mail, your bank will advise you whether you have been issued an "unactivated card" or a "live card":
    1. "Unactivated Card" – you have to activate your card before use.
    2. "Live Card" – no activation is required by you; a first usage alert may be sent to you via SMS, email or letter (on advice of your bank).

(III) Transaction Alerts based on a pre-defined value threshold

  1. What is a Transaction Alert?

    This is an added security measure introduced by the Monetary Authority of Singapore. You may opt in or opt out of this service based on the service agreement being provided by your bank. When a transaction exceeding a pre-defined value threshold is charged to your credit/debit card, your bank will be required to send you a Transaction Alert via SMS. Some banks may allow alternative modes, e.g. email or postal alerts.

    This alert serves as a fraud prevention measure and you should immediately contact the bank if the transaction is not authorised by you.

  2. What is the threshold amount that will activate a Transaction Alert?

    The threshold amount may vary from bank to bank and with different card products. Your bank will inform you of the default threshold amount, and you may choose to change the threshold amount.

  3. How will I receive my Transaction Alerts?

    You will receive Transaction Alerts by SMS, unless you have made alternative arrangements with your bank. Please ensure you have updated your contact information with your card issuer.

  4. When will I receive Transaction Alerts?

    You will receive an alert:

    1. When you make purchases above the pre-defined threshold amount; and
    2. If the bank detects any suspected fraudulent transactions.
  5. Will I be charged for the Transaction Alerts?

    Banks will not be imposing a charge for Transaction Alerts. However, you should check with your service provider on whether you need to pay for overseas SMS in the event you are outside Singapore.

  6. Can my supplementary cardholders receive Transaction Alerts?

    This depends on your bank.

  7. Will I receive Transaction Alerts on my wireless devices when I leave the country?

    Alerts are sent via SMS. If you can receive SMS while overseas, you will receive the alerts. The time taken for the alert to reach you depends on your service provider and the service provider of the country you are in. If your mobile phone is unable to receive SMS at any time, the alert will be stored for a limited time in the same way as any other SMS. If you require more information on receipt/storage of SMS, please ask your service provider.

  8. Can I change the threshold amount?

    Yes. Please contact your bank's Customer Service Hotline to give new instructions.

  9. Can I opt out of this Transaction Alert service? If I opt out, can I sign up for it in future?

    Yes. Simply contact the bank's Customer Service Hotline with your instructions or contacts your bank to check if you can log in your request via internet banking.

  10. Can I register a pre-paid phone card for the Transaction Alert service?

    Yes.

(IV) One-Time-Password (OTP) for Card Not Present Transactions

  1. What is 3-D Secure?

    3-D Secure (3DS) is an added layer of security for online credit and debit card transactions. When a Singapore cardholder makes a purchase at a merchant website that uses 3DS, the cardholder will be asked to enter a One-Time Password (OTP) before the transaction can be completed. 3DS was developed by VISA to improve the security of Internet payments and offered to customers as the Verified by Visa (VbV) service. This protocol has also been adopted by MasterCard, under the name of MasterCard SecureCode, and JCB International as J/Secure.

  2. How does 3DS work?

    3-D Secure adds another authentication step for online payments. Merchants are encouraged to use 3-D Secure to achieve higher protection against fraud losses. When a merchant does not use 3-D Secure, it is liable for fraudulent transactions even if the transaction was appropriately authorised.

    The basic concept of the protocol is to tie the financial authorisation process with online authentication. This authentication is based on a three domain ("3-D") model. These three domains are:

    Acquirer Domain (the merchant and the bank to which money is being paid).

    Issuer Domain (the bank which issued the card being used).

    Interoperability Domain (the infrastructure provided by the credit card schemes to support the 3-D Secure protocol). When a customer enters his credit/debit card number during online shopping, a 3DS merchant will submit the account number to the directory server provided by the card scheme (VISA/MC/JCB) to check if the card issuer of the said account number is enrolled for 3DS. If yes, the Directory Server will send the URL of the card issuer's Access Control Server (ACS) to the merchant. The merchant's Server Plug-in will then submit an authentication request to the ACS through the cardholder's browser. The ACS will perform the authentication when the customer enters the 3DS password on his browser.

    The 3DS password may be static but in the Singapore context, the Monetary Authority of Singapore has mandated that the card issuer must provide cardholder with a One-Time Password (OTP) for added security, as a static password is vulnerable to other fraud scams such as phishing, man-in-the-middle attack, etc.

  3. Why is there a need for an One-Time Password (OTP) to complete an online purchase?

    The OTP helps to protect against online fraud. It is a secure way to authenticate that the customer making the online purchase is the rightful owner of the credit card being used.

  4. Do all on-line purchases require entering an OTP?

    No. This measure applies only to merchant websites that support the "3-D Secure" authentication protocols.

  5. How do I know if a merchant is a 3DS enabled merchant?

    The merchant website will display the logo of 3DS card schemes such as VISA's Verified-by-VISA, MasterCard SecureCode or JCB's J/Secure.

  6. How do I receive the OTP from the bank?

    When you make an online purchase using your credit/debit card, a pop-up message will appear on screen asking you to enter the OTP. The OTP will be sent to your phone via SMS. Some banks may provide the alternative options of using email, a hardware token or a mobile phone application that can generate an OTP. If you are already an Internet banking customer, you should already have your mobile phone number registered with the bank.

    If you are not an Internet banking customer, you will be required to register your mobile phone number with your bank.

  7. Do I have to pay for this service?

    No.

  8. When will the card issuing banks introduce 3DS?

    The Monetary Authority of Singapore requires all card-issuing banks to introduce 3DS from June 2010 unless they have obtained an extension. Please check with your banks for their implementation timeline.

  9. Do I need to enrol for 3DS with my bank?

    No. Your bank will automatically enrol all its cardholders.

  10. If I do not have my mobile phone registered with the bank, can I still make an Internet purchase?

    You will still be able to make purchases on merchant websites that have yet to embrace 3DS. For 3DS merchant websites, however, you will not be able to complete a transaction without an OTP.

  11. How do I register my mobile number or obtain a hardware token from my bank?

    Please contact your bank. For security reasons, you may be required to complete a form to register your mobile number or apply for hardware token. This may take a few days to process. We therefore advise that you register your mobile phone number as early as possible, to ensure that you will be able to make online purchases.

  12. What should I do if I change my mobile phone number?

    As your mobile phone number will be the primary contact for your bank to send you an OTP or SMS alert, you will need to ensure your new mobile phone number is updated with your bank.

  13. Can I opt out of the OTP service for online purchases?

    The OTP is required for online purchases through 3DS merchant websites. You may still make online purchases without the OTP through merchant websites that do not use 3DS.

A) Activation / Deactivation of Overseas ATM Cash Withdrawal

Banks in Singapore are adopting a series of additional measures to strengthen the security of ATM Cards, Debit Cards and Credit Cards that are linked to customers' Savings or Current Account.

From 1 July 2012 onwards, Banks will deactivate the overseas ATM cash withdrawal function on customers' ATM Card, Debit Card or Credit Card that is linked to their Savings or Current Account. Customers will no longer be able to withdraw cash from overseas ATMs using these Cards. However, individual Banks may exempt specific customers from this measure (e.g. customers who have recently withdrawn cash from overseas ATMs using their ATM Card, Debit Card or Credit Card that is linked to their Savings or Current Account).

If customers wish to retain the overseas ATM cash withdrawal function or are planning a trip abroad, they may request to have the overseas ATM cash withdrawal function activated for their convenience via the following methods, which may vary from Bank to Bank:

  1. Activate through their Banks' ATMs;
  2. Activate by sending an SMS message to their Banks;
  3. Submit the request via their Banks' websites / internet banking websites;
  4. Visit and enquire at any of their Banks' branches; or
  5. Mail in the downloaded activation form(s) from their Banks' websites.
  6. Some Banks have already introduced such measures.

FAQs

  1. Why are the banks disabling overseas ATM cash withdrawal?

    This is part of the industry-wide measures to reduce the possibility of transactions being undertaken by unauthorised parties.

  2. When is this measure implemented?

    This measure will be implemented from 1 July 2012 onwards. Some Banks have already implemented this measure.

  3. Does this apply to all of my ATM cards with the banks?

    Yes, this applies to all ATM Cards, Debit Cards and Credit Cards linked to your Current and Savings Accounts. However, individual Banks may exempt specific customers from this measure (e.g. customers who have recently withdrawn cash from overseas ATMs using their ATM Card, Debit Card or Credit Card that is linked to their Savings or Current Account).

  4. How can I enable overseas ATM cash withdrawal?

    You can enable overseas ATM cash withdrawal as follows:

    1. by enabling this function at your Banks' ATMs;
    2. by sending an SMS message to your Banks;
    3. by submitting your request via your Banks' websites / internet banking websites;
    4. by visiting and enquiring at any of your Banks' branches during banking hours; or
    5. by mailing in the downloaded activation form(s) from your Banks' websites.
    6. Banks may use one or a combination of the above methods. Please check with your respective Banks.

  5. Will the banks enable overseas ATM cash withdrawal immediately upon my request?

    The time taken to process your request will depend on the method selected to enable overseas ATM cash withdrawal and will vary from Bank to Bank.

  6. Can I request to disable the overseas ATM cash withdrawal function?

    Yes, you can disable the overseas ATM cash withdrawal function as follows:

    1. by disabling this function at your Banks' ATMs;
    2. by sending an SMS message to your Banks;
    3. by submitting your request via your Banks' websites / internet banking websites;
    4. by visiting and enquiring at any of your Banks' branches during banking hours; or
    5. by mailing in the downloaded activation form(s) from your Banks' websites.
    6. Banks may use one or a combination of the above methods. Please check with your respective Banks.

  7. I am a joint account holder and the mandate on the account is joint-alternate. Both I and the other joint account holder each have a card linked to the account. I want to enable / disable overseas ATM cash withdrawal for my card. Can I also enable / disable overseas ATM cash withdrawal for the card belonging to the other joint account holder?

    No, each joint account holder should directly contact the Bank if he / she wishes to enable / disable the overseas ATM cash withdrawal function for his / her card.

  8. Can I deactivate my Credit Card from overseas ATM cash withdrawal?

    Yes, you can. This is provided that your Credit Card is linked to a Current or Savings Account. Credit Card cash advance may or may not be disabled depending on the bank.

  9. Can I deactivate my Debit Card from overseas ATM cash withdrawal?

    Yes, you can disable the overseas ATM cash withdrawal function as follows:

    1. by disabling this function at your Banks' ATMs;
    2. by sending an SMS message to your Banks;
    3. by submitting your request via your Banks' websites / internet banking websites;
    4. by visiting and enquiring at any of your Banks' branches during banking hours; or
    5. by mailing in the downloaded activation form(s) from your Banks' websites.
    6. Banks may use one or a combination of the above methods. Please check with your respective Banks.

  10. How safe is it for me to use ATMs overseas?

    This will be subject to the security measures put in place for ATMs overseas, which may vary depending on the requirements in the jurisdictions and the practices of the Banks operating the ATMs. As such, Banks in Singapore are taking additional measures to enhance the security of ATM transactions, such as by sending Transaction Alerts for ATM cash withdrawals and deactivating the overseas ATM cash withdrawal function of your ATM, Debit or Credit Card that is linked to your Savings or Current Account. For your added protection, please also take note of the precautionary measures in Question 11 below.

  11. What are some of the precautionary measures that I must take when I use my card at the ATM?

    Do note the following tips when using an ATM:

    1. Be observant - If something about the ATM does not appear normal, cancel your transaction immediately. Confirm, as soon as possible, with the Bank that the transaction has been cancelled.
    2. Safety first - Use ATMs in safe locations. If you notice anyone suspicious around you, use an ATM in a different location.
    3. Keep your PIN confidential - Never share your PIN number with anyone. Cover the hand used to key in your PIN with your other hand. This will reduce the chance of scammers recording your PIN via a hidden camera. Make sure that no one can see you entering your PIN or transaction amount. For added protection, we also encourage you to change the PIN for all your cards regularly.
    4. Keep tabs - Keep close tabs on your account activities and report any fraudulent or suspicious withdrawals immediately. When an ATM cash withdrawal transaction equal to or exceeding a pre-defined threshold amount is made using your ATM, Debit or Credit Card that is linked to your Savings or Current Account, a Transaction Alert will be sent to you via SMS or email. Please contact your Bank immediately if the transaction is not authorised by you. Please also make sure that you inform your Bank immediately if there is any change in your particulars.

B) Implementation of Transaction Alerts for ATM Cash Withdrawals & Other Banking Transactions

From 1 July 2012 onwards, Banks will send out transaction alerts via SMS for local and overseas ATM cash withdrawals. This means that customers will receive a SMS alert when cash withdrawals above a certain threshold are made from their account.

  1. What is an ATM Transaction Alert?

    An ATM Transaction Alert is a text message that will be sent to you via SMS or email when an ATM cash withdrawal transaction equal to or exceeding a pre-defined threshold amount is made using your ATM, Debit or Credit Card that is linked to your Savings or Current Account. As a customer, you are automatically enrolled. This alert serves as a fraud detection measure and you should contact the Bank immediately if the transaction is not authorised by you.

  2. What is the threshold amount that will activate an ATM Transaction Alert?

    The threshold amount is set by the Banks and may vary for each Bank. You may change the threshold amount by informing your Bank of your preferred threshold amount.

  3. How will I receive my ATM Transaction Alerts?

    The ATM Transaction Alerts will be sent to you via SMS or email, so please ensure you have updated your contact information with your Bank.

  4. When will I receive my ATM Transaction Alerts?

    You will receive an ATM Transaction Alert every time you make an ATM cash withdrawal transaction equal to or exceeding the pre-defined threshold amount.

  5. Will there be a charge imposed for ATM Transaction Alerts?

    The ATM Transaction Alert service is currently provided to you free by the Banks for enhanced security. However, you may wish to check with your mobile phone service provider on the applicable terms and charges, including any fees that may be imposed for text messages that you may receive when you are overseas.

  6. Will I receive my ATM Transaction Alerts when I am overseas?

    Banks will send ATM Transaction Alerts to you even when you are overseas. However, the delivery of ATM Transaction Alerts as well as the time taken for the ATM Transaction Alerts to reach you will depend on whether you have subscribed to an auto-roam service and the performance of your mobile phone service provider.

  7. Can I change the threshold amount for my ATM Transaction Alerts?

    This will depend on the practices of individual Banks.

  8. Can I opt out of this ATM Transaction Alert service? If I opt out, can I sign up for it in future?

    This will depend on the practices of individual Banks.

  9. Can I register a pre-paid phone card for the ATM Transaction Alert service?

    Yes.

  10. What other banking transactions are covered by Transaction Alerts?

    Transaction alerts will also be sent to customers via SMS or email for the following banking transactions:

    1. Successful GIRO set-ups;
    2. Cheque payments;
    3. Electronic Funds Transfer at Point of Sale (EFTPOS) transactions using the NETS network.

      Depending on their Banks, these alerts will be available to customers on an opt-in or opt-out basis with the option for customers to choose and to amend to their preferred threshold. The timeline for implementing these Transaction Alerts may vary from Bank to Bank.

  11. What other Transaction Alert services are available?

    Please check with your respective Banks on the types of other Transaction Alert services that are available.

C) Activation of Credit / Charge Card, Debit Card and ATM Card

Since the second quarter of 2010, Banks and Card Issuers have begun to introduce first-usage alert and activation procedures for new / replacement debit and credit / charge cards.

From 1 July 2012 onwards, all new, renewal and replacement Credit / Charge Cards and Debit Cards can only be used after customers have contacted their Banks to activate the usage of these cards. All new and replacement ATM Cards also need to be activated if the Card is not activated at the point of issuance to the customers.

FAQs

  1. Why do I have to activate my Credit / Charge Card, Debit Card and ATM Card now?

    Banks are taking extra steps to protect their cardholders to reduce the possibility of transactions being undertaken by unauthorised parties.

  2. Can I use my Credit / Charge Card, Debit Card or ATM Card if I have not activated my card?

    No. You will need to activate your Credit / Charge Card, Debit Card or ATM Card before you can use it.

  3. Which types of Credit / Charge Card, Debit Card or ATM Card need to be activated?

    This activation applies to all new, renewal and replacement Credit / Charge Cards, Debit Cards and ATM Cards. For Credit / Charge Cards, all principal and supplementary credit / charge cards including corporate cards will need to be activated.

  4. How do I activate my Credit Card, Debit Card and ATM Card?

    You can activate your Credit Card, Debit Card and ATM Card as follows:

    1. by enabling this function at your Banks' ATMs;
    2. by sending an SMS message to your Banks;
    3. by submitting your request via your Banks' websites / internet banking websites;
    4. by visiting and enquiring at any of your Banks' branches during banking hours; or
    5. by mailing in the downloaded activation form(s) from your Banks' websites. Banks may use one or a combination of the above methods. Please check with your respective Banks.
  5. Can I activate a supplementary card when I activate my principal credit card?

    This will depend on the practices of individual Banks.

  6. Can I activate a supplementary card before I activate my principal credit card?

    This will depend on the practices of individual Banks.

  7. Is activation immediate?

    This will depend on the activation methods available for each Bank. Activation via certain methods such as mail-in forms will not be immediate.

D) Cessation of Domestic Magnetic Stripe Transactions for Singapore-issued Credit / Charge and Debit Cards

From 1 July 2012 onwards, the use of magnetic stripe at all point-of-sale transactions in Singapore will cease for Singapore-issued Credit / Charge and Debit Cards. Credit / Charge and Debit Card issuers will reject all transactions made in Singapore using magnetic stripe. There will be no fall back to magnetic stripe in the event of chip card failure. Magnetic stripe transactions made on non-EMV terminals overseas can still be accepted. There is no change to foreign-issued Credit / Charge Cards.

FAQs

  1. Why is the industry implementing this measure?

    Magnetic-stripe cards use an older technology. The data encoded on the magnetic stripe can be easily read and replicated with a magnetic stripe card reader / encoder, therefore making the card vulnerable to cloning. As such, the industry has implemented chip-based Credit / Charge and Debit Cards, which offer enhanced security and protection against fraud. The microprocessor chip on the card is protected by cryptographic encryption and this virtually eliminates the ability to copy contents of the chip to another card. All Credit / Charge and Debit Cards issued in Singapore now carry an EMV Chip.

  2. When will this measure be implemented?

    From 1 July 2012, the industry will cease accepting all domestic point-of-sale magnetic stripe transactions for Singapore-issued Credit / Charge and Debit Cards. Credit / Charge and Debit Card issuers will reject all transactions made in Singapore using magnetic stripe. There will be no fall back to magnetic stripe in the event of chip card failure.

  3. What is the failure rate for EMV Chip in Singapore?

    Based on industry statistics collated by ABS, the EMV failure rate in Singapore is about 2% with no particular concentration on the types of retail outlets.

  4. How does Singapore's EMV Chip failure rate compare with other countries that have migrated to EMV Chip?

    The 2% EMV Chip failure rate is the norm in countries that have migrated to EMV Chips.

  5. What is the impact on me as a customer?

    The only inconvenience is that there will be no fall back to magnetic stripe if the EMV Chip fails.

  6. What options do I have if my EMV Chip Credit / Charge or Debit Card fails at a retail outlet?

    Merchants should try performing the transaction again. If the EMV Chip fails, the following options are available for customers:

    1. Customers can use another Credit / Charge or Debit Card if the EMV Chip fails;
    2. Customers can use another payment counter if the EMV terminal is faulty; or
    3. Customers can use NETS or cash to complete the purchase transactions.
    4. If the Card is faulty, customers may contact their issuing banks to request for a replacement card.

  7. What types of cards will be affected by this measure?

    Only Singapore-issued Credit / Charge Cards and Debit Cards will be affected.

  8. What types of transactions will be affected by this measure?

    Purchase transactions using Singapore-issued Credit / Charge Cards or Debit Cards at retail outlets will be affected. Besides purchase transactions, cash advances taken from Credit / Charge Cards via non-ATM channels will also be affected.

  9. Will my magnetic stripe Credit / Charge or Debit Cards continue to be accepted on non-EMV terminals overseas in countries that have not implemented EMV Chip?

    Yes. Magnetic stripe transactions made on non-EMV terminals overseas can still be accepted.

  10. Will my foreign-issued Credit / Charge or Debit Cards continue to be accepted on non-EMV terminals in Singapore?

    Yes. There is no change to foreign-issued Credit / Charge or Debit Cards which will continue to be accepted on non-EMV terminals in Singapore.

E) Transaction Signing for Online Banking

From 1 January 2013, customers will only be able to perform high risk transactions such as the setting up of new third party payees and ad-hoc funds transfers with the use of new tokens which provide enhanced security against online threats such as man-in-the middle attacks. These tokens can be used to further enhance the security of their internet and mobile banking transactions.

FAQs

  1. When will Transaction Signing be implemented?

    From 1 January 2013, customers will need the new transactions signing tokens to authorise high risk transactions. Banks have started issuing new online banking tokens with enhanced security features such as "Transaction Signing" to further strengthen the security of online banking.

  2. Do I need to sign up for the new security token?

    Customers will be progressively receiving the new tokens, which can be used to further enhance the security of their Internet and mobile banking transactions.

  3. What is the purpose of this new security feature?

    It is intended to thwart man-in-the-middle attacks. This will provide greater assurance of security for high risk transactions such as setting up of new third party payees and ad-hoc funds transfers. With this new security feature, more banking transactions can be performed using self-service channels.

  4. What are some of the high risk transactions that will be covered by this new security feature?

    Examples of these high risk transactions include:

    1. setting up of new third party payees;
    2. ad-hoc funds transfers;
    3. funds transfers involving large sums; and
    4. changes to sensitive customer data.

F) Migration of ATM Cards to Chip Technology

FAQs

  1. What is EMV?

    EMV is a global security standard for chip card technology. It enables chip cards to be accepted anywhere in the world. With the EMV smart chip, your card is better protected against fraudulent activities.

  2. Why is there a need to replace my magnetic stripe ATM card with a chip card?

    Chip cards are safer than magnetic stripe cards. A magnetic stripe card can be easily cloned. A chip card, however, contains a microprocessor chip that uses encryption to prevent its contents from being replicated.

  3. What are the advantages of having the chip in my ATM card?

    The chip card complies with the Monetary Authority of Singapore's enhanced standard of data security. Compared to a magnetic stripe card, a chip card is able to store more data that uniquely identifies the card and the cardholder. This makes it nearly impossible for fraudsters to decode or tamper with the card.

  4. Do I have to pay for the replacement of my ATM card to chip card?

    No, you do not need to pay for the new chip card. The cost of upgrading your magnetic stripe card to a chip card will be borne by the card-issuing bank.

  5. What must I do with my current card once I receive the new chip card?

    Once you receive your new chip card, please proceed to activate it by following the instructions indicated on the card mailer. As a safeguard, please destroy your old card by cutting it in half to prevent unauthorised usage.

  6. Why do I have to activate my new ATM chip card?

    With effect from 1 July 2012, all new and replacement ATM cards mailed to customers are "blocked" and need to be activated. Banks are taking extra steps to protect their cardholders to reduce the possibility of transactions being undertaken by unauthorised parties.

  7. How do I activate my new ATM chip card?

    Please follow the activation instructions indicated on the card mailer or check with your respective banks. Activation channels may vary from banks to banks.

  8. How do I use my new ATM chip card?

    Use your new chip card in exactly the same way as your old magnetic stripe card.

  9. Can I use my new ATM chip card to withdraw cash overseas?

    With effect from 1 July 2012, banks have deactivated the overseas ATM cash withdrawal function on the ATM card. If you wish to retain the overseas ATM cash withdrawal function, you may request to have the overseas ATM cash withdrawal function activated. Please refer to the FAQs on "Activation/Deactivation of Overseas ATM Cash Withdrawal" in the ABS' website under "Phase II – Payment Card Security".

  10. What happens to my current PIN?

    Your current PIN may not change unless otherwise advised by your bank. Please await further instructions from your bank and refer to the information on the card mailer.

  11. I have ATM cards with several banks. Will all these cards be replaced with new chip cards as well?

    Yes, all banks will be progressively sending replacement cards to their customers.

  12. When will my magnetic stripe ATM card be replaced?

    This depends on your bank's implementation timeline. You are advised to await further details from your bank which will be communicating its specific plan for migrating to the chip card. The entire industry exercise is expected to be completed by end 2014.

  13. What can I do to facilitate the chip migration exercise?

    You are advised to provide your bank with your updated contact details if you have not done so.

G) Activation of Magnetic Stripe for Overseas Use

FAQs

  1. When will this measure be implemented?

    From 1 October 2013 onwards, most retail banks will deactivate the magnetic stripe on all credit/debit cards for overseas use as part of the industry's efforts to further enhance protection of consumers, merchants and banks against credit/debit card fraud. Customers will be advised by their banks accordingly as a few banks may implement this deactivation at an earlier date

  2. Why is the industry implementing this measure?

    The data encoded on the magnetic stripe card is easily read and copied making it easier for a magnetic stripe card to be duplicated for fraudulent use. However, the microprocessor chip on a chip card is protected by cryptographic encryption and virtually eliminates the ability to copy the contents of the chip to another card.

  3. What is the impact of this measure on cardholders?

    As EMV chip technology is not adopted yet in some countries, cardholders who wish to travel overseas will need to activate the magnetic stripe. The deactivation of the magnetic stripe will not have an impact on cardholders when they make transactions in Singapore. All transactions in Singapore are already processed via the EMV chip which are embedded now in all credit/debit cards, and all merchants here are equipped with chip readers

  4. Which countries do not accept EMV chip?

    Merchants in countries like the UK, Europe, Australia, Taiwan, Hong Kong and Malaysia may or may not accept the EMV chip. Merchants in the US and South Korea are still reliant on the magnetic stripe to process their credit/debit card transactions. In Japan, the EMV chip is only partially implemented.

  5. Will customers who travel overseas frequently be exempted from this measure

    Banks may exempt certain customer segments (e.g. those who travel overseas frequently and/or those who reside overseas) from this measure. However, the criteria used to exempt customers may vary from banks to banks

  6. How do I know if I am exempted from this measure?

    You will be informed by your bank's communication on whether you are exempted from this measure.

  7. How can I activate the magnetic stripe for overseas use?

    You can activate the magnetic stripe using various channels e.g. phonebanking, website, online banking or SMS provided by your bank. Activation channels may vary from banks to banks. Please follow the activation instructions indicated in your bank's communication or check with your bank. To minimise unauthorised transactions, it is advisable to activate the magnetic stripe only if you are travelling overseas.

  8. Do I need to deactivate the magnetic stripe upon return from my overseas trip

    Depending on your bank, you may or may not be required to indicate the travel period. If you are required to indicate the travel period, the banks will automatically deactivate the magnetic stripe after the stated travel period. Please refer to FAQ 9 below for manual deactivation of the magnetic stripe.

  9. How can I deactivate the magnetic stripe upon return from my overseas trip?

    You can deactivate the magnetic stripe using various channels e.g. phonebanking, website, online banking or SMS provided by your bank. Deactivation channels may vary from banks to banks. Please follow the deactivation instructions indicated in your bank's communication or check with your bank.

  10. What if I do not deactivate the magnetic stripe upon return from my overseas trip?

    The risk of unauthorised transactions being effected on your credit/debit card is higher if you do not deactivate the magnetic stripe. To minimise unauthorised transactions, it is advisable to deactivate the magnetic stripe upon return from your overseas trip.

  11. What can I do to facilitate the implementation of this measure?

    You are reminded to contact your bank to update your mailing address and mobile number if you have not done so.