Security Center

At Bank of Baroda, safeguarding your personal and financial information is a top priority. We use robust security controls, monitoring tools, and industry-standard practices to help protect your information. However, cybersecurity is a shared responsibility, and we encourage our customers to remain vigilant when conducting business online.

Important Security Principles

• Bank of Baroda will never contact you on an unsolicited basis (by email, phone call, or text message) to request your credentials, such as:
• User ID
• Password
• One-Time Password (OTP)
• Customers are encouraged to periodically assess their own systems and internal controls to ensure appropriate safeguards are in place when accessing Bank of Baroda services.

While Bank of Baroda employs multiple technologies and controls to enhance security, customers should also take precautions to reduce their exposure to cyber risks.

Do NOT respond to any email, phone call, or text message that:

• Requests personal or account information via email, text, or a non-secure website.
• Asks for your password, OTP .
• Threatens account closure or suspension if immediate action is not taken.

If you believe your Bank of Baroda User ID, password, or account information may have been compromised:

1. Immediately contact your Bank of Baroda Service Representative to deactivate your credentials.
2. Forward any suspicious emails claiming to be from Bank of Baroda to:
   newyor@bankofbaroda.com .

Prompt reporting helps us investigate and mitigate potential fraud.

Computer & Device Security :

• Be cautious of emails from unknown senders. Do not open links or attachments unless the sender is verified.
• Secure physical access to your devices:
• Log off or lock your workstation when unattended.
• Do not leave laptops, mobile devices, or storage media in unsecured locations.
• Avoid using public or shared computers for online banking or financial transactions.
• Use only trusted devices and secure networks for Internet banking.

• Use strong, unique passwords for each website.
• Change passwords regularly.
• Avoid using personal information (name, Date of Birth, phone number, etc.).
• Never share your passwords with anyone.
• Do not save passwords on your computer or browser.
• Do not write passwords where they can be easily found.
• Never reveal:
• Password
• One-Time Passwords (OTP)

• Install software only from trusted and authorized sources.
• Ensure your browser session is secure by checking for “https://” in the website address.
• Do not open spam, junk mail, or suspicious emails—delete them immediately.
• Report the loss of your mobile phone immediately and notify Bank of Baroda of any change in phone number.
• Disable file and printer sharing when connected to the Internet.
• Perform regular backups of important data.

If you notice suspicious activity on your Bank of Baroda accounts, contact your Service Representative promptly. You may also report fraud to the U.S. Federal Trade Commission (FTC).

• Keep antivirus, anti-spyware, and firewall protections enabled and up to date.
• Schedule regular scans on your devices.
• Exercise caution when downloading software, browser plug-ins, or applications (such as Java or ActiveX).
• Avoid clicking on unknown links or opening attachments from unfamiliar sources.
• Disable email preview features that may automatically open malicious content.
• Consult your technical support provider to ensure unused computer ports are closed.

1. Phishing

Phishing occurs when criminals send fraudulent emails that appear legitimate and attempt to direct you to fake websites to steal confidential information.

Common Phishing Warning Signs

• Unknown or suspicious “From” email addresses
• Requests to verify or update account details
• Hyperlinks that do not match the displayed web address
• Urgent or threatening language demanding immediate action

Never Respond to Emails That:

• Ask you to click links or open attachments related to banking activity
• Request your credentials, OTP etc.
• Claim your account is compromised and demand verification
• Request wire transfers or urgent payments, even if appearing to come from senior staff
• Ask for information related to banking systems you do not use

1. Vishing

Fraudsters may include a phone number in phishing emails and ask you to call it. Once connected, you may be prompted to provide sensitive information.

This tactic is known as “vishing.”

Both phishing and vishing incidents may be reported to the U.S. Federal Trade Commission.

Reminder: Bank of Baroda will never ask for your password or OTP.

Bank of Baroda is committed to helping customers protect themselves against cyber threats. Staying informed and practicing safe online habits are critical steps in safeguarding your financial information.
For questions or concerns, please contact your Bank of Baroda (USA) Service Representative.

The information provided in this Security Center is intended for general educational purposes only. It does not constitute legal, technical, or cybersecurity advice.

Customers are responsible for determining the security controls and best practices most appropriate for their specific needs. Nothing herein modifies or overrides the terms and conditions governing your relationship with Bank of Baroda.