The Bank takes special care to the issues of information security and in its activities carries out systematic effort to improve the level of protection of its services and the safety of personal data of our clients. Clients trust - is our high - priority task!

However, the convenience and availability of money transfers has not escaped fraudsters. Modern fraudsters exploit the most important vulnerability - psychology of human. Deception schemes can be absolutely different: a call from pseudo-officials of government bodies, pseudo-officials of law enforcement agencies or pseudo-officials of banks, following an unfamiliar link, and an intrusive offer in the network, etc. It is necessary to remember that your security directly depends on the level of your financial literacy and information literacy. A wrong action or even inaction in a given situation can lead to unpleasant consequences and significantly hit to your wallet.

We have prepared some tips for you on how to easily identify fraudsters. Stay alert and be careful!

• If you are informed about unauthorized operations (transactions) on your card or about an illegal formalization of a loan in your name and, in order to "cancel" it, you are asked to formalize a "mirror" loan - these are fraudsters.
• If you are asked to install/download the Any Desk and RustDesk applications on your mobile telephone - these are fraudsters.
• If you are asked to provide security codes from SMS notifications /Push notifications, 3DSecure code, password from the Altyn-I online banking maintenance application - these are fraudsters.
• If during the call you are asked for payment card details (full number, expiration date, CVV (card verification value)/CVC (card verification code), PIN (personal identification number) code) - these are fraudsters.

Follow simple security rules to keep your data safe against fraudsters:

• In case of a suspicious call, immediately interrupt the conversation and report the incident by the telephone number indicated on the back side of the bank’s payment card or contact a bank branch. Our employees will explain further actions.
• Be careful when paying by card on the Internet. Never enter your payment card number, its expiration date and three-digit code (CVV (card verification value)/CVC (card verification code)), as well as the code from an SMS message on websites on unverified websites that conduct various drawings of guaranteed prizes and surveys, including for participation in profitable "investment projects".
• Carry your cards in a wallet or darkened slipcase. For the last few years, it has become fashionable to carry cards in clear (transparent) telephone cases. You might think that if the CVC (card verification code) code is not visible, then there is no danger. But in fact, some websites allow making payments using only the information that are located on the front side of a card (card number, expiration date and cardholder’s name).
• Activate SMS notifications\Push notifications in the Altyn-I online banking maintenance application ("Menu" - "Settings" - "Notifications" section)
• Set up limits and restrictions on the card. ("Accounts" - "Cards" - "tap on the card" - "Transactions" - "All" -"Limits" section).
• Do not install unknown programs and applications, especially if they have not been downloaded from official resources;

What to do if you have provided fraudsters with personal information?

• If you have managed to provide fraudsters with confidential information about yourself and your card, you must immediately report what happened by the telephone number indicated on the back side of the bank’s payment card to block your account (login) in mobile banking and all your active cards, and also contact the law enforcement agencies!

Erroneous transfer: how to get your money back

What if your money was transferred to someone else’s telephone number or you made a mistake in the recipient’s (beneficiary’s) card number?

You made a payment using a telephone number, but you made a mistake in a digit. Try to contact the recipient (beneficiary) and explain that you made the transfer erroneously, ask to return the amount that has been received. The recipient (beneficiary) may take your position and return the money by return transfer (retransfer).

If you erroneously transfer money to a wrong card number or account number, you need to contact the bank, explain everything and find out how you can get your money back. Moreover, in this case, the bank also cannot unilaterally revoke the payment. Often, if a transfer was successfully sent to a wrong bank account, the money can only be returned with the consent of the recipient (beneficiary).

If the funds transfer is in progress, then it is still possible to cancel the operation (transaction). If you have made a mistake and entered non-existent bank details, the payment will not be made and the money will be returned automatically.

If the recipient (beneficiary) refuses to return your money, and the amount is really significant, you can file a statement of claim in court. But you must clearly understand that this entire procedure will require your time, patience and financial resources. In order for justice to be served, you need to provide the court with convincing evidences that you sent this amount of money erroneously.

Criminal Liability for Disclosing Banking Information (Dropping)

According to the newly introduced Article 232-1 of the Criminal Code of the Republic of Kazakhstan, the following actions are prohibited:

• Transferring your bank card, account details, or other payment information to third parties;

• Making money transfers or payments on behalf of other individuals in exchange for compensation or with the intent to receive compensation.

Altyn Bank JSC (subsidiary of China CITIC Bank Corporation Ltd) strongly advises:

• Do not share your bank card details, login credentials, passwords, SMS/Push codes, or access to online banking with third parties;

• Do not open an account or take out a loan "at the request of a friend" or acquaintance;

• Do not accept "easy money" offers that involve handing over your bank card, its details, or access to your accounts and banking services;

• Avoid clicking on suspicious links or opening attachments received via messengers or email;

• Do not apply for loans or transfer funds to "secure accounts," e-wallets, or cards of unknown persons;

• Set transaction limits and enable alerts in the Bank’s mobile app.

Liability:

• Up to 3 years of imprisonment for unlawfully granting access to your bank account;

• Up to 5 years of imprisonment for conducting transfers or payments on behalf of third parties;

• Up to 7 years of imprisonment for organizers ("droppers") who acquire and use access to other people's accounts.

Fraudsters may use your payment card or bank account to transfer funds and ask you to withdraw or forward the money. All transactions are monitored, and you become the first link accessible to law enforcement. Even if you "just handed over your card," you bear criminal liability for participating in the scheme.

All financial transactions in Kazakhstan are traceable: banks monitor IP addresses, devices, geolocation, and relationships between senders and recipients.

Do not become an accomplice to a crime!

Be especially cautious with fundraising for charity or medical treatment.

Fraudsters often create fake pages and posts requesting donations for sick children, surgeries, or other "urgent life situations." They ask for transfers to personal cards, accounts, or e-wallets.

Verify the authenticity of such campaigns: trust only official charitable foundations and check payment details on verified sources.

If you suspect an attempt to involve you in illegal schemes, stop communication immediately and contact the Bank and law enforcement authorities.