Stay safe

CARDS -
SECURITY AND SAFETY

Card and PIN management
Automated Teller Machine (ATM)
POS
Contactless payments
E-commerce payments
Common ways to steal card datai
Chargeback procedure initiation
What we, BRD, do

1. CARD AND PIN MANAGEMENT

Keep your card safe to prevent loss, theft or unauthorised use.
Do not disclose your card number, expiry date, name, CVV code or PIN code to any other person, even if they are posing as employees of BRD or the authorities.
Do not lend your card to other people.
Destroy the envelope containing the PIN code or delete the message with the PIN code you received after memorising it.
Never write your PIN on the back of your card or use it on websites.
Report the theft or loss of your card immediately by calling +4 021 302 6161 or *22622 (24 hours a day).

Do not disclose to others the specific information or passwords required in the enrolment process to obtain the unique set of digits in digital format (token) that provides secure substitution of card data.
Keep your Google Pay or Apple Pay-enabled smartphone safe.
Approve transactions via Face ID (facial recognition), Touch ID (fingerprint) or passwords.
In case of loss or theft of a smartphone on which you have activated Google Pay or Apple Pay, immediately log into your Google or Apple account and remove the cards from the apps or call MyBRD Contact to block or remove the related tokens..
If you have activated Google Pay or Apple Pay on a smartphone that does not belong to you, urgently call MyBRD Contact to block the activated token.

2. Bancomat (ATM)

Memorize it. Don't share it with anyone. Don't write down your PIN code anywhere. Don't keep it on the phone.
Change it if the one communicated by the bank is hard to remember.
Make sure no one sees it when you type it at the ATM.

Use ATMs with the bank's logo visible.
Look for suspicious devices attached especially in the area of the card reader and the cash slot.
Notice if the messages that appear on the ATM are the usual ones.

Insert the card slowly into the ATM without applying any force.
Cover the keypad with your left hand when entering the PIN with your right hand.
If it seems that the ATM is not working normally, press Cancel and withdraw your card.
Please let us know if the ATM appears altered and malfunctioning so we can investigate.
Don't forget to collect your card after using the ATM.
If the terminal doesn't return it, call the bank for instructions.

3. POS

Do not hand employees your card to make a payment.
Do not reveal your PIN.
Make sure no one sees your PIN when you enter it.

Make the payment personally and do not hand the card to employees.
Don't share your personal data with employees.
Make sure you get a receipt for any transaction, whether approved or denied.
Check your transactions frequently on your bank statement or internet banking application.

4. CONTACTLESS PAYMENTS

When paying contactless make sure the card stays in your hand.
Even if you touch the contactless card reader twice, thanks to the technology used, only one payment will be made.
Contactless transactions can be carried out without entering the PIN code up to a certain amount, in most cases up to 100 lei.
For your security, every sixth PIN-less transaction you make, you will be asked to enter your PIN.

Activate the NFC function on your smartphone to make payments with it.
For amounts over 100 lei, log in to pay by the method of your choice: Face ID, Touch ID and PIN code. There are terminals that can also ask you for your physical card PIN.
For amounts less than 100 lei, on Android smartphones, unlock and bring the smartphone close to the payment terminal, as with contactless transactions to proceed with your payment. On iPhone smartphones, authentication via Face ID, Touch ID or PIN is mandatory at the time of payment, regardless of the value of the transaction.
Check your transactions frequently on your bank statement or internet banking application.

5. E-COMMERCE PAYMENTS

Recommendations for payments at online merchants

Check the security of the website. The address should be in the form https instead of http.
The MasterCard SecureCode and Verified by VISA logos indicate a secure website.
Special characters indicate potential fraud.
Do not continue accessing the website if your browser displays warnings such as: certificate expired.
Check the merchant's contact details and search for information about them on the internet.
Ignore emails directing you to websites trying to get your personal or card details.
Do not install add-ons suggested by the website.
Ignore promotions that seem too good to be true.
Keep documents and messages related to the transaction, such as delivery date, warranty, and supplier details.
Look up information about the merchant and website before paying for an order. Also check the merchant's contact details.
Initiate payments to online merchants only from a device that has regularly updated anti-virus software installed.
Update the browser you use to access online shops. Updates may include security improvements.
Do not install software or applications from unknown sources on the devices used to make payments.
Do not use the save card number option in the browser..
Do not disclose to anyone the password set for e-commerce transactions, the code received via SMS to make a payment or the CVV/CVC code on the back of the card.
For your safety, we have implemented the following rules that will not allow you:

These are the 2 ways to log in for online payments:

That means, via the mobile app on your phone, following the steps:

- Select the card and enter the 3-digit code on the back of the card.
- Tap on the message that will appear in the mobile app.
- Authorise the transaction
- Return to the payment page and confirm payment
Quick and easy. That's why we recommend installing the You mobile app on your phone.

That is, by the fixed password that you memorise and enter for each transaction, plus the dynamic password that you receive on the phone you declare to the bank.

Enter your dynamic password on the payment page as soon as you receive it, as it is only valid for 5 minutes.

For your safety, we have implemented the following rules that will not allow you:

✓ make unsecured payments exceeding EUR 30
✓ make more than 5 consecutive unsecured payments on a card or exceed the cumulative amount of €100.

If you have reached these thresholds, you will need to authenticate by biometrics or 2-factor method. There are certain situations where you can make unsecured payments exceeding the above limits. These are payments with a low reported fraud rate, which the merchant decides and assumes to allow in an unsecured manner, following its own analysis by payment type and customer profile.

6. COMMON WAYS TO STEAL CARD DATA

The attacker sends an SMS or email advising the card user to give their confidential data in order to win certain prizes or informs them that they are needed due to technical errors that led to the loss of the original data. The attacker usually also sends a web address containing a clone of a merchant's or even bank's website.

In this type of fraud the attacker impersonates someone else to obtain the data needed to make a payment with the user's card.

Criminals install devices to read the card's magnetic stripe data at ATMs or POS machines. Card data is copied when using the terminal. In the case of ATM data copying, a camera is also installed so that the PIN code can also be stolen.

Attackers use software applications that install malicious code on payment devices without the user's knowledge. The purpose of these apps is to collect data and use it for fraudulent payments.

7. CHARGEBACK PROCEDURE INITIATION

How to initiate the chargeback procedure:

Go to any BRD branch or contact us via the Contact Center.
During the course of the chargeback, you may request that the account be credited in advance before the case is finalised, unless fraud is suspected.
Report lost, stolen and used without authorisation cards to criminal investigation authorities within 24 hours of discovery.
Send the bank the documents supporting your dispute if the bank asks you to. The bank allows you 10 days to submit the requested documents.
The status of the chargeback notice may be sent by SMS or email, this option being brought to your attention by the chargeback form that you sign when initiating the notice.
You may request, at any time during the review of the chargeback, free of charge, information on the status of this operation, by sending a written request to the branch of the bank where the chargeback was initiated, or, when this is not possible, through the Contact Center.
If the merchant submits supporting documents disagreeing with your dispute, the bank will notify you to acknowledge the merchant's justification. Furthermore, in case the account has been credited prior to the receipt of supporting documents, the amount credited will be debited from your account.
The responses to the chargeback notices are formalised and personalised, containing all the data and arguments justifying the resolution given to the chargeback.
This procedure covers both blocked transactions reserved for settlement and settled transactions.
The deadline for replying to a notice of chargeback is stated in the General Banking Terms and Conditions.

8. WHAT WE, BRD, DO

How we support you in the case of a transaction with risk criteria:

We send you an SMS to confirm certain transactions that have certain risk criteria, such as categories of merchants where transactions with a high degree of risk are possible, transactions that are out of the pattern of frequently performed transactions and others.

If you text us back that you don't recognise the transaction, we block the card to prevent further fraudulent transactions. If you do not reply within 10 minutes, as a security measure, we will temporarily block your card. You can reply to our message within 24 hours. Confirm or deny the transaction and we will unblock or keep the card blocked, depending on your answer.

After 24 hours, please contact MyBRD Contact to confirm or deny transactions.

How we support you in general:

We apply high security standards (PCI-DSS).

We monitor transactions through dedicated anti-fraud applications.

We are notifying the authorities to identify the offenders.

Search form

Stay
safe

CARDS -
SECURITY AND SAFETY

1. CARD AND PIN MANAGEMENT

Use a strong secret password on your email.

Card enrolled in Google Pay or Apple Pay

2. Bancomat (ATM)

PIN code

How to choose an ATM:

How to use the ATM:

3. POS

Recommendations for POS payments with PIN entry

Recommendations for payments at face-to-face merchants

4. CONTACTLESS PAYMENTS

What you need to know about contactless payments by physical card

What you need to know about Google Pay or Apple Pay payments

5. E-COMMERCE PAYMENTS

Recommendations for payments at online merchants

These are the 2 ways to log in for online payments:

Biometric authentication

That means, via the mobile app on your phone, following the steps:

2-factor authentication

That is, by the fixed password that you memorise and enter for each transaction, plus the dynamic password that you receive on the phone you declare to the bank.

6. COMMON WAYS TO STEAL CARD DATA

1. Phishing

2. Scam

3. Skimming

4. Malware

7. CHARGEBACK PROCEDURE INITIATION

How to initiate the chargeback procedure:

8. WHAT WE, BRD, DO

How we support you in the case of a transaction with risk criteria:

How we support you in general:

Search form

CARDS - SECURITY AND SAFETY

1. CARD AND PIN MANAGEMENT

Use a strong secret password on your email.

Card enrolled in Google Pay or Apple Pay

2. Bancomat (ATM)

PIN code

How to choose an ATM:

How to use the ATM:

3. POS

Recommendations for POS payments with PIN entry

Recommendations for payments at face-to-face merchants

4. CONTACTLESS PAYMENTS

What you need to know about contactless payments by physical card

What you need to know about Google Pay or Apple Pay payments

5. E-COMMERCE PAYMENTS

Recommendations for payments at online merchants

These are the 2 ways to log in for online payments:

Biometric authentication

That means, via the mobile app on your phone, following the steps:

2-factor authentication

That is, by the fixed password that you memorise and enter for each transaction, plus the dynamic password that you receive on the phone you declare to the bank.

6. COMMON WAYS TO STEAL CARD DATA

1. Phishing

2. Scam

3. Skimming

4. Malware

7. CHARGEBACK PROCEDURE INITIATION

How to initiate the chargeback procedure:

8. WHAT WE, BRD, DO

How we support you in the case of a transaction with risk criteria:

How we support you in general:

Stay
safe

CARDS -
SECURITY AND SAFETY