Cyber Security
NMB Bank is accelerating its digital transformation by providing various digital services, safeguarding the systems, applications, and digital delivery channels remains a primary strategic priority. We are dedicated to maintaining customer trust through the rigorous protection of their assets. This commitment is operationalized via Banks Information Security Risk Management Framework and Information Security Policy. Customer's trust and safety is our priority. The Bank also undertakes campaigns for customer awareness to keep our customer secure and safe while banking through digital channels.
The Key elements of the Information Security Risk Management at NMB Bank are:
- Multi-layered 'Defense-in-Depth' strategy providing multiple lines of defense.
- Strong Governance Process with segregation of Risk and Technical team
- Implementation of International Standard Framework for information security
- Continuous Vulnerability management
- 24x7 SOC monitoring and surveillance systems
- Periodic security assessments and vulnerability management
- Mandatory security check at the time of launching new applications systems
- In-house Ethical Hacking (Red Teams) to continuously test IT systems for security flaws.
- Security Awareness to all employees through online learning platform
Further, periodic internal and external information system audits are undertaken and inputs from these assessments are incorporated from time to time. NMB Bank is ISO 27001 certified since year 2019, ISO 27001 is an international standard for information security management.
Major Cyber Threats:
Phishing: Scammers send fake emails, texts, or calls pretending to be us, urging you to click links or share login details that lead to stolen information.
Malware: Harmful software gets onto your device through unsafe downloads or attachments and can steal your personal or financial information.
Social Engineering: Tricksters pose as trusted contacts (like bank staff) to manipulate you into revealing sensitive info over phone or chat.
Unsafe Browsing: Risky websites or public Wi-Fi can intercept your banking details during login.
Outdated Software: Old apps or systems have weaknesses that hackers easily exploit to access your accounts.
Stay Protected
Bank will never send e-mails that ask for confidential information. If you receive an e-mail requesting your Internet Banking security details, you should not respond.
Secure Your Finances: Strong Passwords + MFA
- Use strong, unique passwords (mix letters, numbers, symbols)
- Enable multi-factor authentication (MFA) everywhere.
- Memorize your PIN/passwords ; never write it on the card , retain on browser or share it.
Use Trusted Devices/Networks
- Download apps only from official stores.
- Avoid using “jailbroken” devices for online banking.
- Bank only on secure sites (look for the padlock)
- Use trusted antivirus on all devices and scan regularly.
- Do not store passwords or account numbers on your mobile phones.
- Turn on auto-updates for your phone, computer, and apps to fix vulnerabilities fast.
- Logout of the banking apps and sites when not in use.
Spot Scams, Stay Secure
- Always verify suspicious messages by contacting us directly—never reply or click links.
- Hang up on unsolicited calls asking for info; call our official number to confirm.
- Report anything unusual right away via our app, hotline, or branch—we act quickly to safeguard you.
DOs
- Securely clear all personal/sensitive personal information from your mobile device before discarding it.
- Report a lost or stolen phone immediately to your service provider and law enforcement authorities.
- Review your account statements frequently to check for any unauthorized transactions.
- Ensure Transaction alert for your account transactions.
- Protect your bank accounts, card numbers and always secure your PIN and password for digital banking
DON'Ts
- Don't choose automatic login options.
- Don't click on links embedded in emails/social networking sites claiming to be from the bank or representing the bank.
- Never use public Wi-Fi to access mobile banking or any sensitive personal information.
- Don't save messages from your bank containing passwords or any other credentials.
- Don't forget to inform the bank of changes in your mobile number to ensure that SMS notifications are not sent to someone else.
- Be careful about the websites you are browsing, if it does not look authentic, do not download anything from it.
- Be cautious while using Bluetooth in public places as someone may access your confidential data/information. Moreover, turn off the Bluetooth in your mobile device if not in use.
Contact Us
Your Security is Our Priority
For any cybersecurity related concerns and matter, please reach out to us at infosecdept@nmb.com.np
