Security - Our Security Practices

Device matching is a security verification method that allows Garanti BBVA to verify that you access the banking services with a device belonging to you while you use mobile applications.

You can use the following steps to activate or deactivate the device matching feature after you safely log in to your mobile application: Settings menu >> Login and Notification Settings >> “Remember Me” / “Remember My Customer Number”. Only you can use the banking application on the relevant device as long as the device matching feature is on.

When you open the mobile banking applications with the device matching feature activated, your customer number will automatically be displayed on your screen and Garanti BBVa will confirm that the device used for the login belongs to you.

Benefits of device matching

• You can log in to the mobile banking applications in a faster manner.
• You do not need to write your customer number every time you open the mobile banking application.
• You can access banking services without needing a single-use PIN or Şifrematik.

The device Matching feature is fully free.

Attention!

Be the only person using your mobile devices with an activated tokenization feature. Make sure that you remove this feature before giving another person access to your devices (even if you protect your SIM card).

"Login PIN via SMS" is a procedure where your "Single-Use PIN" is sent to you via SMS if you are not using Şifrematik to log in to Garanti BBVA Internet Banking. All short texts sent within this procedure are free of charge.

You can instantly get your single-use "Login PIN via SMS" by following the instructions on the screen that you will see after you enter your customer number and password when you open the Garanti BBVA Internet Banking page.

Once you enter your password, you should select one of the mobile phone numbers registered in our bank's system and then click on the "Send" button. Then, you should type your 6-digit password sent to your mobile phone in the "Password" field to log in to Garanti BBVA Internet Banking.

While using Login PIN via SMS:

• The use of a single "Login PIN via SMS" is enough per login.
• If the "Login PIN via SMS" feature is used, "Verification via SMS" messages that were previously utilized for money transfers will not be sent.
• Unless you receive your PIN in 3 minutes, you can request a new PIN by firstly making sure that your mobile phone's message storage memory is not full and you have reception.
• If your current phone number is not registered in our system, you can use the closest Garanti BBVA ATM or visit one of our branches near you to register your phone number.
  

If you have changed your SIM card:

• In case of a SIM card change, SMSs containing the single-use PIN are blocked for your security.
• To restart receiving single-use PINs via SMS, you can notify our bank of a "SIM Card change" by ringing Garanti BBVA Customer Communication Center at 444 0 333 or visiting our branches.
  

When a Login PIN via SMS is not needed:

• "Login PIN via SMS" does not apply to our customer logging in to Garanti BBVA Internet Banking using Şifrematik or Mobile Signature.
• You can request Şifrematik from the My Profile menu in Garanti BBVA Internet Banking.
  

Sending SMS to phones abroad:

• Login PIN via SMS can also be sent to mobile phones abroad. If you are experiencing problems due to the SMS infrastructure or mobile operators in the country you are, we advise you to use Şifrematik.

Features of SMSs used for this service:

• They are way faster than regular SMSs and reach the recipient within seconds.
• Their contents are completely confidential and can only be viewed on the recipient's mobile phone.
• The "Login PINs" that do not reach the recipient within 3 minutes are canceled and thus are never received by the recipient.
• For all your questions, you can receive assistance from the Garanti BBVA Customer Communication Center at 444 0 333.

Garanti BBVA developed the Security Image practice to prevent phishing attacks, the leading threats targeting Garanti BBVA Mobile/Internet Banking customers.

What is the Security Image? How does it work?

In your first visit to Garanti BBVA Internet Banking after the activation of the system, the system presents nine images to you and asks you to choose one of them and the image you choose will be your "security image".

You see your Security Image after the password step every time you log in to Garanti BBVA Internet Banking and Garanti BBVA Mobile.

This practice has been developed to prevent you from performing transactions on fake websites.

If you cannot see your Security Image or you see a different image, do not perform any transaction and do immediately notify our bank of this situation by ringing 444 0 333 Garanti BBVA Customer Communication Center, Garanti BBVA Internet Banking, and Garanti BBVA Mobile Banking Support Line!

Please click for detailed information about phishing attacks.

Developed to provide extra security in your Garanti BBVA Mobile and Internet* transactions, Şifrematik is a "Single-Use PIN" generating application/device that can only be run with your special PIN code. To get detailed information about Şifrematik, click here.

Additional Confirmation is a control mechanism that ensures you check and verify one more time the details of the transactions you perform via Garanti BBVA Internet Banking or Garanti BBVA Mobile.

In case of a transaction exceeding your specified amount, you can run a final verification with the additional confirmation after performing the transaction and confirming it in the regular confirmation screen.

Additionally, if the Bank deems it necessary, it may require an additional confirmation from you for only the relevant transaction even if you did not identify an additional confirmation for your transactions. These confirmations are implemented on ATMs, Garanti BBVA Internet Banking, or Garanti BBVA Mobile and may vary in accordance with the relevant channel's functions and your login methods. For example, it is highly likely to come across the Additional Confirmation page while you are transferring money to someone you did not transfer money often or transferring an amount exceeding your usual transfer amounts.

Set your own security level.

Thanks to Security Settings, you can keep your security settings under control by establishing your own settings for your transactions. To determine your security settings, you can follow these steps in Garanti BBVA Internet Banking: My Profile menu >> Security Settings. Security settings consist of six steps:

IP Restriction

With IP* Restriction option, you can define the IP or IP ranges you use while logging in to Garanti BBVA Internet Banking and thereby prevent logins to Garanti BBVA Internet Banking from undefined IP or IP ranges. You thus allow logging in to Garanti BBVA Internet Banking only from the IP or IP ranges you defined.

Defining Usage Periods

You can close the use of Garanti BBVA Internet Banking between specific dates or temporarily, or you can open it to use for any day and time of the week as you wish.**

Payment Deactivation

If you are not transferring money from Garanti BBVA Internet Banking, you may deactivate any one or all of money transaction methods including remittance, EFT/SWIFT via Garanti BBVA Internet Banking.

Money Transfer Notification

In case of money withdrawal (remittance, EFT/SWIFT, Western Union) at an amount exceeding your specified amount via branches, Garanti BBVA Internet Banking or Garanti BBVA Customer Communication Center, you will receive a message informing you of the relevant transaction via your selected communication channel (SMS, e-mail).

If you wish, you may change your transaction limits for money transfer notifications from the notification settings option in the e-mail sent to you for information purposes following the money transfer. Moreover, to ensure your security, e-mails about money transfer notifications shall always be sent to you after any change in settings, new definition, or cancellation of existing definitions.

Compulsory Money Transfer Notification

To ensure your security, the Bank, when it deems necessary, may still inform you of a money withdrawal transaction from your account via SMS or e-mail, even if you did not define a money transfer notification.

Setting Transaction Limits

You can reduce your daily limit for remittance, EFT, and SWIFT transactions using Garanti BBVA Internet Banking. The daily limit refers to the highest amount allowed for the relevant transaction in total in a single day.

Defining Account-Card

You can choose your account and/or credit cards that you wish to not see or be able to use for any transactions in Garanti BBVA Internet Banking.

*Each computer has an IP (Internet Protocol) address on the internet. An IP address is composed of four numbers separated by dots. The smooth running of the traffic on the internet depends on these IP addresses. When you connect to the internet, your computer also is assigned an IP address. However, most users have dynamic IP addresses, i.e. you are assigned an IP that is not used at that specific moment in your service provider. Therefore, your IP address might change in each connection session. Some IP addresses, on the other hand, are static (static IP) which means the user's IP never changes. Recently, Türk Telekom company started offering static IP addresses to those ADSL users willing to use that service.

** If you have to use Garanti BBVA Internet Banking with an undefined IP address or outside of the defined usage period, you can temporarily open the Garanti BBVA Internet Banking to use with a "Confirmation Code" to be sent to your mobile phone. To use this service, you must have a valid mobile phone number registered in the system.