The volume of attempted fraud against us and other banks is increasing every year. These attempts involve emails that request your login credentials in response to a supposed 'security issue'. Bankinter will never ask you for your login credentials, either by mail or any other means. If you have any doubts about the authenticity of an email in our name, contact Bankinter immediately.

Recommendations for your login credentials:

• Change your username and password regularly.
• Include numbers and letters in your username and password. Avoid using real names or things associated with you.
• Never reveal your credentials, especially by email or phone.

Remember: No one at Bankinter will ever ask for your password. If this happens, it's an attempt at fraud (phishing, smishing, vishing, etc.). Don't trust emails asking for your details, pop-up windows or forms that ask you to enter several codes to sign transactions, even if they seem to be from us.

Recommendations for your connections

• Don't use the 'Autocomplete passwords' option to connect to an entity or service.
• Don't forget to disconnect from the website once you have finished with it.

Recommendations for your computer

• Keep your browser version updated.
• Keep your operating system up to date with the latest updates.
• Avoid downloading from unknown web sites.
• Always keep your antivirus up to date.

The security of your computer is vital. It must always be up-to-date.

Regardless of what you use your computer for, it should always be protected with appropriate tools, such as:

• An antivirus, which must always be up to date.
• A firewall.

Mobile phones can also be infected with a virus.

Our advice is:

• Do not breach the manufacturer's security (root/jailbreak).
• Install an antivirus.
• Do not download applications from unofficial sites.
• Be careful about the installation of applications and the permissions you give them.

It is important that the browsers you use to access Bankinter Online Banking are up-to-date, this can help us prevent fraud, as they feature prevention technologies.

Bankinter processes your personal data in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. Accordingly, we hereby inform you that Bankinter Luxembourg, S.A. ('Bankinter') is the party that controls your data.

As the data controller, Bankinter has the technical, organisational and human resources needed to guarantee the security and protection of its information systems, along with the customer information and data they host.

We will not transfer your personal data to any third parties, unless it is to comply with a legal obligation or unless you give your consent. However, service providers that Bankinter engages or may engage as data processors may have access to your personal data. In these cases, Bankinter guarantees the confidentiality of the personal data provided to third parties, as well as the implementation of appropriate security measures by these parties.

Your personal data will be processed to comply with the applicable legal obligations and with the rights and obligations specified in your contracts with us.

Remember, you may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability in the circumstances and under the scope established by applicable legislation by writing to dataprivacy@bankinter.lu or by calling us on +352 202 101 27 / +352 202 101 44.

For more information about how Bankinter processes your data, and in particular about the lawful basis for doing so, please refer to 'Use of personal data' in the 'Privacy and Data' section on www.bankinter.lu.

For more information about Bankinter's privacy policy, please go to Privacy policy.

If you have any further questions, please contact our Data Protection Officer at the following email address: dataprivacy@bankinter.lu.

You can find information on how we obtain your data, why we process them, the lawful basis, the recipients of your data, and your personal data rights under Information on data protection (pdf).

For more information about Bankinter's privacy policy, please go to Privacy policy.

Millions of emails are sent every day to try to acquire sensitive data. These emails usually ask users for their personal data with the excuse of a security update or a blocked account.

They take advantage of the trust that users have in their bank.

Remember: Your token, username and password are used to carry out transactions and nothing else. So if someone asks you for them on our behalf. It is not us.

Bankinter will never contact you to ask you for your coordinates, username or password. If in doubt, contact Bankinter immediately.

Why are we telling you this? Because there have been isolated cases of attempted fraud asking for this information, usually through emails. This criminal technique is called phishing and we don't want you to be affected by it. So to help you, here are some useful tips:

• If you have logged in to our website and you are asked to enter a coordinate without having started a transaction that would require it, don't do it: it may be a virus.
• Don't open suspicious-seeming emails without confirming the identity of the sender by phone or in person.
• Always check that the address in your browser bar is Bankinter's address.
• Ignore emails and calls that threaten to block your accounts or credit cards if you don't update your data. A bank would never do something like that.
• Don't open attachments from unknown sources.
• Don't open unexpected attachments, even if you think you know where they are from.
• Don't open attachments that are downloaded after clicking on a link in the text of an email.
• Don't open attachments with executable extensions (.exe, .bat, .com, .cmd, .scr, .vbs, etc.).

To protect yourself from identity theft, you must protect your personal information and passwords.

The first barrier is your password. This must be different to the one you use on other websites and it must be sufficiently strong.

A Trojan is malware (a malicious program) that is presented to the user as a seemingly legitimate and harmless program. But when it is executed it performs actions unknown to the user that put the security of the device at risk, such as allowing remote administration of a computer by an attacker. Trojans usually take total control of your equipment by exploiting weaknesses that have not been patched in installed components. The name comes from the famous Trojan horse used by the Greeks as way of getting into Troy.

Once the attacker has control of the infected system, it becomes part of their network of machines, or BotNet. The attackers then usually put their BotNets at the disposal of the highest bidder in black market web pages designed for these purposes. BotNets are used for many purposes. These range from stealing confidential information (account information, email addresses, bank passwords, confidential documents, account numbers, credit card data, etc.) to causing service denials on servers (DDoS).

Viruses are malicious code that is installed on our computers without us noticing. The virus contaminates our computer when we open an infected file, which usually comes to us in an email or when downloading a P2P network program. This contaminated file does not have to be an executable program, there are viruses that can be latent in Excel spreadsheets or Word documents, documents such as PDFs, or even in images. Viruses affect every operating system in use today. They usually act by draining the resources of our computers, causing productivity problems. A clue about a possible infection is that programs that used to work properly now need more resources and time and our computer starts going "slower" than usual.

How can we avoid getting a virus?

• Install an antivirus.
• The antivirus must be set up to update every day.
• We must never install pirated software.
• We should never open files in emails from unknown sources. If the message is suspicious, we should not open it, even if we know where it comes from.