Security Tips


Please read the following precautions before using BEA Macau Online:

A. PIN Management

    1. Do not disclose your personal identification number ("PIN") to any person. Do not send your PIN to any person via email. Never use the same PIN to access other services.
    2. Notify The Bank of East Asia, Limited, Macau Branch (the "Branch") immediately of any actual or suspected unauthorised use of your PIN and confirm your notification to the Branch in writing promptly.
    3. Do not, under any circumstances, disclose your PIN to any person who claims to represent the Branch or who claims to be an employee of the Branch or other authorised person or a law enforcement officer. It is not necessary for any person to know your PIN. The Branch will never ask you for your PIN by email, phone, or any other method.
    4. Disable options on your browser to avoid storing or retaining your PIN on your personal computer.
    5. Change your PIN immediately by selecting a new PIN the first time you use the service, and then destroy all documents on which your former PIN is printed.
    6. Do not use your ID Card number, telephone number, date of birth, driving licence number, or any popular number sequences (such as 987654 or 123456) as your PIN. Avoid using the same digit or letter more than twice (such as 111111 or AAAAAA).
    7. Memorise your PIN and do not write it down.
    8. Be alert to your surroundings before conducting any banking transactions. Make sure no one sees your PIN.
    9. For security purposes, change your PIN regularly.
    10. Change your PIN immediately if you suspect that you have been deceived by a fraudulent website, email, or SMS/WAP Push message – for example, if you fail to log in to a service website after inputting your PIN correctly, with or without any alert messages.


B. Personal Computer and Email Protection

    1. Take precautions against hackers, viruses, spyware, and any other malicious software when sending and receiving email, opening email attachments, visiting and disclosing personal/financial information to unknown websites, and downloading files or programs from websites.
    2. Increase your protection with proper firewalls, anti-virus software, and anti-spyware software, and promptly install the most up-to-date version to scan your PC from time to time to strengthen the security of your personal computer.
    3. Upgrade browsers and application software to support 128-bits TLS 1.1 or 1.2 encryption or a higher encryption standard, and make sure that the browser option for storing or retaining PINs is unselected.
    4. Remove file and printer sharing options on your personal computer, especially when you have Internet access via cable modem, broadband connection, wireless connection, or other similar set-ups.
    5. Do not use software or programs from untrustworthy sources.
    6. Do not click URLs or hyperlinks embedded in any email, SMS, search engine, or any untrusted source to access the Branch’s website.
    7. Limit the number of people who can use your personal computer and set your own password for your personal computer if it has this feature.
    8. Disable your browser’s "AutoComplete" function. On some browsers, this function remembers the data that you previously entered. Refer to your browser’s "Help" function if necessary.
    9. If any suspicious screens pop up or your computer’s network/traffic is unusually slow, you should log out from your internet service/account immediately and scan your computer with the most up-to-date version of your virus protection software.
    10. Protect yourself from email scams – verify the sender’s identity before you take any action, to avoid being deceived.


C. Accessing BEA Macau Online

    1. Keep your BEA Macau Online account number confidential at all times and do not send account information via email.
    2. Make sure that all other browsers are closed before logging in to BEA Macau Online.
    3. Only log in to BEA Macau Online through www.hkbea.com.mo. Do not click on URLs or hyperlinks embedded in any email, SMS, instant message, QR code, search engine, or any untrusted source to access BEA Macau Online. Do not use/install any software or program to access BEA Macau Online.
      You should access the BEA Macau Branch website by typing www.hkbea.com.mo into the web browser directly or by bookmarking the genuine website for subsequent access.
    4. Each time you log in to BEA Macau Online, please verify your last login date and time, displayed underneath "Hello, [Account no./Your Name]" on the first page.
    5. Always log out and then clear the browser cache after each banking session.
    6. Do not leave your personal computer unattended while using BEA Macau Online.
    7. Access BEA Macau Online with browsers recommended by the Branch.
    8. Do not use public computers to access BEA Macau Online.
    9. Check your bank balance and transaction history regularly. Notify the Branch immediately if you discover any errors or suspicious/unauthorised transactions.
    10. Regularly review and follow security tips issued by the Branch.
    11. Contact the Branch for confirmation immediately whenever a website claiming to originate from the Branch looks suspicious to you.
    12. When you receive an SMS with a One-time Password ("OTP"), verify the accuracy of the transaction details prior to entering the OTP.
    13. Delete any SMS/WAP Push messages that you receive after using BEA Macau Online.
    14. Do not activate any SMS forwarding function which is provided by your mobile network operator. If your computer has been infected with a malicious program, a fraudster can capture your personal information, e.g. password, account number and phone number, when you access our services with your computer. The fraudster can then activate the SMS forwarding service and divert the one time password ("OTP") SMS to their mobile device. As a result, the fraudster can draw funds from your account with your login credentials and OTP received from the Branch.


D. Other Notes

    1. Check your bank statements regularly and notify the Branch immediately if you find any errors or suspicious/unusual transactions.
    2. Keep your ATM Card, bank statements, cheque books, other important documents, and any security devices for accessing BEA Macau Online in a safe place. If you want to discard any documents that contain your personal information, destroy them first.
    3. Under no circumstances shall the Branch use an email, an SMS, phone call, or any other method to ask for your personal information, such as your password, OTP, ID Card number, passport number, date of birth, account/credit card number, credit card expiry date, telephone number, or BEA Macau Online account number, etc. In addition, the Branch or our agents/business partners will not send emails to you with embedded hyperlinks or QR code presenting hyperlinks to the transactional websites or Mobile Banking applications. The Branch will not ask you to access the Branch’s website by clicking hyperlinks attached to any email or SMS.
    4. Check the website’s Privacy Policy Statement before providing personal data via the website.
    5. Your mobile phone number, email address, and correspondence address must be up to date at all times in order for you to successfully receive notifications from the Branch. You can update your information at the Branch.


In the event of any conflict between the English version and Chinese version, the English version shall prevail.