Security awareness
At Jadwa Investment, the security of your personal information is important to us. To help you protect your online privacy, we would like to inform you about common information security threats online.
Phishing
Phishing is a criminal activity that attempts to fraudulently acquire sensitive information, such as usernames, passwords and account details, by masquerading as a trustworthy friend or company entity, such as a bank. Phishing is typically carried out using email or instant messaging and often directs users to give details at a fake website; phone contact may be used as well.
Phishing is an attack against a person’s identity. Oftentimes referred to as “identity theft”, the attacker wants to access and copy your personal information and will attempt to do so by using various techniques including, but not limited to, fake websites, fake emails and/or pop-up windows.
Prevent phishing attacks and scams
The following are examples of ways that you can prevent phishing attacks and scams as you access Jadwa Investment (i.e., www.jadwa.com) and other sites online:
- Please note that Jadwa Investment will never send you an email asking you to respond with your personal information.
- If you have recently responded to an unsolicited email in which you provided any personal information regarding your Jadwa Investment account and you now suspect it may not have been Jadwa Investment, contact us immediately so that we may take steps to protect your account.
- Beware of email scams. To prevent phishing, ensure that you are connecting to the correct URL for Jadwa Investment (i.e. www.jadwa.com).
- Avoid using “public” computers or network connections, especially when reviewing your financial information. In the event that you use a “public” computer or network, delete all personal files, cookies and the internet cache when you finish.
- Protect your laptop and other portable electronic devices from being stolen; enable hard disk encryption and require a password for access.
- Never give out personal or financial information to anyone in response to a request to update, and validate or confirm your account information unless you have initiated the contact and know who you are dealing with.
- Monitor your financial accounts regularly for suspicious and/or unauthorized activity.
- Do not click on links in chat rooms or messages or call a phone number provided in suspicious emails, especially if the request is to update your information.
- Do not reply to emails that look suspicious or are asking for personal information such as your account number or password.
Social Engineering
Social engineering is the act of obtaining or attempting to obtain otherwise secured information by “conning” an individual into revealing their secure information. Social engineering is successful because victims innately want to trust other people and are naturally helpful; however, victims are tricked into releasing information that they do not realize will be used to attack a computer network. For example, an employee in an enterprise organization may be tricked into revealing their username and password to someone pretending to be from the IT support team. The social engineer can use that stolen information in conjunction with other stolen data to get closer to corrupting the enterprise’s network.
Phishing relies on social engineering to lure victims into revealing information; phishers succeed because of the human tendency to associate the brand names with trustworthiness and security.
Virus Spyware
Virus spyware is the most common security threat facing users of online services today. Viruses, spyware, trojans and worms can inflict varying degrees of damage on users, depending on their type and the scope of the attack. To protect your PC from vulnerability, ensure that you have up-to-date antivirus and anti-spyware software installed and enabled on your PC at all times.
Identity Theft
Identity theft is a crime in which someone wrongfully obtains access to your personal information and uses it in a way that involves fraud, deception and/or deliberate assumption of another person's identity, usually for their economic gain. Unfortunately, most identity theft victims don’t realize they have been targeted until the damage has been done; this may result in unknown charges or withdrawals on Jadwa Investment accounts, or calls from collection agencies, among other consequences.
Password protection
In order to protect your identify online and to help safeguard your Jadwa Investment accounts from criminal access, keep your password confidential and change it frequently. We would advise you, for your own security, not to use common information such as your birthday, telephone number or a recognizable part of your name as your password. Secure passwords, at a minimum, should include at least 8 characters, upper and lower-case letters, numbers and symbols (e.g., Thi$is$3cure!#)
Security guidelines
Jadwa Investment clients play a primary role in ensuring their own online information is secure. We recommend that you adhere to the following security guidelines:
- Keep your Operating System updated with the latest security updates and patches.
- Enable your antivirus and anti-spyware software and ensure it is configured for regular automatic updates.
- Use properly configured Firewall software.
- Review your Internet security settings in the browser.
- Do not disclose your personal information and password to anyone, including Jadwa Investment employees.
- Keep your passwords secret. Remember, it should never be shared with anyone.
Report suspected security incidents
If you suspect that there has been an unauthorized breach of your account(s), or that an online transaction has taken place that you did not initiate, you should notify Jadwa Investment immediately by contacting your relationship manager, or contacting us at info@jadwa.com or by calling +966 11 2791111.