1. Pay attention to incoming messages and learn to recognize fraud.

• E-mails from Zagrebačka banka always contain your first and last name and information about your branch office. The Bank will never ask you to provide: password, credit/debit card number and PIN.
• Do not open unexpected e-mails, text messages or chats. Never open attachements or click on the links.
• Do not reply to e-mails, text messages, chats or links by providing your credentials (such as your user name, password, PIN, security token…).
• Never give your credentials to anyone over the phone.

2. Always be extra careful when using passwords.

• Never give your passwords to third parties, particularly m-token passwords required to authorize banking transactions.
• Make sure to always remember that a banker will never ask for your password or contact you through a messaging app.
• Do not use the same password on different websites
• When required to provide personal information and password, make sure that those requirements match the service/goods you are using/buying (for example, when downloading a videogame, being asked to give access to your contact list, microphone and/or photos is not usual practice).
• Update your smartphones, tablets and computers; use antivirus software for protection and secure access with a password, fingerprint, digital recognition or face recognition

3. Try to remember your codes and passwords.

• Never save them in your smartphone (either as text or image file).
• Never give browsers permission to automatically save your usernames and passwords.

4. Take advantage of different services offered by your Bank.

Checking your current balance, your accounts or card transactions is made simple through online banking on your mobile app (m-zaba), the internet (e-zaba), at ATMs or directly at a branch office.

5. When making purchases online, always pay attention to where and how you buy.

• Check the credibility of the website and use only official apps.
• Use only secure, password protected links.
• When possible, avoid free and public Wi-Fi. Never use it for online shopping, accessing your designated area on the Bank’s website or cloud storage (like iCloud or Google Drive).

What are phishing messages?

Phishing messages are a type of online fraud in which the sender, falsely claiming to be a legitimate organization, sends out e-mails in order to steal sensitive information.
An example of phishing are e-mails seemingly coming from Zagrebačka banka, that are in reality not sent by the Bank. Example: sender’s address is noreply@zaba.com.
Even though such messages will display Zagrebačka banka’s logo, they are not sent by Zagrebačka bank! These messages seeming originating from the Bank contain the kind of links and attachments the Bank would never send you, and often contain grammar and spelling mistakes.

It’s important to remember:

• Do not click on links or open attachments from such messages.
• Do not reply to such e-mails.
• Delete the e-mail at once.

In case you receive a suspicious call or an e-mail demanding secret information necessary to authorize banking transactions, be sure to let us know at 01/3789 785 or by a-mail at ezaba@unicreditgroup.zaba.hr.

Remember!

Zagrebačka banka sends messages and other information through official Zagrebačka banka channels only and never requests passwords to your online banking services.
Read Safety recommendations and learn about the safe use of e-zaba and how to protect yourself from online fraud.