General advice

Check no one else is looking at your device while you're using online banking services.

When you leave the online banking service, log-off and close your browser.

Don't use a public computer to access your online accounts, you can't be certain it's secure.

Log in to check your account and tell us straight away if something is wrong.

Make sure we have your correct contact details. Check your email inbox for new messages.

Use an email account that is not shared with other family or friends.

Passwords

Don't pick a password that's easily guessed such as your phone number or birthday. We have rules in place that make sure the password you choose is strong.

Never reveal your password to anyone or write it down.

Using Third Party Providers

What is an authorised online third party provider?

A third party provider (TPP) offers different services to manage your money. For example, an app that gives a view of your accounts with different banks. To use these services you must give the TPP consent to access your account data.

There are three types of TPP:

  • Account Information Service Provider (AISP). A third party you let view your account. This might be alongside your payment accounts from other banks and building societies.
  • Card Based Payment Instrument Issuer (CBPII). A third party you let check if your account has available funds when making a payment.
  • Payment Initiation Service Provider (PISP). A third party you let make a payment on your behalf.

Find out more www.ybs.co.uk/openbanking at YBS.

When using an authorised TPP, take the following steps to protect yourself:

  • Check with us if you can access your account through a TPP, before providing any account details. You can find a full list of eligible accounts on our payment account services page.
  • Check with the relevant regulator whether the TPP is genuine before you use it. In the UK, this is the Financial Conduct Authority (FCA).
  • Ensure you use the genuine TPP’s website. Fraudsters often set up fake versions of websites to get information.
  • If you're contacted from a TPP about account access or a payment which you have not authorised, call YBS.
  • If the TPP asks for details they don't normally ask for, check with them that this is normal.

How can you allow them to access your account?

You must have registered for Internet Banking to use an authorised TPP. You must give them specific consent to access your account details. You can share with them your internet banking login details. This could include your user ID, password and memorable information. They can enter your user ID, password and memorable information on your behalf. If that happens, that means you’ve agreed to make the payment.

Check all account holders on a joint account agree before giving a TPP access.

How can you stop an online third party provider from accessing your account?

To do this, you must change your internet banking login details. You should also speak to the TPP and ask them to remove these details.

I’m having issues with a payment I made through a third party, how do I resolve this?

Please contact YBS about any issues with payments made through a third party.

Anti-virus

You should use anti-virus software to protect your device. Anti-virus software reduces the risk of a virus stealing your information.
Set up your software so it updates itself regularly.

Firewalls

A firewall controls the traffic between your computer and the internet. Firewalls are very effective and make it hard for criminals to attack your computer. Whenever you use the internet you should have a firewall in place.

Spyware

Spyware or ad-ware is a growing problem. Spyware collects information about you and your browsing. People are often tricked into installing spyware programmes.

There are many anti-spyware programmes available. It's a good idea to use an anti-spyware programme to make sure your computer is clean.

What you should do to protect yourself

Never reveal your password to anyone except an authorised Third Party Provider, TPP. Find out more about TPPs here.
Use a unique and memorable password.
Don’t use a password that someone could guess easily. Change your password straightaway if you suspect someone else might know it.
Check we have your correct phone number in case we need to contact you about your account.
If someone has stolen your phone or tablet device, contact us on 0345 1200 805. We will deregister your mobile app and ensure your account is safe.
Log off from the YBS website or YBS app when you have completed your transaction.
Keep your computer updated with current anti-virus software. Check regularly for the latest browser versions and relevant security updates. Use a firewall to protect from hacking attacks.
Protect your devices by turning on automatic updates and backing up important data.
Do not send us any confidential account information via email.
Check we have your correct email address and keep an eye on your inbox for new messages.
Beware of phishing emails or texts. Do not respond to these messages or open any links or attachments from them. If you get a message you were not expecting, please contact us using a number you have checked is genuine. Click here for more information about phishing scams.
If you or someone you know might be the victim of financial abuse, download UK Finance’s It's your money leaflet. The leaflet has lots of information on what to do when financial abuse happens and the support you can get.

How we protect you online

An overview of the security measures we take to protect you

Online security - report an issue

You can report an online security issue using our form