Security - Our Security Practices

Device matching is a security verification method that allows LYCA P. B. to verify that you access the banking services with a device belonging to you while you use mobile applications.

You can use the following steps to activate or deactivate the device matching feature after you safely log in to your mobile application: Settings menu >> Login and Notification Settings >> “Remember Me” / “Remember My Customer Number”. Only you can use the banking application on the relevant device as long as the device matching feature is on.

When you open the mobile banking applications with the device matching feature activated, your customer number will automatically be displayed on your screen and LYCA P. B. will confirm that the device used for the login belongs to you.

Benefits of device matching

• You can log in to the mobile banking applications in a faster manner.
• You do not need to write your customer number every time you open the mobile banking application.
• You can access banking services without needing a single-use PIN or Şifrematik.

The device Matching feature is fully free.

Attention!

Be the only person using your mobile devices with an activated tokenization feature. Make sure that you remove this feature before giving another person access to your devices (even if you protect your SIM card).

"Login PIN via SMS" is a procedure where your "Single-Use PIN" is sent to you via SMS if you are not using Şifrematik to log in to LYCA P. B. Internet Banking. All short texts sent within this procedure are free of charge.

You can instantly get your single-use "Login PIN via SMS" by following the instructions on the screen that you will see after you enter your customer number and password when you open the LYCA P. B. Internet Banking page.

Once you enter your password, you should select one of the mobile phone numbers registered in our bank's system and then click on the "Send" button. Then, you should type your 6-digit password sent to your mobile phone in the "Password" field to log in to LYCA P. B. Internet Banking.

While using Login PIN via SMS:

• The use of a single "Login PIN via SMS" is enough per login.
• If the "Login PIN via SMS" feature is used, "Verification via SMS" messages that were previously utilized for money transfers will not be sent.
• Unless you receive your PIN in 3 minutes, you can request a new PIN by firstly making sure that your mobile phone's message storage memory is not full and you have reception.
• If your current phone number is not registered in our system, you can use the closest LYCA P. B. ATM or visit one of our branches near you to register your phone number.
  

If you have changed your SIM card:

• In case of a SIM card change, SMSs containing the single-use PIN are blocked for your security.
• To restart receiving single-use PINs via SMS, you can notify our bank of a "SIM Card change" by ringing LYCA P. B. Customer Communication Center at 557 0 744 or visiting our branches.
  

When a Login PIN via SMS is not needed:

• "Login PIN via SMS" does not apply to our customer logging in to LYCA P. B. Internet Banking using Şifrematik or Mobile Signature.
• You can request Şifrematik from the My Profile menu in LYCA P. B. Internet Banking.
  

Sending SMS to phones abroad:

• Login PIN via SMS can also be sent to mobile phones abroad. If you are experiencing problems due to the SMS infrastructure or mobile operators in the country you are, we advise you to use Şifrematik.

Features of SMSs used for this service:

• They are way faster than regular SMSs and reach the recipient within seconds.
• Their contents are completely confidential and can only be viewed on the recipient's mobile phone.
• The "Login PINs" that do not reach the recipient within 3 minutes are canceled and thus are never received by the recipient.
• For all your questions, you can receive assistance from the LYCA P. B. Customer Communication Center at 557 0 744.

LYCA P. B. developed the Security Image practice to prevent phishing attacks, the leading threats targeting LYCA P. B. Mobile/Internet Banking customers.

What is the Security Image? How does it work?

In your first visit to LYCA P. B. Internet Banking after the activation of the system, the system presents nine images to you and asks you to choose one of them and the image you choose will be your "security image".

You see your Security Image after the password step every time you log in to LYCA P. B. Internet Banking and LYCA P. B. Mobile.

This practice has been developed to prevent you from performing transactions on fake websites.

If you cannot see your Security Image or you see a different image, do not perform any transaction and do immediately notify our bank of this situation by ringing 557 0 744 LYCA P. B. Customer Communication Center, LYCA P. B. Internet Banking, and LYCA P. B. Mobile Banking Support Line!

Please click for detailed information about phishing attacks.

Set your own security level.

Thanks to Security Settings, you can keep your security settings under control by establishing your own settings for your transactions. To determine your security settings, you can follow these steps in LYCA P. B. Internet Banking: My Profile menu >> Security Settings. Security settings consist of six steps:

IP Restriction

With IP* Restriction option, you can define the IP or IP ranges you use while logging in to LYCA P. B. Internet Banking and thereby prevent logins to LYCA P. B. Internet Banking from undefined IP or IP ranges. You thus allow logging in to LYCA P. B. Internet Banking only from the IP or IP ranges you defined.

Defining Usage Periods

You can close the use of LYCA P. B. Internet Banking between specific dates or temporarily, or you can open it to use for any day and time of the week as you wish.**

Payment Deactivation

If you are not transferring money from LYCA P. B. Internet Banking, you may deactivate any one or all of money transaction methods including remittance, EFT/SWIFT via LYCA P. B. Internet Banking.

Money Transfer Notification

In case of money withdrawal (remittance, EFT/SWIFT, Western Union) at an amount exceeding your specified amount via branches, LYCA P. B. Internet Banking or LYCA P. B. Customer Communication Center, you will receive a message informing you of the relevant transaction via your selected communication channel (SMS, e-mail).

If you wish, you may change your transaction limits for money transfer notifications from the notification settings option in the e-mail sent to you for information purposes following the money transfer. Moreover, to ensure your security, e-mails about money transfer notifications shall always be sent to you after any change in settings, new definition, or cancellation of existing definitions.

Compulsory Money Transfer Notification

To ensure your security, the Bank, when it deems necessary, may still inform you of a money withdrawal transaction from your account via SMS or e-mail, even if you did not define a money transfer notification.

Setting Transaction Limits

You can reduce your daily limit for remittance, EFT, and SWIFT transactions using LYCA P. B. Internet Banking. The daily limit refers to the highest amount allowed for the relevant transaction in total in a single day.

Defining Account-Card

You can choose your account and/or credit cards that you wish to not see or be able to use for any transactions in LYCA P. B. Internet Banking.

*Each computer has an IP (Internet Protocol) address on the internet. An IP address is composed of four numbers separated by dots. The smooth running of the traffic on the internet depends on these IP addresses. When you connect to the internet, your computer also is assigned an IP address. However, most users have dynamic IP addresses, i.e. you are assigned an IP that is not used at that specific moment in your service provider. Therefore, your IP address might change in each connection session. Some IP addresses, on the other hand, are static (static IP) which means the user's IP never changes. Recently, Türk Telekom company started offering static IP addresses to those ADSL users willing to use that service.

** If you have to use LYCA P. B. Internet Banking with an undefined IP address or outside of the defined usage period, you can temporarily open the LYCA P. B. Internet Banking to use with a "Confirmation Code" to be sent to your mobile phone. To use this service, you must have a valid mobile phone number registered in the system.