Security & Privacy

Voice ID is a voice-based method for the Credit Suisse Client Service to verify your identity when you call. It captures and stores your unique voice characteristics, such as speech tempo, volume and frequency, as a digital voiceprint, comparable to your unique fingerprints.

Once enrolled, the next time you call the Credit Suisse Client Service, Voice ID will compare your voice characteristics with the voiceprint’s in order to confirm your identity. This reduces the time needed to begin resolving your query and enhances the level of security.

This feature is exclusively available to clients domiciled in Switzerland (excl. businesses) when calling the Credit Suisse Client Service or Online Banking Support.

How is my Voice ID data handled?

Your Voice ID data is stored in the form of a code value, on secure internal Credit Suisse servers in Switzerland. No audio file or content of the conversation is recorded for Voice ID. Your Voice ID data is used solely for authentication purposes and you always have the option to delete it.

SecureSign is a security procedure for logging in or performing security-relevant activities, in which you are shown a graphic that only you can decipher and confirm. The SecureSign app is used for decryption.

Credit Suisse places great importance on security in Online Banking. Guaranteeing a high standard of security constantly requires us to implement the latest security technology.

SecureSign can be used for logging onto Online Banking, as well as on most other Credit Suisse channels with a login. More information about the SecureSign login is available here.

After you receive the SecureSign letter, download the SecureSign app from the App Store or the Google Play Store.

Go to the Online Banking home page on your computer and enter your user ID and password.

Select the «add a new SecureSign device» function and follow the instructions.

At the end of the setup process, enter your recovery number to set up additional devices.

To use more than one device to log in with your user ID, after logging on to Online Banking with Credit Suisse Direct you can access your "Security and Privacy" settings via the shield icon and then add more devices under "SecureSign Devices." You can find instructions here (PDF).

After adding a device, you are required to log in again to set it up. To do so, you will need the yellow SecureSign graphic from your SecureSign letter that you received by post after your initial registration.

We will be happy to guide you through the setup process on two mobile devices. Please follow these instructions. There are also video instructions available.

Each new contract contains SecureSign for login security. You can access up to eight contracts on a single device already set up for SecureSign. In the SecureSign App on your mobile phone, click on «Menu» --> User Accounts --> «Add Account»

If you no longer have a device set up for SecureSign and you have provided your mobile phone number as a security feature, then log on to Online Banking with your user ID and password. On the login page click on «Add a new SecureSign device.» Start the setup in order to register your new device.

If you did not provide a mobile phone number as a security feature, this link is not available to you. In this case, please contact our support center.

+41 (0)844 800 888

After registration, you will receive a letter by post a few days later. It contains the yellow SecureSign graphic, which you will need in order to complete your registration. Keep this letter in a safe place so you can register future devices.

The first time you log in, go to the login page and enter your contract number and the password from your letter in order to start the registration process.

After logging into the Credit Suisse Direct Online Banking tool, access your «Security and Privacy" settings via the shield icon and then order a copy of the SecureSign letter under «SecureSign Letter».

If you no longer have the SecureSign device that you previously set up, and have provided your mobile phone number for the recovery process, you can go to the login page with the SecureSign graphic and click on «Add a new SecureSign device». Start the setup process to order a new SecureSign letter.

You can set up a new SecureSign device on the login page by registering a mobile telephone. This guarantees you secure access to your Online Banking account in the event that you no longer have access to your SecureSign device.

After logging in to Credit Suisse Direct Online Banking, go to your "Security and Data Privacy" settings with the shield icon and register your telephone number under "Recovery Mobile Number."

You can change your password directly in Online Banking. After logging in, please click on «Security and Privacy» (sign symbol) and then on «Change Password.»

If you have forgotten your password, you can request a new one directly online. We will be happy to guide you through the process. To do so, click here. Then, on the Online Banking login page, click on "Forgot your password?" under the login box.

• After logging in to Online Banking you can manage your SecureSign devices and set up an additional device under the shield icon at the top right.
• If you previously provided a recovery number, you can also start the process on the login page for Online Banking under "Add a new SecureSign device."

You can find step-by-step instructions as a PDF and video instructions here.

To avoid any harm online, the best way is to stay alert and to know where to look:

1. Phising

Some fraudulent emails look deceptively real. However, there are some points that indicate that a malefactor has cast his fishing rod. Most of the time, you won't find all of these tips, so already one should make you suspicious.

• What is written before the email-address does not always correspond with the address itself. Therefore, check the email address carefully for suspicious emails.
• Don’t trust emails with general addresses/speech like “dear Customer…”.
• Be suspicious of emails requiring “immediate” action or otherwise try to put pressure on you.
• Never answer email requests for passwords, pin codes, official document numbers, name and address details, account details, etc.
• Always inspect links by moving your mouse pointer above it to see its true destination. On Mobile you can point it with your finger and wait to see it.
• Be suspicious of any email with grammar or spelling mistakes.
• Only open email attachments sent by addresses you trust and which you are expecting. Even attachements from friends or family could contain malware - their accounts could be hacked or infected.

Phising test (EBAS)

2. Forged payment

There are different ways of making payments. This is a risk. Fraudster and criminals may try to impersonate you and steal your money.

How to spot it:

• Your bank account balance is lower than expected
• You do not recognize some payments / beneficiary’s
• You see a payment through a channel, you never use

How to avoid it:

• Inspect your monthly bookings and contact us in case of suspicious activities
• Manage your payment channels and block the ones you never use

3. Social media

Please be aware, that all your personal data you put on social media can be viewed by a bigger audience than we you potentially are aware of. And it can be used to harm you or your environment in different ways.

Take a look at your security settings, and keep control of your information.

More information about social media: 

And if you want to continue to educate yourself about these questions, here are the different information campaigns provided by the swiss government:
Cybersecurity is S-U-P-E-R 
iBarry 
National Cyber Security Centre
EBAS

Companies are (unfortunately) often targets for cybercriminals. Here are some known ways:

• CEO fraud

Cybercriminals send savvy emails impersonating the company CEO or other company executives and ask employees, typically in HR or accounting to help them out by sending a wire transfer. Often referred to as Business Email Compromise (BEC), this cybercrime uses spoofed or compromised email accounts to trick email recipients into acting.

• Technical Support Scam

You get a call from a person claiming to be a technical support employee and tells you that a virus has been detected on your computer.

During the telephone call, the caller will ask you to download remote access software that will give them access to your computer. This is how the alleged tech support employee can access all of your personal data undetected and also download malware.

• Ransomeware

Ransomware is a criminal moneymaking scheme that can be installed through deceptive links in an email message, instant message or website. It has the ability to lock a computer screen or encrypt important, predetermined files with a password.

More information: 

How to protect you and your company:

• Train your employees regarding the above mentioned topics and ensure (on a regular basis) that your employees are aware of such criminal schemes
• Be aware of available data about your company online and limit it, where possible and expedient.
• Define and implement a payment release process involving double checks and joint signatures.
• Regularly create back-up’s of your data, keep your software up-to-date (incl. plugins) and use antivirus software/firewall

And if you want to continue to educate yourself about these questions, here are the different information campaigns provided by the swiss government:
Cybersecurity is S-U-P-E-R 
iBarry
National Cyber Security Centre
EBAS 

Navigating in the cyberspace can be easy at first glance. However, there are a lot of threats everywhere. These can be strongly reduced by following some simple rules:

• Use strong passwords
• Use multi-factor authentication
• Learn about the different scams
• Protect your sensitive personal information
• Back-up your data
• Use an antivirus and a firewall software
• Keep your soft- and hardware up-to-dateStay alert!

And if you want to continue to educate yourself about these questions, here are the different information campaigns provided by the swiss government:
Cybersecurity is S-U-P-E-R
iBarry
National Cyber Security Centre
EBAS
 

Here is a list of the most common money related scams and how to spot them:

1. Marketplace scams

There are numerous lowest price offers on the Internet. They rarely deliver on their promises: You order, you pay and then you wait for a package thatwill never arrive.

2. Money mules

Be wary of lucrative job adverts promising quick cash. You could be used by criminals as money launderer and be liable to prosecution.

3. Investment scam

It involves fraudulent investments. To this end, brazen financial service providers lure customers willing to invest with promises of high yields. Yet above all, those supposedly large profits hide high risks – and frequently even illegal machinations.

How to spot these scams:

• Dubious logos or names
• Extremely low prices or offer with same product picture is available on same market place two times: once with a higher price – most probably original offer – and once with a lower one – criminal copy)
• Spelling and grammar mistakes
• Inflated customer reviews
• There is no such thing as fast, easy, risk-free money
• Never trust anyone you only know virtually
• You are asked to receive money into your own bank account
• You transfer it by letter, parcel, cryptocurrency or money transfer services
• You have to pay some “administration fees” to get a huge amount of money (lottery wins)

And if you want to continue to educate yourself about these questions, here are the different information campaigns provided by the swiss government:
Cybersecurity is S-U-P-E-R
iBarry
National Cyber Security Centre
EBAS

What is social engineering?
Social engineering is a technique used to scam people. Criminals use psychological tricks to mislead us in order to convince us to divulge confidential information, to get us to send them money, or to gain access to the IT networks of the companies we work for. Here are two examples of these scams:

1. Technical Support Scam

You get a call from a person claiming to be a technical support employee and tells you that a virus has been detected on your computer.

During the telephone call, the caller will ask you to download remote access software that will give them access to your computer. This is how the alleged tech support employee can access all of your personal data undetected and also download malware.

2. Romance scam

Anyone looking for love will often turn to social networks to find suitable partners.

Fraudsters of both sexes exploit this trend for their own financial gain. They set up fake profiles which they then use to contact singles via Facebook or other social media platforms.

It doesn’t take long before the fraudster begins to declare their undying love, and their chosen victim is expertly tricked into falling head over heels.

How to spot a social engineering scenario?

They often play on our emotions in a way that puts pressure on us and inhibits our ability to think critically.

And if you want to continue to educate yourself about these questions, here are the different information campaigns provided by the swiss government:
Cybersecurity is S-U-P-E-R 
iBarry
National Cyber Security Centre
EBAS