Invest

Two-Factor Authentication strengthens security by requiring a combination of two different types of authentication to login to an account. The first step of authentication is to provide the login ID and password followed by the second step, a one-time password obtained from "Security Device" or logon Shacom Bank Mobile App and confirm designated online transaction via Biometric Authentication and self-defined Security Passcode with two-factor authentication.

In regard to the guideline from the Securities and Futures Commission (SFC) to strengthen security control related to internet trading services, all customers are required to use two-factor authentication for logging on internet trading accounts effective from 27 April 2018. The Bank adopts the "Security Device" or "Mobile Security Token" as two-factor authentication tool.

Registration is required for "Mobile Security Token" Service. You may visit any of our branches in person to register for use "Mobile Security Token".

No. Once you have successfully logon to Internet / Mobile Stock Trading Services, it will not be required to use "Two-factor Authentication" again for transactions. However, you will be requested to recomplete "Two-factor Authentication" if you try to logon to Internet / Mobile Stock Trading Services again after logging out.

Please visit any of our branches to arrange for application. If you wish to learn more about our Bank's Security Device, please click here. If you wish to learn more about our Bank's Mobile Security Token, please click here.

If you already hold a valid and activated Security Device, the two-factor authentication to logon will be effective within 3 business days after the application. In addition, starting from 27 April 2018, apart from inputting the current user ID and password, you need to use the Security Code generated from the Security Device in order to logon to Internet / Mobile Stock Trading Services.

For Joint account or Corporate account, please assign one designated securities account holder of Joint account or authorized person of Corporate account to apply for and possess Security Device for Personal Internet Banking for logging on Internet / Mobile Stock Trading Services. Authorized person of Individual account or Joint account is not eligible to apply for and use the Security Device. In addition, Security Device for Corporate Internet Banking is not applicable to Internet / Mobile Stock Trading Services.

Yes. If you choose to disable the service, please visit any of our branches to complete the form. However, please note that, starting from 27 April 2018, all customers have to use the Security Device as a two-factor authentication tool for logging on to our Internet/Mobile Stock Trading Services. Thereafter, the service cannot be disabled.

We provide an efficient system and network security which includes:
 

• Secure Socket Layer (SSL) with 128-bit encryption and Firewalls
• Identification of User ID and Password with compulsory change of password upon the first time login.
• Automatic logoff after the inactivity of your Internet and Mobile Stock Trading Account for 30 minutes and 15 minutes respectively (Stock quotation function is not accountable for inactivity. To avoid automatic logoff, you can use other enquiry functions apart from stock quotation during online, including order history, portfolio, e-message and etc.).

In order to ensure that your personal information will not be disclosed, you can refer the following instructions:

(a) Must not disclose your User ID and password to anyone else.
(b) Destroy the original printed copy of your password.
(c) Avoid using easy-to-guess password such as your birthday or phone number.
(d) Change your password periodically.
(e) Check your account balances and statements regularly.
(f) Do not leave your computer unattended and promptly log off from service.
(g) Remove the temporary files stored in the memory or in the hard disks of the computer shared with others.
(h) Avoid any unauthorized capturing of your password by attackers by carefully handling doubtful e-mails received or accessing suspicious websites.
(i) Type the exact Website of our bank (www.shacomsecurities.com.hk).

Our bank has adopted the latest Internet security measure, EV SSL Certificate (Extended Validation SSL Certificate). If you are using the following browsers to access our Internet Stock Trading services, the colour of the browser address bar will be changed to green and the bank name displayed.

• Internet Explorer 7.0 or above
• Firefox 3.0 or above

If you are not using the above browsers, on the logon page you will see a small lock. If you double-click the lock, a server certificate issued by VeriSign will appear and the details and validity of the certificate will be shown.

Change your phone trading password from time to time. Your may visit any one of our branches to reset your password.