Protect yourself and your finances against phishing, fraud, and scams by practicing the following:

NEVER	ALWAYS
NEVER share your debit card & credit card details, AmOnline username and AmOnline password to anyone, inclusive your immediate family members.	ALWAYS change your AmOnline password and Card PIN regularly
NEVER enter above details to phishing website. NEVER access AmOnline web using public computer or someone else laptop.	ALWAYS ensure the AmOnline URL is “https://ambank.amonline.com.my/web/”. ALWAYS access AmOnline internet banking from your own personal device
NEVER log on to AmOnline from link shared to you via email, social media (inclusive WhatsApp), phone call or text message. Banks will never share any link for you to log on to your AmOnline	ALWAYS verify the security image is yours whenever you log in ALWAYS bind your AmOnline account to your own device. NEVER bind your AmOnline account to your immediate family members or friends
NEVER install any AmOnline apk from third party website.	ALWAYS download from legitimate stores: Apple App Store, Google Play Store or Huawei Gallery.
NEVER log on to AmOnline from jailbroken / rooted devices or devices running on unsupported OS version. Refer to minimum system requirements to use AmOnline for details.	ALWAYS check your transactions & notifications regularly. If you find any suspicious activities or transactions to your AmOnline account, proceed to deactivate your AmOnline access via the "Deactivate AmOnline" function

Click here for more security tips.

• 24x7 monitoring of suspicious transactions that may be potentially fraudulent by our surveillance team.
• To safeguard your account when you bind your AmOnline account to a new device, you will need to serve a pre-defined cooling off period. Refer to “Cooling-Off Period” FAQ for more details.
• In the event of any abnormal activity in your account(s), we may hold your transaction (transaction will be under ‘Pending Verification’ status) and contact you to confirm if the transactions are legitimate before it is released to the beneficiary.

If you notice any suspicious AmOnline activities or unauthorised access, DO NOT PANIC! You can safeguard your bank account with these steps:

1. Go to your AmOnline app or web.
2. Tap or click on "Kill Switch" > "Deactivate AmOnline".  
3. Tell us what happened.
4. Key in your details and select “Yes, Deactivate” to deactivate.

By doing this, your AmOnline account will be suspended temporarily to protect it from any unauthorised access. Refer to “Kill Switch” FAQ for more details.

If you’d like to block your credit card or debit card too, please do so before “Deactivate AmOnline”. 

As your registered device is your only device to authorise transactions, receive important notifications, and contains your sensitive financial information, keeping your device safe adds another security layer to protect yourself from unauthorised access and potential frauds.

Here are a few things you can do:

• Always have the latest version of AmOnline app and device OS.
• Do not share your password with anyone.
• Do not click on any suspicious links from messages, emails and websites.
• Monitor your account balance and transaction history regularly.

 

• Your username must have a combination of uppercase, lowercase, and numbers with length between 8 to 15.
• Have different username for each online account.

To prevent unauthorised access to your AmOnline account, refer to DO’s and DON’T’s below:

DO	DON'T
Create a password combination of Uppercase letters, Lowercase letters, At least a number, At least one special character (e.g !@#$%^&*()-+)), and 10 - 18 characters long	DO NOT choose a password which is the same as your username
Memorise your password	DO NOT choose your name, date of birth or your phone number as your password
Change your password frequently *Note: AmBank encourages you to periodically update your AmOnline password for better account protection.	DO NOT share your password with everyone
Create a password that is hard to guess	DO NOT store your password in internet browser

Your password must have a combination of uppercase and lowercase letters, numbers, special characters (e.g. !@#$%^&*()-+) and 10—18 characters long. Try the following method but do not copy the examples:

Think of a short sentence:

E.g: Running in the rain -> ruNn1ng!n5heR@in
E.g: I love my parents -> 1L@v5paRent$

 

• Change your password regularly. You can check your last password change at AmOnline app > tap on “More” and you can see the last change of your password.
• Always verify your security image during login. DO NOT proceed to enter your password if the security image displayed is incorrect.
• Always use supported mobile OS versions and web browser versions.
• Do not use third party keyboards.
• Check your account regularly.
• You can refer to the most common types of banking scams at Security Alerts at AmBank website.

 

 

 

The minimum system requirements are:

App:

• Your device must not be jailbroken or rooted.
• iOS version 15 and above
• Android version 12 and above

You can check your mobile device OS version in your phone Settings.

Web:

• Google Chrome version 130 and above
• Apple Safari version 17 and above
• Mozilla Firefox version 131 and above
• Microsoft Edge version 130 and above
• Opera version 114 and above 
• Samsung Internet version 24 and above 
• Huawei Browser version 15 and above 

We highly recommend you unbind your AmOnline profile at AmOnline web. Log in to AmOnline web > Go to Settings > Select “Sign-In & Security” > Click on “My Device”> Click on “Remove Device” button.

As part of security control, newly registered AmOnline customers are only allowed to perform transactions up to the pre-defined limit within the pre-defined period set by the Bank.

If you have just bound your AmOnline profile to your personal mobile device, you will need to serve pre-defined cooling-off. This is a security measure to temporarily restrict transactions via AmOnline. Full access will be restored automatically after the cooling-off period has ended.

As part of security measure, for any increased transaction limit, you need to serve a 12-hour cooling-off period. Once the cooling-off period is over, you will get notified via push notification and email. Meanwhile you can still transact with your previous limit.

In the event of any abnormal activity in your account(s), we may hold your transaction and contact you to confirm if the transactions are legitimate before it is released to the beneficiary. With the buffer time provided before the transaction is released, you may have the opportunity to identify the transactions that were not authorised by you.

For all transactions conducted on AmOnline, you will receive a status update via push and email notifications. Additionally, you can review your transactions by filtering the ‘Pending Verification’ status in Recent AmOnline. If a transaction is under ‘Pending Verification’, our operation support team will contact you to verify the details before proceeding with its release.

If you identified any transactions that were not authorised by you, please call our Contact Centre at +603-2178 8888 (Monday – Sunday, 7.00 AM to 11.00 PM) for assistance, or inform our operation support team when they reach out to you for verification to proceed with the cancellation.

As part of the exercise to enhance your device’s security, AmOnline App will scan your device for malware and unofficial apps. 

Malware refers to malicious software that can put your banking information and online banking security at risk.    

 

It means any applications that you installed from unofficial sources like unofficial apps stores or 3rd-party websites, including modified APK files. These risky applications may contain harmful or altered code that could compromise your devices.  

Yes, you may continue using the AmOnline App. However, please be aware that by doing so, you acknowledge and accept the potential security risks that may arise. 

To protect your sensitive banking information, AmOnline App blocks screen mirroring and recording features. This helps prevent unauthorized access or capture of your personal data. 

 

 

•  Your personal details (name, identification number). 

• Suspicious transaction details (bank account number, transaction date and amount). 
• Why you suspect this is a fraudulent transaction and how did it happen.