Security Information

We are committed to ensuring that your account is always protected. M2U ID Web (Internet banking) can be accessed from various devices; however, only you can control access to your account and authorize transactions.

To authorize transactions, you are required to have the M2U ID App (mobile banking) installed and activate Secure2u. The M2U ID App can only be installed on one device.

M2U ID Web is built with international internet banking standards, featuring 256-bit encryption, DigiCert certification, and three layers of authentication (Password, Secure2u, and SMS Token). Biometric authentication is also available on the M2U ID App.

Security Risks

The internet is an open platform for information exchange between web systems, and unauthorized access to data may occur. As an Internet Banking provider, Maybank has implemented various measures to minimize risks related to data theft or unauthorized access.

The following security measures are implemented:

• Digital ID Certificate / 256-bit Encryption
  All information transmitted between your computer and the M2U ID Web system is encrypted using 256-bit encryption technology provided by DigiCert. 
• User ID and Password
  Your User ID and Password are created by you to ensure confidentiality. For added security, your M2U ID Web account will be automatically blocked after three consecutive incorrect password attempts. 
• SMS OTP
  SMS OTP serves as an additional authentication for registration, activation/change/reset of Secure2u passcode, device replacement, password reset on the M2U ID App, and for credential reset or forced password changes on M2U ID Web.
  Three invalid login attempts, invalid SMS Token, or invalid Secure2u attempts will result in automatic account blocking. 
• Secure2u
  Secure2u is required to authorize transactions performed via both M2U ID Web and M2U ID App. 
• Firewall
  M2U ID Web is protected by firewalls that act as barriers to prevent unauthorized access to banking networks. 
• Antivirus
  Antivirus programs help detect and remove viruses from your device. Most antivirus software includes automatic updates to identify and eliminate new threats. 
• Auto Logout
  The system will automatically log you out after 5 minutes of inactivity. 

Technology alone is not sufficient without your active participation in maintaining security. Please always observe the following precautions:

• Always keep your personal or banking information confidential, such as One Time Password (OTP), Transaction Authorization Code (TAC), Secure2u Passcode, User ID, and Password. Do not share this information with anyone, including individuals claiming to be from the Bank, regardless of the method or location.
• Make sure to logout after making transactions at Internet Banking or M2U ID Web.
• Avoid online banking access using public Wi-Fi.
  There may be a “keyboard tabbing” program that can read and store your user ID and password.
• Install security software and keep updating the antivirus.
• Do not open/click/download any file received from a number you do not recognize
• Enable Two-Factor Authentication (2FA) on your mobile phone, such as for email, social media, and banking services.