How you can protect yourself

Don't pick a password that's easily guessed such as your phone number or birthday. We have rules in place that make sure the password you choose is strong.

Never reveal your password to anyone or write it down.

What is an authorised online third party provider?

A third party provider (TPP) offers different services to manage your money. For example, an app that gives a view of your accounts with different banks. To use these services you must give the TPP consent to access your account data.

There are three types of TPP:

• Account Information Service Provider (AISP). A third party you let view your account. This might be alongside your payment accounts from other banks and building societies.
• Card Based Payment Instrument Issuer (CBPII). A third party you let check if your account has available funds when making a payment.
• Payment Initiation Service Provider (PISP). A third party you let make a payment on your behalf.

Find out more www.ybs.co.uk/openbanking at YBS.

When using an authorised TPP, take the following steps to protect yourself:

• Check with us if you can access your account through a TPP, before providing any account details. You can find a full list of eligible accounts on our payment account services page.
• Check with the relevant regulator whether the TPP is genuine before you use it. In the UK, this is the Financial Conduct Authority (FCA).
• Ensure you use the genuine TPP’s website. Fraudsters often set up fake versions of websites to get information.
• If you're contacted from a TPP about account access or a payment which you have not authorised, call YBS.
• If the TPP asks for details they don't normally ask for, check with them that this is normal.

How can you allow them to access your account?

You must have registered for Internet Banking to use an authorised TPP. You must give them specific consent to access your account details. You can share with them your internet banking login details. This could include your user ID, password and memorable information. They can enter your user ID, password and memorable information on your behalf. If that happens, that means you’ve agreed to make the payment.

Check all account holders on a joint account agree before giving a TPP access.

How can you stop an online third party provider from accessing your account?

To do this, you must change your internet banking login details. You should also speak to the TPP and ask them to remove these details.

I’m having issues with a payment I made through a third party, how do I resolve this?

Please contact YBS about any issues with payments made through a third party.

You should use anti-virus software to protect your device. Anti-virus software reduces the risk of a virus stealing your information. Set up your software so it updates itself regularly.

A firewall controls the traffic between your computer and the internet. Firewalls are very effective and make it hard for criminals to attack your computer. Whenever you use the internet you should have a firewall in place.

Spyware or ad-ware is a growing problem. Spyware collects information about you and your browsing. People are often tricked into installing spyware programmes.

There are many anti-spyware programmes available. It's a good idea to use an anti-spyware programme to make sure your computer is clean.