Security Advisory
Spyware
Spyware is a computer software that gathers and reports information about a computer user without the user's knowledge or consent.

Adware is a form of Spyware in which advertisements are displayed while the program is running. Some adware can track a computer user's personal information and pass it on to third parties, without the user's authorization or knowledge. It is also responsible for the delivery of unrequested advertising (pop-up advertisements in particular).

Spyware in general may also have the ability to re-route page requests to other websites, change default home page of your browser and monitor your keystrokes, etc.

To protect yourself against Spyware, take note of the following:
Do not fill up loan application forms on the HLF website while any Spyware is present on your computer.
Be aware of banners, advertisements and popups while surfing the Internet and refrain from clicking on these advertisements.
Do not download software or click on email attachment files from unknown sources.
Install and update your anti-virus software with the latest virus definition files regularly.
Install and update your anti-Spyware software regularly.
Update and patch your operating system and web browser regularly.
Be alert to any Spyware activities happening on your computer. Be suspicious and investigate when you see lots of popup banners appearing and unsolicited email that seems to know you very well.

Phishing
"Phishing" is a high-tech scam that deceives consumers into disclosing their credit card numbers, bank account information, passwords, and other sensitive information.

The emails pretend to be from businesses the potential victims deal with - for example, their Internet service provider (ISP), online payment service or financial institution. The fraudsters tell recipients that they need to "update" or "validate" their billing information to keep their accounts active, and direct them to a "look-alike" website of the legitimate business, further tricking consumers into thinking they are responding to an update request. Unknowingly, consumers submit their financial information - not to the businesses - but the scammers, who use it to order goods and services and obtain credit.

To avoid getting caught by one of these scams, we recommend customers take note of the following guidance:

HLF will not make unsolicited requests for customer information through an email or phone unless it is the customers who initiated the contact.
If you receive an email that warns you, with little or no notice, that an account of yours will be shut down unless you reconfirm your billing information, do not reply or click on the link in the email.
Do not download software or click on email attachment files from unknown sources.
Before submitting financial information through a web site, look out for SSL encryption and web server digital certificate information. All HLF loan application forms and feedback form use the SSL encrypted connection, indicated as https:// at the Internet address and there is a "lock" icon at the browser's status bar. Our institution's name appears in the web server digital certificate and you can check this by clicking on the following Netrust icon at the bottom of our online application forms and feedback form.
Security Information for secure.hlf.com.sg

Security Status : Valid
Validity Period : Apr-26-2010 to Apr-26-2012
Site URL : https://secure.hlf.com.sg/
Server ID Info. : CN=secure.hlf.com.sg
OU=IT
O=Hong Leong Finance Limited
L=Singapore
ST=Singapore
C=SG

Customers should not accept hyperlinks or redirections from other websites to get to HLF online application forms and feedback form.
Report to us any suspicious email or fake websites purporting to be from HLF.