Cybersecurity › Module 7 › Lesson 4
Safe Online Banking & Shopping
Keep your money safe when you shop and bank online
Opening
Your wallet is online now
Every time you pay for something online or check your bank account, you're sharing sensitive information. The good news? A few simple habits protect you from most threats. Let's learn them.
1. Why online banking needs extra care
When you use bKash, your bank app, or shop on an e-commerce site, criminals want your details. They're not always trying to hack the bank — they're trying to trick you. A fake email that looks real. A text message pretending to be from your bank. A WiFi network with a trusted-sounding name. These are their favorite tools.
2. Three places where your money is at risk
Know where to stay alert:
Fake websites and apps
Scammers copy real bank and shop websites. The URL looks almost right. The design looks perfect. You enter your card details — and they have them. Always type the web address yourself. Never click a link in an email or SMS.
Unencrypted WiFi
Public WiFi at cafes and airports is convenient but risky. Anyone on that network can see what you send. Never do banking or shopping on public WiFi unless you use a VPN (more on that later). At home, use your own WiFi with a strong password.
Phishing messages
A message says 'Your account is locked. Click here to verify.' It looks like it's from your bank. It's not. Banks never ask you to click links in messages. They never ask for your PIN or full card details via text or email.
3. Four habits that actually protect you
Type URLs yourself
Don't click email links to bank sites or shops. Open your browser. Type the address. Or use an app from the official store (Google Play for Android, App Store for iOS). This one habit stops most scams.
Check for HTTPS and the lock icon
Before you enter card details, look at the top of your browser. You should see a small lock icon and 'https://' at the start of the address. The 's' means secure. No lock? Don't enter your details.
Never share your PIN or full card number
Your bank will never ask for your PIN via email, text, or phone call. Your card number should only go to official payment pages. If someone asks for these details, it's always a scam.
Check your statements regularly
Log into your bank account or payment app once a week. Look for charges you don't recognize. If you see something wrong, tell your bank immediately. The faster you act, the easier it is to fix.
Real example: The bKash scam
You get an SMS: 'Your bKash account needs verification. Click here.' You click. A fake login page opens. It looks perfect. You enter your number and PIN. Within minutes, your money is gone. What went wrong? You clicked a link in a text. Never do this. Always open bKash directly from your phone's app.
One more thing: app permissions
When you install a banking or payment app, it asks for permissions (camera, contacts, location). Ask yourself: does this app really need my camera? No. Deny permissions you don't understand. Banks only need permission to send you notifications.
Online banking and shopping are safe when you're careful. You're not trying to become a hacker or security expert. You just need to stay aware and follow these simple rules. Your next step is to audit your own security habits. Ready?