Circular to Microfinance Companies in the Kingdom Regarding Cybersecurity and Consumer Protection

In the Name of Allah, the Most Gracious, the Most Merciful

[Logo of the Central Bank of Jordan]

Number: 6/2/2847 Date: 29/10/1441 AH Corresponding to: 21/6/2020 AD

Circular to Microfinance Companies Operating in the Kingdom

Greetings,

In the context of the Central Bank of Jordan's commitment to the security and safety of microfinance companies and the protection of their clients' interests, and in light of the increasing attacks of phishing and electronic hacking on users of electronic wallets, as well as the emergence of various cyber threats and fraud and impersonation operations aimed at stealing users' electronic wallet accounts, we wish to emphasize the necessity of complying with the Cybersecurity Adaptation Instructions No. (1/1/26/1984) dated 6/2/2018 and the Financial Consumer Protection Instructions for the Microfinance Sector No. (15/2018) dated 27/6/2018. This is to be achieved by taking the necessary measures to avoid exposing clients to such risks, including working to increase customer awareness to avoid cyber intrusion risks and the necessity of following proper controls to preserve their data. You will find attached some awareness messages that you may use as a reference for this purpose.

Please accept our highest respect,

The Governor Dr. Ziad Faris

---

P.O. Box 37 • Amman 11118 Jordan • Phone 4630301 Fax 4638889 • Website: www.cbj.gov.jo • Email: info@cbj.gov.jo Form (1/1/17)

---

Central Bank of Jordan

Sample Awareness Messages for Customers
Change your account password periodically and choose passwords that are difficult for hackers and intruders to guess.
Do not write or store information related to the electronic wallet, such as username and password, either on paper or electronically on your personal device (mobile phone, personal computer).
Do not enter your password if others can see what you are typing on your phone screen.
Do not attempt to connect to open wireless networks in public places, as they may be a point for exposing your data and account information.
Beware of downloading free software from the internet, as it is a means for hackers to spread malicious software to access your devices and steal your data.
Beware of fraud attempts to access your information, whether by impersonating the service provider's identity and contacting you verbally or via phishing emails.
Avoid sending or sharing any information related to your wallet via social media, SMS messages, email, or any other means.
Do not leave your phone without a password; if lost, you have facilitated access for intruders to your electronic wallet, money, and data.
The mobile phone number represents the username for the electronic wallet holder; therefore, it is considered your identity for accessing your wallet. If your phone or line is lost, report it to the relevant authorities.
Do not open any strange messages, whether via email or social media.
Periodically update the antivirus system on your mobile device.

---