FAQs: Security & privacy

What is DoubleSafe?

How does DoubleSafe work?

Why do I need to set up DoubleSafe?

How is DoubleSafe more secure?

How do I sign up for DoubleSafe?

How do you know that I'm signing in from my own computer?

Does DoubleSafe use cookies?

What if someone steals my PIN? How will DoubleSafe prevent them from accessing my Account?

Why do I need to set up DoubleSafe secret questions?

When I enter my Client Number, it asks me a question instead of showing my DoubleSafe picture. Why?

Can I change my DoubleSafe picture and phrase, and secret questions?

I answered the DoubleSafe question incorrectly and I'm locked out. How do I reset my questions?


 

What is DoubleSafe?

DoubleSafe is our enhanced login process designed to help prevent unauthorized access to your Account(s), while reassuring you that you're on the real Tangerine website. By becoming a standard part of your online login, it will help to protect you against identity theft and fraud. It will also help you to better spot any attempts at email 'phishing' or online sites pretending to be Tangerine.  DoubleSafe consists of selecting a picture and phrase, and then choosing three secret questions. Each time you log in, you’ll verify that the picture and phrase match the ones you selected, and then input the answer to your secret question. These steps help protect you, whether you're signing into your Account from any computer or mobile device.

In addition, we have set up a hotline (1-888-SAFE-304) which you can call if you suspect that you have been phished or if you have been directed to a phony look-alike website claiming to be Tangerine.

Back to Top

 

How does DoubleSafe work?

DoubleSafe is made up of two parts:

  1. A picture and phrase.
  2. Three secret questions that no one else knows.

When you're at your own computer, enter your Client Number and click GO. We'll show your DoubleSafe picture and phrase, which verifies that you're at the real Tangerine website. This is how you know it's us and that it's safe to enter your PIN.

If you're signing in from a different computer, we'll ask you one of your DoubleSafe secret questions to verify your identity. When you answer correctly, your DoubleSafe picture and phrase will appear. That's when you know it's safe to enter your PIN and sign in. And we know that it's really you.

Back to Top

 

Why do I need to set up DoubleSafe?

There are two reasons we've put DoubleSafe in place:

  • First, it helps you confirm that you're at the real Tangerine website rather than at a phony look-alike site.
  • Second, it helps us confirm that it's actually you accessing your Accounts because the process helps us verify your identity. If we don't recognize your computer, we'll ask you one of your secret questions as an additional line of defense against unauthorized access to your Accounts.

Back to Top

 

How is DoubleSafe more secure?

In addition to using your secure PIN to log into our website, the DoubleSafe picture and phrase work to help you instantly know that you are on the real Tangerine website. If you are signing on from a different computer than you had originally registered with (e.g., at a library or internet café), we'll ask you one of your DoubleSafe secret questions so that we can positively identify you before letting you proceed. It works to make online banking with Tangerine more secure and extra safe – DoubleSafe.

Back to Top

 

How do I sign up for DoubleSafe?

If you hadn't already set up your picture and phrase, or chosen your three secret questions when you first logged onto our website, you will be asked to set up the process the next time you log in.

Back to Top

 

How do you know that I'm signing in from my own computer?

One of the ways we recognize you is by placing a cookie on your computer when you register for DoubleSafe. The cookie contains a unique, randomly generated number used as an identifier that your web browser sends back to us when you log onto the Tangerine website.

This cookie only lets us know you're using your own computer and does not contain any personal information. No other website can read or use this cookie.

If you log in from another computer, no cookies will be found so the Tangerine site will ask you one of your DoubleSafe secret questions to verify your identity.

Back to Top

 

Does DoubleSafe use cookies?

When logging in from a computer that is not registered, you will be asked one of the DoubleSafe secret questions that you set up. On this page, you will have the option to choose Remember my Client Number on this computer. If you select this option, we will place a cookie on your computer and won't have to ask you a secret question next time you log in.

This cookie only lets us know you're using your own computer and does not contain any personal information. No other website can read or use this cookie.

If you log in from another computer, no cookies will be found so the Tangerine site will ask you one of your DoubleSafe secret questions to verify your identity.

Back to Top

 

What if someone steals my PIN? How will DoubleSafe prevent them from accessing my Account?

When an unauthorized person tries to sign in, the lack of a DoubleSafe cookie sent to us will let us know they're using a different computer, so we'll ask the user one of your DoubleSafe secret questions.

Making your DoubleSafe secret questions personal and unique will help prevent unauthorized access to your Account if your PIN is stolen.

Back to Top

 

Why do I need to set up DoubleSafe secret questions?

Secret questions help prevent unauthorized people from getting access to your information online. That way, even if someone tried to use your Client Number and PIN to access your Account online, they wouldn't know the answer to your secret question. But it is important to remember that you need to keep your PIN safe and secure because if they have access to your personal computer and it's set up to remember you, they won't see the secret question.

Back to Top

 

When I enter my Client Number, it asks me a question instead of showing my DoubleSafe picture. Why?

You may want to first check if you entered you Client Number correctly. Or, if you recently cleaned or removed the cookies from your computer we will also need to ask you your DoubleSafe secret question again. When you sign in from a computer we don't recognize, we will need to ask you a secret question to confirm that it's really you.

Back to Top

 

Can I change my DoubleSafe picture and phrase, and secret questions?

Yes, you can change your DoubleSafe picture and phrase, and secret questions at any time. To make the change, follow these instructions:

  1. Sign into your Tangerine Account.
  2. Under 'My info and options', select ‘General settings’.
  3. Edit your 'DoubleSafe secure login' preferences to change your picture, phrase or secret questions.

You will also be able to update the following:

  1. Register your computer
  2. Unregister ALL computers that have your secret questions saved
  3. Remove your saved Client Number from ALL computers

Back to Top

 

I answered the DoubleSafe question incorrectly and I'm locked out. How do I reset my questions?

To reset your questions all you need to do is call 1-888-SAFE-304 and choose the option to reset your DoubleSafe questions. You will be asked to verify some information and once confirmed, you will be able to go back online and reset your DoubleSafe secret questions.

Back to Top

What is the Tangerine Security Guarantee?

How do I know I'm at the genuine Tangerine secure website?

Can I access my Tangerine Account online from multiple computers?

I share my computer with someone who also uses the Tangerine secure website. Can both of us still sign in from this computer?

On the login page I can only see a place to enter my Client Number. There’s no place to enter my PIN.

I've received a suspicious email, what do I do?

What is a cookie?


 

What is the Tangerine Security Guarantee?

Your money and privacy are protected from the instant you open your Tangerine Account. Our security features are top notch and we continue to make enhancements to make it even better. If your security is ever compromised, we'll make things right. That's the Tangerine Security Guarantee.

Account protection
We cover your losses for unauthorized activity in any of your Tangerine Account(s). Just be sure to notify us of the problem within 30 days of when the first statement that shows the unauthorized activity was made available to you. Call us at 1-800-464-3473.

We need your help too
Don't give out your Client Number, secret questions (and answers) or PIN to anyone else. Log out at the end of each online banking session. Monitor your statements and pay attention to Account alerts. And let us know immediately if you discover a transaction that you suspect is fraudulent.

If it's not your fault, we've got you covered - guaranteed!

Back to Top

 

How do I know I'm at the genuine Tangerine secure website?

We have set up security enhancements to ensure that you are at the legitimate Tangerine website. Typing our address (tangerine.ca) directly into your web browser will lead you to our site, at which time you will proceed through the secure login. Make sure you recognize your DoubleSafe picture and phrase before continuing. If you do not see these, do not enter your PIN.

If you do not see your DoubleSafe picture and phrase, or are not asked your personal secret question, do not enter your PIN. Check to see if you entered your Client Number correctly. If you did and you still do not see your DoubleSafe picture and phrase, or you are not asked your secret question, do not enter your PIN.

You can phone the DoubleSafe hotline 1-888-SAFE-304 or send us an email at phishing@tangerine.ca to report that you may have encountered a phishing site or email.

Back to Top

 

Can I access my Tangerine Account online from multiple computers?

Yes, you can access your Account online from any number of computers and have the same DoubleSafe protection.

If you sign in from a computer that you haven't used before, just answer one of your secret questions to verify that it's really you. After answering correctly, you can choose to register that computer for future banking and avoid the secret question again with that computer. We do not recommend that you register public computers, e.g., at a library or internet café.

Back to Top

 

I share my computer with someone who also uses the Tangerine secure website. Can both of us still sign in from this computer?

Yes. There is no limit to how many people can sign into Tangerine from the same computer. Just remember not to share your Client Number, PIN or the answers to your secret questions. To make it easier for you to share a personal computer we allow you to save your Client number and also set up a nickname associated with it to help make banking with Tangerine easier.

Back to Top

 

On the login page I can only see a place to enter my Client Number. There’s no place to enter my PIN.

We have separated the two steps to ensure that your information stays DoubleSafe. When you enter your Client Number first, you will be asked to enter your PIN on the next page. This second page will show your DoubleSafe picture and phrase letting you know that you are on the Tangerine website before you enter your PIN. Or, if your computer is not registered you will be asked to answer your secret question before entering your PIN.

Back to Top

 

I've received a suspicious email, what do I do?

If you receive an email that asks you to provide confidential information such as your Client Number, Account number, PIN or password, do not respond and do not click on any links included in the email. Contact us immediately and forward the suspicious email to phishing@tangerine.ca. For more information on phishing and identity theft, please visit the Canadian Bankers Association website.

Back to Top

 

What is a cookie?

A ‘cookie’ is a small piece of data placed on your computer by a web server when visiting certain websites.

A cookie includes a randomly generated unique number, and every time you log in from that same computer, your web browser then sends us back the cookie. This acts as a security feature that lets us know you're using your own computer.

Back to Top

What is IBM Security Trusteer Rapport?

How does IBM Security Trusteer Rapport work?

How do I install IBM Security Trusteer Rapport on my computer?

I've received a suspicious email, what do I do?


 

What is IBM Security Trusteer Rapport?

IBM Security Trusteer Rapport is a security software that provides online identity theft and online transaction protection for consumers. Tangerine is offering you the IBM Security Trusteer Rapport software for free. IBM Security Trusteer Rapport will protect your web browser sessions with any website that contains private or personal information.

IBM Security Trusteer Rapport is entirely transparent and does not require you to change the way you work or sign into websites. It does not require any configuration or maintenance; you simply install and browse safely. For more information about IBM Security Trusteer Rapport, please visit their website.

Back to Top

 

How does IBM Security Trusteer Rapport work?

Once IBM Security Trusteer Rapport is installed you will notice a green or gray arrow in your web browser address bar. Each time you access a website that IBM Security Trusteer Rapport protects, a "popup" will appear briefly. The popup automatically disappears after a few seconds and does not disturb your work. The popup is there only to inform you that IBM Security Trusteer Rapport protects this website. No action is required on your part. You can turn off the popup with a simple click. You can continue to work with the website the same way you did before. With Trusteer Rapport, no predetermined settings are altered, no changes are implemented and you encounter no interference with your online activity.

When IBM Security Trusteer Rapport identifies a security hazard it usually neutralizes the threat without having to inform you. In a few cases where it detects some level of risk, IBM Security Trusteer Rapport may require a confirmation (i.e., Yes/No) from you before neutralizing the threat.

Back to Top

 

How do I install IBM Security Trusteer Rapport on my computer?

The IBM Security Trusteer Rapport download link is on the lower right-hand corner of our login page.

You can also visit the IBM Security Trusteer Rapport website at http://www-03.ibm.com/security/resources if you would like more information.

Download and installation is very simple. A few mouse clicks and IBM Security Trusteer Rapport can be installed and running on your desktop in under 30 seconds. You do not need to register or submit any personal information and you do not need to restart your browser or reboot your computer after installation.

IBM Security Trusteer Rapport only offers support and information in English.

Back to Top

 

I've received a suspicious email, what do I do?

If you receive an email that asks you to provide confidential information such as your Client Number, Account number, PIN or password, do not respond and do not click on any links included in the email. Contact us immediately and forward the suspicious email to phishing@tangerine.ca. For more information on phishing and identity theft, please visit the Canadian Bankers Association website.

Back to Top

What exactly is Voice ID?

What’s a voiceprint?

Is my voiceprint really unique?

Is Voice ID secure?

Will Voice ID work if I have a cold?

How long does it take to enroll for Voice ID?

Can my voiceprint be stolen from the Voice ID system?

What if someone records my voice? Can they access my banking information?

I’ve enrolled for Voice ID. Does that mean I don’t need to enter my PIN or answer security questions anymore?

What if I enroll for Voice ID and then change my mind?


 

What exactly is Voice ID?

Voice ID is a new feature that we’re introducing in our Contact Centre. It captures your voice during a phone call to create what’s called a voiceprint that we can use to identify you, in case you ever have trouble entering your PIN when you call us. Not only will this feature provide extra security, it will also help simplify the process of proving that it’s really you calling in.

Back to Top

 

What’s a voiceprint?

Your voiceprint reflects the unique properties of your voice. It uses a captured digital representation of your voice to create a set of mathematically derived information about the shape of your vocal tract and other features. Since your voiceprint is unique to you, it provides a highly secure way to identify you by your voice.

Back to Top

 

Is my voiceprint really unique?

Yes. Just like your fingerprint, your voiceprint belongs uniquely to you. It consists of over a hundred different characteristics.

Back to Top

 

Is Voice ID secure?

Although no system can provide a 100% guarantee, this method of validating your identity has been proven to be very effective at reducing the risk of fraud. It uses advanced technology to provide greater security and protection for your banking with us.

Some transactions may require use of security questions as well as Voice ID, for your added protection.

Back to Top

 

Will Voice ID work if I have a cold?

Yes. Over a hundred voice characteristics are represented in your voiceprint, only a few of which are affected by a cold. A health condition that severely affects your voice, such as laryngitis, will prevent Voice ID from recognizing your voiceprint. If this occurs, we’ll use security questions to validate your identity.

Back to Top

 

How long does it take to enroll for Voice ID?

Enrollment happens in the background of normal conversation with a Tangerine Associate, so it’s immediate. For most people, enrollment can be completed during one phone call, but in some cases, it might take more than one call to be fully enrolled.

Back to Top

 

Can my voiceprint be stolen from the Voice ID system?

No. What we store is a digital representation of your voice that only works with our system.

Back to Top

 

What if someone records my voice? Can they access my banking information?

Since we validate your voice over the course of natural conversation with an Associate, it’s highly unlikely that a recording of your voice could pass this process. The Associate would recognize that the conversation flow is off and would have the ability to take further security steps.

Back to Top

 

I’ve enrolled for Voice ID. Does that mean I don’t need to enter my PIN or answer security questions anymore?

No. We’ll only use your voiceprint if you have trouble entering your PIN when you call us. When you call in to do your banking, you’ll still be asked to enter your PIN, and PIN use will continue to be an important security feature. Even when your voiceprint is used, there may be situations where we’d still need to ask you security questions. For example, if you’re calling from a noisy place, Voice ID might not work. There might also be a need to ask additional security questions for certain types of transactions.

Back to Top

 

What if I enroll for Voice ID and then change my mind?

You can opt out of Voice ID at any time by speaking with an Associate. Your voiceprint will then be removed from our system. If you decide to participate again at a later time, you can call and ask an Associate to re-enroll you.

Back to Top