Home Member Login Ongoing Promos BPI Express Mobile Contact Us
Security Service Agreement Maintenance Schedule FAQs
 BPI Express Online's Security Measures
Because your security is our prime concern, you are assured that at BPI, we are continually implementing measures to ensure the safety of your Internet banking transactions done via BPI Express Online.

BPI adheres to the best security practices by using different tools, methods, and processes to protect our customer's account information and banking transactions:
  We employ security products, such as intrusion detection system and firewalls, and other internal controls which are meant to safeguard, physically and logically, all our servers and information systems, including the data stored in these systems.
  Access to all of BPI's websites (BPI Express Online, BPI Expresslink, and BPI Trade) are secured using Verisign's Security Certificate which enables SSL for end-to-end encryption and you to verify the authenticity of our sites.
  Certain transactions involving third parties -- Bills Payments for credit cards and loans and all third party funds transfers require your signature on the enrollment form submitted to us for verification. With this policy, you are assured that BPI will honor requests only for payments/transfers to those you specifically signed for.

For added protection, we also encourage you to do your part:


Securely manage your password
  Use a password that is easy for you to remember but hard for other to guess.
  Ensure that you keep your password confidential at all times by not writing it or divulging to anyone.
  Do not use the "save and remember the password" browser feature.
  Ensure immediate change of your password if you think it has been compromised.


Protect your computer against viruses, malicious programs, and hacking attacks. There are attacks which can capture your keystrokes, including your password and other personal information, and send them to another person without your consent.
  Ensure that you install an anti-virus software and update it regularly. Keep the engine and pattern definitions up-to-date to prevent viruses from going into your PC.
  Do not download any software from a website that is of doubtful origin.
  Install a spyware or malware removal program. Spyware or malware programs can take control of your PC's system with the purpose of stealing valuable information.
  Install the latest patches and service packs on your operating system, browser, and e-mail programs to prevent system vulnerability-related attacks.


Do not become a victim of Phishing attacks. Phishing uses e-mails and websites, purporting to be legitimate banks, to request recipients to update their login and account information.

We suggest that you use this short checklist to protect yourself against phishing attacks.
  Begin your session by manually typing the web address of BPI into your browser. The official URL of BPI Express Online is www.bpiexpressonline.com.
  Avoid disclosing personal or account details via email, SMS or embedded link. Be skeptical of unsolicited e-mails or SMS messages, especially those that concern personal / account information. Delete suspicious e-mails or e-mail attachments without opening them, even if they seem to have originated from someone you know.
  Notify the sending company if you receive a suspicious e-mail. Contact us directly through Express Phone 89-100 or e-mail us at expressonline@bpi.com.ph.
  Check the security certificate of the web page. Before entering personal or account information into a site, make sure it is secure. In Internet Explorer, you can do this by checking the yellow lock on the status bar. A closed lock is an indication of an encrypted site.


If you think you may have responded to a suspicious e-mail, change your password as soon as possible. To change your password, login to www.bpiexpressonline.com and go to Account Maintenance --> Change Password.


As much as possible, avoid doing Internet banking transactions using public computers such as those in the Internet cafes. Should you, however, need to do so, we suggest that you close the browser after logging off. We also advise you to change your password immediately when a private computer is already available to you.

Please click here for more information regarding the Guidelines on Information Technology Risk Management for All Banks and Other BSP Supervised Institutions.