Banks may soon ask customers to use a different access code every time they log in, to try to thwart fraud through fake websites.
The system requires users to call their bank on a pre-registered phone number and key in an access code of their choice before logging onto the bank's website.
The code will only be valid for 15 minutes, after which users will not be able to log on to do their internet banking, even with the right combination of their user ID and password.
The system, designed by the information technology arm of PCCW, UniHub, is believed to be a world first.
'It's a one-time validation code that you can key in to the bank centre on your mobile phone or your home phone, and you can choose whatever number combination you want each time,' said UniHub vice-president Eric Law Chun-wah.
'To successfully break in, a hacker would have to use your pre-registered phone number to key in an access code, and then use your password and user ID to log on within 15 minutes. To do all this, I think other crimes besides hacking and computer crimes will have to be committed.'