The “Mobile Token” is a built-in digital security authentication feature of the ICBC (Asia) mobile banking app, providing clients with a safer and more efficient two-factor authentication solution. Industrial and Commercial Bank of China (Asia) Limited (the “Bank”) would like to recommend clients to activate this authentication method to enjoy secure electronic banking services anytime, anywhere.

Why is the “Mobile Token” More Secure?

• The “Mobile Token” is generated offline directly on your device, eliminating reliance on mobile network transmission and effectively preventing SMS interception risks.
• Each “Mobile Token” is uniquely bound to your registered device. Account transactions can only be performed when logged in through your authenticated mobile device, mitigating password leakage risks.
• After multiple consecutive incorrect entries of your “Mobile Token”, the service will be temporarily locked, requiring you to reset the “Mobile Token” feature to regain access.

Important Safety Recommendations

1. Strengthen Device Security Protection
   • Do not use mobile devices that have been modified by methods like jailbreaking or rooting;
   • Do not allow third parties to register fingerprints or facial recognition that are not your own on your frequently used mobile devices;
   • Prevent others from using your mobile device and application without your permission, please ensure the lock function of your mobile device is working when the biometric authentication is activated to login mobile banking;
   • Make sure you are using the latest versions of operating system, mobile applications and browser;
   • If you have installed and are using AI agents (such as OpenClaw), you are advised to remain vigilant and fully understand the potential risks involved. Before conducting any online or mobile banking transactions, ensure you have implemented effective and sufficient security measures;
   • The ICBC (Asia) mobile banking app should be downloaded or updated through the Bank’s website at www.icbcasia.com (Internet Banking > Personal Mobile Banking) or via the Apple App Store / Google Play/ Huawei App Store. Do not download and install the app from unofficial sources.
2. Protect Your Personal Information
   • Set High-Strength Passwords: Avoid using repetitive or sequential characters (e.g., “123456”) ;
   • Never reuse the same password across multiple platforms;
   • Do not disclose one time passwords (OTP) sent to your mobile or security device to others;
   • Keep your personal information and second authentication information / tools (password token) / “Mobile Token” in a proper way in order to avoid any misappropriation.