BMO InvestorLine Online Security

General Security

How we protect you

Online Security Guarantee
 We guarantee a 100% reimbursement for any unauthorized transactions conducted in your BMO InvestorLine account that results in a direct loss.

To ensure reimbursement under this guarantee, take the following steps:

  • Sign out and close your Internet browser at the end of each online investing or online banking session;
  • Keep your password confidential;
  • Review your online account activity, statements and trade confirmations; and
  • Call us at 1 888 776-6886 within 5 days if you suspect your password or BMO InvestorLine account has been compromised (e.g.: unauthorized transactions, suspicious activity, virus or spyware infection).

View the full details of the Online Security Guarantee
*Terms and Conditions

Keeping your information safe
BMO InvestorLine will never contact you to ask for your User ID, Password, PIN, SIN or other sensitive information.

  • If you're unsure a call is genuinely from BMO InvestorLine, visit your branch or call us at the telephone number listed on the back of your debit card.
  • Safeguard yourself from Internet security problems by being cautious when offering websites your personal information.
  • Are you a commercial bank customer? BMO InvestorLine strongly recommends that you perform periodic risk assessment and controls evaluation.

Trading Password
For added security you can create a unique Trading password that is different from your Account password.

Time-out settings
Session time-out is a security feature designed to help prevent an unauthorized user from accessing your accounts while you're away from your computer. You will automatically be logged out if your account is inactive for a length of time, which you control. (e.g 15, 30 or 60 minutes).

How you can protect yourself

Password Management
 We recommend that you:

  • change your passwords periodically;
  • safeguard your account numbers and passwords; and
  • avoid sharing this information with anyone.

Account Challenge Questions
To help increase the security on your account, you're asked to create three challenge questions and answers. You'll be required to provide this information to confirm your identity and reset your online password.

Cache
We highly recommend that you clear your browser's cache or close your browser (which will also clear the browser's cache) after each account session to protect the confidential nature of your personal information.
A cache is designed to improve your device's performance and reduce network traffic. When you view a web page, the web page is stored in both your browser's memory cache and your computer's disk cache.

How to use cookies and tracking
Cookies are a commonly used web technology and many browsers default to automatically accept them. They're designed to give a website owner information on how someone is using their website including what pages, links, buttons and other areas the user is visiting.

BMO InvestorLine uses cookies in a number of locations such as, allowing you to save your search results when using our stock screening tools. Pixel tags (also known as clear gifs) and cookies may also be used in promotional email messages and online advertising. These tools allow us to measure the effectiveness of our advertising and promotional campaigns.

You can set your Internet browser to notify you before a cookie is set, which gives you the choice of whether you'd like to accept it. Refer to your browser's online help for information on disabling and setting cookie preferences.

How to avoid Phishing attacks

How to protect yourself from Phishing
Avoid sending personal identification numbers or other personal confidential information by regular email, as it is not a secure method of contact.

No legitimate company will ever ask you to supply sensitive information via email. Nor will they send you an unsolicited email asking you to login through a link or attachment.

What is an email Phishing scam?
Phishing is an attempt by someone to obtain your confidential information through email by impersonating a group or individual you normally trust.

A Phishing email can:

  • Mimic the look and feel of a genuine company.
  • Contain poorly written English or gibberish text.
  • Be sent through unsolicited emails, containing links or attachments.
  • Include a web address with the @ symbol or a numeric address (e.g., 123.456.1.2) that points to a site that is not related to bmo.com.
  • Include a "reply-to" field with a different address than the "from" field.

How Phishing Scams Work
  1. You receive an unsolicited email that includes one of the following subject lines:
    • You're required to update your personal information
    • You won a contest!
    • ACTION REQUIRED: Your card or account is suspended
    • Good news: Your product application is approved. Your account has expired.
  2. You're then asked to open an attachment/link, or to reply to an email address.
  3. If you click the link/attachment, you're taken to a malicious site that requests your personal information (e.g., Bank Card Numbers/User ID, Account Numbers, PINs, Credit Card Numbers, Social Insurance Numbers, and/or Passwords).

Watch our presentation "Don't Take the Bait" to protect yourself from this type of fraud.

Secure Your Browser with Rapport

Download free security software from Trusteer for your browser today
Protect your information from online fraud and identity theft by downloading Trusteer's Rapport software for FREE.

Rapport is easy to install, and works with your existing firewall and anti-virus protection to further protect your computer by:

  • Protecting the connection between BMO InvestorLine's website and your computer from common online threats.
  • Authenticating that you have accessed BMO InvestorLine's website and not a website claiming to be BMO InvestorLine.

Learn more about Rapport

How do I know Rapport is protecting me?
Once you have installed the software, look for the Rapport icon that appears near your browser's address bar.

The Rapport icon will appear in green when you are protected.

Photo of a URL address bar displaying a green Rapport icon

The icon will appear in grey if Rapport has not been enabled to protect the website you are visiting.

Photo of a URL address bar displaying a grey Rapport icon

If you require any assistance using the software, please contact Trusteer directly at: support@Trusteer.com

Downloading and use of the Trusteer Rapport software is governed by the terms of the Rapport license agreement, which is provided with the software. Bank of Montreal makes no representation or warranty respecting the software or Trusteer's website. You agree Bank of Montreal is not responsible for any difficulties, consequences, costs, claims, damages or losses arising in any way whatsoever out of the downloading or use of the software.

Browser and Desktop support

To assist you in protecting your personal and financial information, our website supports the following browsers:

BMO InvestorLine Self-Directed  
Windows
  • Internet Explorer 8.0+
  • Firefox 20+
Mac users and iPads
  • Safari 5+
  • Firefox 16 for Mac running on OS X 10.4.8+.
BMO InvestorLine adviceDirect
Windows
  • Internet Explorer 8.0+
  • Firefox 20+
  • Chrome 27+
Mac users and iPads
  • Safari 5+ running on OS X 10.4+

Mobile Security

BMO InvestorLine Mobile Self-Directed Investing app requirements
The following supported operating systems have been tested and are recommended for the best performance:

  • iPhone and iPod Touch with iOS 4.0+
  • Android 4.1+
  • Blackberry 7.1+

Mobile devices not meeting these requirements may not support the latest online technologies, resulting in features being unavailable. Make sure both Java script and Cookies (in your mobile Internet browser settings) are enabled.

Security tips for when using the BMO InvestorLine Mobile Investing app
We will guarantee a 100% reimbursement for any unauthorized transactions conducted in your BMO InvestorLine account that results in a direct loss.

Five tips to help minimize fraud and protect your information:

  1. Password - protect your mobile device - Many new mobile devices have built-in password protection. Enabling this option will protect your device if it is ever lost or stolen.
  2. Never store confidential information on your mobile device - Keep personal information like a password, SIN or PIN off your device. Rest assured, with BMO InvestorLine Mobile Investing, no confidential information is ever stored on your mobile device.
  3. Immediately report a lost or stolen mobile device
  4. Don't hack or modify your mobile device - Modifying the software on your device can leave you vulnerable to viruses and spyware. Protect your device by using it according to the manufacturer's recommendations.
  5. Disable Bluetooth when not in use - While Bluetooth makes it easy to talk hands-free, hackers can take advantage of the always-on, always-discoverable setting. Limit your exposure by disabling Bluetooth when it is not actively transmitting information or switch your Bluetooth device to hidden mode.