Security and Fraud Protection
Learn how BMO InvestorLine helps protect your account and what you can do to safeguard your personal and financial information.
October 13, 2026
15 min read
How we protect you
Online security guarantee
We guarantee a 100% reimbursement for any unauthorized transactions conducted in your BMO InvestorLine account that result in a direct loss.*
To remain eligible for reimbursement under this guarantee, you must, at a minimum, take the following steps:
- Sign out and close your browser or BMO Invest App after each online investing session;
- Keep your Client ID and password confidential;
- Review your online account activity, statements and trade confirmations; and
- Contact us by phone or live chat within 5 days if you suspect your password or BMO InvestorLine account has been compromised (e.g. unauthorized transactions, suspicious activity, virus or spyware infection).
*Terms and Conditions apply.
View the full details of the Online Security Guarantee
Keeping your information safe
BMO InvestorLine will never contact you to ask for your Client ID, Password, PIN, SIN or other sensitive information.
- Always go directly to BMO.com or use official BMO apps when entering personal information.
- If you're unsure if a call is genuinely from BMO InvestorLine, hang up and contact us directly.
Two-step verification
To help protect your financial and personal information, we have an additional method of security. When we need to verify your identity, you'll be prompted to request a verification code to sign in.
For more information, see two-step verification for Self-Directed or two-step verification for adviceDirect.
Trading password
Create a Trading Password that is different from your Account password. In some instances, it may be used to verify your identity.
Time-out settings
Session time-out is a security feature designed to help prevent an unauthorized user from accessing your accounts while you're away from your computer. You will automatically be signed out if your account is inactive for 15 minutes.
You can change this time limit under Security settings on the BMO InvestorLine website.
Trusted Devices
You can add or remove trusted devices linked to your account through the BMO Investorline website.
Password management
We recommend that you:
- Change your passwords periodically;
- Safeguard your Client ID, account numbers and passwords; and
- Avoid sharing this information with anyone.
What else can I do now?
We encourage you to regularly visit our Security Centre for tips on how to safeguard your information and recommend you: for tips on how to safeguard your information and recommend you:
- Install the IBM Trusteer Rapport software
- Monitor your accounts for unauthorized transactions and call us to report any concerns
Two-step verification
Two-step verification is a security measure that confirms your identity by sending a verification code to your phone when your device is unrecognized. By enrolling in two-step verification, you are taking a step to prevent fraudulent attacks.
Manage your two-step verification
To manage your two-step verification, follow the steps for your account type.
Self-Directed
Log in to your account on the BMO InvestorLine website. Go to Security Settings, then select Edit under Two-step verification.
adviceDirect
Log in to your account on the BMO InvestorLine website. From the menu, select Security Settings. Under Preferences, go to Security Settings, then select Edit under Two-step verification.
Cookies are a commonly used web technology and many browsers default to automatically accept them. They're designed to give a website owner information on how someone is using their website - including what pages, links, buttons and other areas the user is visiting.
BMO InvestorLine uses cookies in a number of locations, such as allowing you to save your search results when using our stock screening tools. Pixel tags (also known as clear gifs) and cookies may also be used in promotional email messages and online advertising. These tools allow us to measure the effectiveness of our advertising and promotional campaigns.
You can change your Internet browser settings to notify you before a cookie is set, which gives you the choice of whether you'd like to accept it. Refer to your browser's online help for information on disabling and setting cookie preferences.
You can also manage these preferences through the menu on the BMO InvestorLine website. In the BMO Invest app, go to Menu > Privacy settings.
How to protect yourself from phishing
Avoid sending personal identification numbers or other confidential information by regular email, as it is not secure. BMO InvestorLine always uses secure email when sending confidential information.
BMO InvestorLine will never ask you to send sensitive information by email.
BMO InvestorLine will also never send unsolicited emails asking you to login through a link or attachment.
What is an email phishing scam?
Phishing is an attempt to obtain your confidential information through messages or emails that appear to come from a group or individual that you trust.
A Phishing email can:
- Mimic the look and feel of a genuine company;
- Contain poorly written English or gibberish text;
- Be sent through unsolicited emails, containing links or attachments;
- Include a link that appears to be from BMO but leads to an unrelated website, such as an address containing an @ symbol or numbers (e.g., 123.456.1.2) and;
- Include a "reply-to" field with a different address than the "from" field.
How Phishing Scams Work
- You receive an unsolicited email that could include one of the following subject lines:
- You're required to update your personal information
- You won a contest!
- ACTION REQUIRED: Your card or account is suspended
- Good news: Your product application is approved
- Your account has expired
- You may then be prompted to open a link or attachment, or reply to an email address.
- If you click the link or attachment, you're taken to a malicious site that requests your personal information (e.g., Bank Card Numbers, Client ID, Account Numbers, PINs, Credit Card Numbers, Social Insurance Numbers, and/or Passwords).
Have questions or feedback
Reach out by phone or live chat: