A user ID is a unique identifier, commonly used to log in to a website, app or online service. It may be a username, account number or an email address. It is the most basic security feature used for profile identification.

Select a unique password that is different from your personal information. It is highly recommended that your password consist of upper- and lower-case letters, numerals as well as special characters to keep your profile even more secure.

Do not reveal your user ID and password to anyone, including Public Mutual's staff and/ or unit trust consultants (UTCs) as they are not authorised to request for your password under any circumstances.

The Personal Login Phrase (PLP) functions like a secret code that is displayed to you just before you enter your password to log in. It is important to keep PLPs confidential and avoid sharing them with others.

A strong PLP should be unique, difficult to guess, and easy for the user to remember. Never divulge your PLP to anyone under any circumstances, and do not use your User ID and/ or Password as your PLP.

If the PLP displayed does not match your PLP, do not key in your password. Instead, you should report such issues by contacting us for assistance via:

A Personal Authentication Code, or PAC, is an authentication code generated by the system and delivered to your registered mobile phone via Short Message Service (SMS) when performing online transactions.



If you receive a PAC without your consent, please report the issue to us immediately via:

Your account will be automatically logged off if there has not been any activity for a certain period of time. This is to ensure that your account is safe and secure. Additionally, this also reduces the risk of data breaches when your account is left idle.

Public Mutual will send notifications to you after transactions have been processed.

Public Mutual SecureSign is an enhanced security feature that helps you authenticate your login for Public Mutual Online (PMO).

Secure Sockets Layer (SSL) and its successor, Transport Layer Security (TLS), are security protocols for establishing encrypted links between a server (website) and a client (web browser) on the Internet.

SSL/ TLS allows sensitive information such as your login credentials, credit card details and personal data to be transmitted securely as the data is encrypted. This will greatly reduce the risk of hackers intercepting or tampering with your data for harmful intentions.

Malicious software (Malware) is a program or file that is harmful to a computer system.

Malware is specifically designed to disrupt, damage, steal or gain access to computer systems without your permission.

Malware is usually disguised as a legitimate file download through attachments and links shared from an unknown email source and/ or a website that you visited.

Cybercriminals have programs that mine public profiles for potential password combinations and use dictionary attacks that automatically try different words until they find a match on your password.

Email scams are generally delivered in the form of a spam email. However, some are tailored to look like a legitimate website. These email scams are designed to trick you into disclosing information that will lead to defrauding or stealing your identity and performing malicious actions on your behalf.

These emails come with a link that allows users to click on and be directed to a fake website to steal their user ID, password and One-Time Password (OTP).

Always clear your browser cache when you log out from Public Mutual Online (PMO) as the browser may store your account numbers and sensitive information on the public computers or devices that you have used.

Keep your login credentials and passwords confidential.

You should never reveal your Personal Authentication Code (PAC) to anyone who asks/ requests, regardless of the channel of communication.

Do not use unsecured mobile devices (e.g. jailbroken, rooted OS) in order to prevent your account from being tampered with or compromised.

Phone scams refer to phone calls/ SMS that trick victims into revealing their sensitive information (e.g. user account, password and PAC/OTP)