What is Cyber Security?
Cybersecurity is the protection of internet-connected systems (including hardware, software, and data) from cyber attacks. It ensures the safety and integrity of systems by preventing unauthorised access, damage, and disruption.
People
Training, education, awareness, and repetition to build a human firewall.
Process
Governance, oversight, policy frameworks, and incident reporting.
Technology
Firewalls, anti-malware, strong passwords, and logging & monitoring.
Types of Cyber Crime
Hacking
Illegally breaking into computers and networks by compromising devices like computers, smartphones, and tablets.
Phishing
Fake messages to trick you into revealing sensitive info like passwords, OTP, and card details (via email, SMS, or WhatsApp).
Denial of Service
Overwhelming a network with excessive requests, making it unavailable. DDoS amplifies this from multiple sources.
Spam Email
Unsolicited junk email carrying viruses, spyware, and phishing attacks. Spammers harvest and sell email addresses.
Malware
Viruses, worms, and trojans: malicious software to steal data, gain unauthorised access, or block your information.
Spyware & Adware
Spyware secretly collects personal information. Adware shows unwanted ads. Both disrupt devices and steal data.
Ransomware
Locks you out of your device and demands payment for access. Notable examples: WannaCry, Petya, Cerber, Locky.
Social Engineering
Manipulating people through deception to reveal sensitive info or grant access, by pretending to be someone trustworthy.
Best Practices & Precautions
Follow these guidelines to protect your personal data, accounts, and devices from common cyber threats.
Data Privacy
- Know what is personal info: name, address, DOB, passport, IP, DNA, fingerprints
- Beware of vishing, phishing, and smishing attempts
- Don't use public Wi-Fi for sensitive activities
- Report email scams you encounter
- Take steps to secure your online data
Password Use
- Keep passwords confidential, change if breach suspected
- Minimum 8 characters: include numbers, special chars, uppercase
- Avoid consecutive identical characters or only numbers/letters
- Never reuse or cycle old passwords
- Don't save in automated logins or macros
- Never share individual user passwords
Email Best Practices
- Avoid free web-based email for business (less secure)
- Be cautious sharing job duties on social media
- Review Out of Office responder content carefully
- Always verify sender's email before acting
Financial Transaction Safety
- Verify payment gateways (https:// + padlock) before transacting
- Never share PINs, passwords, CVV (not even with banks)
- Don't save card details on websites or public computers
- Enable two-factor authentication everywhere
- Don't open emails from unknown sources
- Report fraud: RBI ombudsman or cybercrime.gov.in
- If card lost/stolen, block card and freeze bank account
Mobile App Security
- Monitor for rogue apps proactively
- Download only from trusted sources (App Store, Play Store)
- Never save passwords on your device
- Invest in mobile security services
- Enhance overall data security posture
Measures for Cyber Attacks
- Verify links before clicking
- Don't accept unsolicited friend requests on social media
- Conduct regular vulnerability assessments
- Invest in patch management for updates
- Maintain regular data backups
- Control access to your systems
- Protect network with a firewall
Virus Monitoring & Detection
Signature-Based
Relies on databases of known threats. Identifies threats matching entries but may not detect new or unknown threats.
Behavioural Detection
Continuously monitors the behavior of installed programs, looking for unusual or suspicious activity patterns.
Cloud-Based
Stores threat definitions in the cloud. Saves device space and allows remote real-time updates across all connected devices.
Encountered a cyber threat?
Report financial fraud to the RBI Ombudsman online or through the National Cybercrime Reporting Portal at www.cybercrime.gov.in. If your card is lost or stolen, block the card and freeze the linked bank account immediately.
Frequently Asked Questions
Everything you need to know before you get started.
Security & Privacy
Yes. time.money is built privacy-first, with security layered at every step your data takes.
- Encrypted in transit. Every connection uses TLS 1.3, and our edge network screens malicious traffic before it reaches our servers.
- Stored only in India. Your data lives on AWS infrastructure in the Mumbai region. Credentials and keys are held in a managed secrets vault, never in application code.
- You control what we access. Bank, mutual fund and loan data reaches us only through consent-based, RBI-regulated channels such as the Account Aggregator (opens in new tab) framework and MFCentral. Every consent is time-bound and limited in scope, and you can revoke any linked account from your profile at any time.
- A second check on sensitive actions. Signing in, linking a loan and deleting your account each require a one-time password.
- Analytics never sees your finances. Usage analytics is optional, identifies you by a pseudonymous token rather than your account, and filters out names, PAN, account numbers and amounts before anything is sent. Session recording is switched off.
- You can leave whenever you want. Deleting your account revokes every linked connection and permanently removes your data after a 48-hour cool-off period, keeping only what regulation requires.
We review our security controls regularly and fix what we find before it can reach you.
No. time.money does not and will not sell user data to any third party, under any circumstances.
As a safety measure, all your sensitive data is masked by default when you first open your account. Tap the eye icon to unmask them, or leave them masked at any time for added privacy.
No, time.money doesn't use passwords. Access is through an OTP sent to your registered mobile number, which keeps your account better protected against common password-based attacks.
Still have questions? Write to us at help@time.money
Page last updated: