Mobile Banking Transaction Rules of Bank of China Limited

Article 1 The customers who have opened the Great Wall Electronic Debit Cards, Credit Cards, Quasi-Credit Cards and passbooks (current account, all-in-one current account and all-in-one fixed account) with the banking outlets of Bank of China Limited ("BOC") may open the BOC mobile banking service through the mobile-based self-registration or by the means designated by BOC. Those registered customers for mobile banking shall transact the mobile banking service in accordance with these Rules.

Article 2 Inquiry Version, Transaction Version and VIP Version services are available for the BOC mobile banking, where, the former can only provide account information inquiry, and the latter two provide customers with service functions including account information inquiry, financial IC card, transfer and remittance (including: reservation transfer), mobile banking withdrawal, funds collection, transfer from personal account to corporate account, credit cards, foreign exchange purchases & sales, T-bond purchases & sales, fund trading, account precious metals, precious medal accumulation, Shuang Xiang Bao, B-share bank-securities transfer, third party custody, bank-futures transfer, BOC wealth management plans, Insurance, loan management, temporary loss-reporting of debit cards, mobile payment, UnionPay inter-bank payment without cards, bill payment, Utility Payment, link in an account, scheduled opening of third party custody account, online scheduled application for third party custody account opening, making reservation with an outlet, the package on the number of remittance transactions, Password-based remittance, Opening of Demand/Time Account, Virtual card, Recharging of prepaid card, card-not-present withdrawal via ATM, cross-bank cash pooling, large CD and loan repayment package. BOC will provide different service functions based on the service modes applied by the customers and the identity verification methods, and the BOC mobile banking will continue to update itself in order to offer different services and products to meet the changing financial service needs of customers.

In case that a customer has opened the BOC online banking upon his/her application for the BOC mobile banking service, the version for mobile banking shall be the same with that for online banking. That is, the online banking inquiry version, transaction version and VIP version shall correspond to the mobile banking inquiry version, transaction version and VIP version, respectively, and vice versa.

Article 3 The mobile banking services provide the service modes of WAP version and Api version.

The mobile operating systems that the Api mobile banking supports include Android, iPhone iOS, iPad iOS and Windows Phone. The iPhone and iPad users, as well as the users of mainstream types of Nokia and Samsung can download the Api. The Api version provides locally featured services specific to different regions. The users of all the mobile phones that can browser WAP sites can logon the BOC mobile banking WAP version to get relevant services after applying for the opening of mobile banking services.

Article 4 The BOC mobile banking provides around-the-clock services, but specific service items have different beginning and expiration time each day, so that the customers shall transact during the time of availability. Any transaction order received after daily expiration time of each specific service item will be deemed to be served and processed on the next banking day.

Article 5 Security verification tools (or "identify verification tools") for mobile banking of Bank of China include dynamic passwords (or TOKEN, ETOKEN) and BOC SMS code. Customers may apply for using different security verification tools based on their needs. The mobile banking transaction version and VIP version customers shall logon by using the security verification tools for transfer, remittance and payment. All the transactions made using the customers’ mobile banking login mobile phone number, login password and security verification tool shall be deemed done by them. When the customers use the mobile banking services, the customers’ mobile banking login user ID, login password and security verification tool shall replace the inquiry and withdrawal passwords of all their linked accounts. The first-time user of the BOC mobile banking shall be attentive to:

1. BOC SMS code is a service for security verification by Bank of China when customers make transfers and payments to others via mobile banking.

2. Api must bind with the hardware information of mobile phone, which shall be operated and completed by customers via Api. When unbinding with hardware, customers may do it via Api, online banking or at counter.

3. Where the customers opens mobile banking through registration at counter, the 6-digit password set at counter for registration must be changed. It is suggested that the password set have some safety level (8-20 digit password that contains figures and letters). Customers may change the password by their own in mobile banking settings according to their needs or the Safety Instructions.

4. The customers can logon mobile banking by using mobile phone numbers only in the way that one mobile phone number is specific to one mobile banking account. The customers can apply for changing the mobile banking numbers at the counters only. The customers shall properly keep important information like login mobile banking login password, e-Token and BOC SMS code and shall not provide or disclose such information to the others.

5. The reserved information on the login page of mobile banking for the customers who have applied for opening the BOC online banking service is the reserved welcome message of online banking. The customers shall timely confirm whether the reserved information of mobile banking is consistent with that of online banking so as to login accurately. Given unopened online banking service, the customers shall set their reserved welcome message in the menu of "Personal Preference".

Article 6 When the customers have opened the online banking, the linked accounts of online banking shall automatically become those of mobile banking; if the customers need to unlink the mobile banking account, they may unlink via mobile banking. The unlinking operation via any channel shall become effective in any other channel synchronously.

Article 7 When logging onto mobile banking, the customers need to enter mobile phone number and password. If mobile phone number and password entered are incorrect, the customers need to enter CAPTCHA.

Article 8 The identity verification tools for mobile banking used by personal customers shall be the same with those for online banking, that is, the online banking and mobile banking share e-Token and mobile phone number for receiving the message of BOC SMS code.

Article 9 To use the BOC mobile banking service, the customers shall ensure the safety and confidentiality of the passwords and identity verification tools used by them. They shall be attentive to the following matters including but without limitation to:

1. Not write down the password in a clear-text form or disclose it by other means;

2. Not divulge the password to anyone else including the BOC staff (the BOC staff are unable to and need not know such password for provision of all the services relating to mobile banking to the customers);

3. Timely destroy the record on password after the first-time use of the mobile banking service;

4. Not use the password easy to guess or crack (e.g. birthday, telephone number or other personal information or group of regular figures/letters) or relevant to a third party (e.g. identical to that of email);

5. Not record the password in any software holding passwords automatically (e.g. hint window for "Saving Password" displayed on any mobile phone screen or any similar function in the browser);

6. Change the password in a regular or irregular way, avoid the rotation of two passwords;

7. Avoid transmitting the mobile banking password via SMS or email;

8. Please use the original browser purchased along with mobile phone to visit mobile banking, do not use browser and other software with unknown source to access mobile banking;

9. Not tell own e-Token or BOC SMS code to others;

10. Do not answer or believe any strange call, SMS and online transaction information or make any transfer or remittance. For any doubt, please immediately call the BOC customer service hotline or 110 for consultation and reporting, to avoid frauds; and

11. During the use of mobile banking, review any payment instruction received by checking such important information as the name, account and mobile phone number of payee, amount and currency, and make payment after checking true and correct.

Article 10 The expiration of E-Token will lead to transaction failure. Therefore, customer shall bear the validity period of e-Token in mind and lodge an application on renewing them to the Bank three months before such expiration.

Article 11 Where a customer enters wrong mobile phone number or password for five consecutive times a day, BOC will temporarily lock up his/her mobile banking account on the day and the system will unlock the account automatically on the next day or the Bank will unlock it after authenticating his/her identity on the current day; where a customer fails to authenticate his/her mobile phone number or password for 15 consecutive times accumulatively, BOC will freeze his/her transaction qualification, and the customer shall reset the password at the counter of a banking outlet with his/her valid certificate and any linked account for mobile banking. The customer may continue handling counter-based transactions when his/her qualification for mobile banking transactions is frozen.

Where a customer enters wrong e-Token or BOC SMS code for five consecutive times a day, BOC will temporarily lock up his/her verification tool on the day and the system will unlock the account automatically on the next day or the Bank will unlock it after authenticating his/her identity on the current day; where a customer fails to authenticate his/her e-Token or BOC SMS code for 15 consecutive times accumulatively, BOC will suspend the functions of this security verification tool, and the customer shall unlock it or apply for a new tool at the counter of a banking outlet with his/her valid certificate and the locked verification tool. Where a customer fails to authenticate his/her SIMkey or Mobile Key password for 6 consecutive times accumulatively, BOC will suspend the functions of this security verification tool, and the customer shall reset the password in the mobile banking. Where a customer fails to authenticate his/her USBkey for 5 consecutive times accumulatively, BOC will suspend the functions of this security verification tool, and the customer shall apply for a new key at the counter of a banking outlet with his/her valid certificate and the locked verification tool.

Article 12 The uniform limits set by the system are different based on different verification methods of customers’ identities. The customers may set the self-trading limits less than the uniform limits by the system through the setting function in the mobile banking services. According to regulatory requirements, customers may set daily and annual accumulative limits for transfer to others via online banking and mobile banking at counter. The ceilings at bank end for the limits are daily accumulative of RMB500 million and annual accumulative of RMB50 billion Maximum daily accumulation of 100,000 transactions. Meanwhile, if the daily accumulative limit for transfer of a customer to others exceeds RMB300,000, the system will send an alert to the customer when the transfer transaction is submitted. The existing uniform limits (in RMB) by the system are specified below:

Scope of Services to the Personal Mobile Banking Transaction Version Customers and Setting of Limits
Transaction	Verification Tool	Single Limit (RMB Yuan)	Daily Add-up (RMB Yuan)
Transfer to linked accounts/ Inter-bank transfer (ordinary transfer)/ Mobile phone number transfer	BOC SMS code (WAP version)	2,000	2,000
	BOC SMS code	100,000	100,000
	Mobile Key	200,000	200,000
	Mobile Key + BOC SMS code	1,000,000	1,000,000
	SIMkey（apply online）
	e-Token + BOC SMS code
	SIMkey（apply at counter）	5,000,000	5,000,000
	USBKey	10,000,000	10,000,000
Mobile banking withdrawal	BOC SMS code (WAP version)	1,000	1,000
	e-Token+ BOC SMS code/ BOC SMS code/ SIMkey/ USBKEY	2,000	2,000
Inter-bank transfer (real-time transfer)	BOC SMS code (WAP version)	2,000	2,000
	BOC SMS code	100,000	100,000
	Mobile Key	200,000	200,000
	e-Token+ BOC SMS code / SIMkey（apply online）Mobile Key+ BOC SMS code	1,000,000	1,000,000
	SIMkey（apply at counter）	1,000,000	5,000,000
	USBKEY	1,000,000	10,000,000
Recharging to own e-cash account	e-Token+ BOC SMS code/ BOC SMS code/ SIMkey/ USBKEY	5,000	5,000
Recharging to other's e-cash account	e-Token+ BOC SMS code/ BOC SMS code/ SIMkey/ USBKEY	5,000	5,000
Password-based remittance	BOC SMS code (WAP version)	1,000	1,000
	e-Token+ BOC SMS code/ BOC SMS code/ SIMkey/ USBKEY	2,000	2,000
Card-not-present withdrawal via ATM	BOC SMS code (WAP version)	1,000	1,000
	e-Token+ BOC SMS code /SIMkey/ USBKEY/ BOC SMS code	2,000	2,000
Insurance	BOC SMS code (WAP version)	20,000,000	20,000,000
	BOC SMS code	1,000,000,000	1,000,000,000
	e-Token+ BOC SMS code/ Mobile Key/ SIMkey/ USBKEY	10,000,000,000	10,000,000,000
Scheduled transfer	-	10,000,000,000	10,000,000,000
Transfer to linked accounts	-	10,000,000,000	10,000,000,000
Foreign exchange trading	-	10,000,000	-
Precious metals	-	10,000,000	-
Precious metal accumulation	-	10,000,000	10,000,000
Fund trading	-	10,000,000	-
T-bond trading	-	10,000,000	-
Third party custody	-	10,000,000	-
B share bank-securities transfer	-	10,000,000	-
Bank-futures transfer	-	50,000,000	50,000,000
BOC wealth management plan	-	1,000,000,000	-

 

Scope of Services to the Personal Mobile Banking VIP Version Customers and Setting of Limits
Transaction	Verification Tool	Single Limit (RMB Yuan)	Daily Add-up (RMB Yuan)
Transfer to linked accounts/ Inter-bank transfer (ordinary transfer)/ Mobile phone number transfer	BOC SMS code (WAP version)	2,000	2,000
	BOC SMS code	100,000	100,000
	Mobile Key	200,000	200,000
	Mobile Key + BOC SMS code	1,000,000	1,000,000
	SIMkey（apply online）
	e-Token + BOC SMS code
	SIMkey（apply at counter）	5,000,000	5,000,000
	USBKey	10,000,000	10,000,000
Mobile banking withdrawal	BOC SMS code (WAP version)	1,000	1,000
	e-Token+ BOC SMS code/ BOC SMS code/ SIMkey/ USBKEY	2,000	2,000
Inter-bank transfer (real-time transfer)	BOC SMS code (WAP version)	2,000	2,000
	BOC SMS code	100,000	100,000
	Mobile Key	200,000	200,000
	e-Token+ BOC SMS code / SIMkey（apply online） Mobile Key+ BOC SMS code	1,000,000	1,000,000
	SIMkey（apply at counter）	1,000,000	5,000,000
	USBKEY	1,000,000	10,000,000
Recharging to own e-cash account	e-Token+ BOC SMS code/ BOC SMS code/ SIMkey/ USBKEY	5,000	5,000
Recharging to other's e-cash account	e-Token+ BOC SMS code/ BOC SMS code/ SIMkey/ USBKEY	5,000	5,000
Password-based remittance	BOC SMS code (WAP version)	1,000	1,000
	e-Token+ BOC SMS code/ BOC SMS code/ SIMkey/ USBKEY	2,000	2,000
Card-not-present withdrawal via ATM	BOC SMS code (WAP version)	1,000	1,000
	e-Token+ BOC SMS code /SIMkey/ USBKEY/ BOC SMS code	2,000	2,000
Insurance	BOC SMS code (WAP version)	10,000,000	10,000,000
	BOC SMS code	1,000,000,000	1,000,000,000
	e-Token+ BOC SMS code/ Mobile Key/ SIMkey/ USBKEY	10,000,000,000	10,000,000,000
Scheduled transfer	-	10,000,000,000	10,000,000,000
Transfer to linked accounts	-	10,000,000,000	10,000,000,000
Foreign exchange trading	-	50,000,000	-
Precious metals	-	50,000,000	-
Precious metal accumulation	-	10,000,000	10,000,000
Fund trading	-	50,000,000	-
T-bond trading	-	50,000,000	-
Third party custody	-	50,000,000	-
B share bank-securities transfer	-	50,000,000	-
Bank-futures transfer	-	50,000,000	50,000,000
BOC wealth management plan	-	1,000,000,000	-

Notes:

1. Transfer-out upper limit of the Great Wall Credit Card is controlled by the limit of the issuing system. Currently, the upper limit for transfer-out of a single transaction or total amount of a single day is RMB 5,000,000.

2. Mobile payment limit will be set based on the merchants and card types (debit card, Great Wall card, and BOC card, etc.) under the above limits respectively. Details are subject to the announcements of merchants.

3. Limit of agent bill payment will be set based on different types of agent bill payment provided by different branches under the above limits respectively. For details, please refer to the announcements of local branches or system reminders.

4. Intra-BOC transfer, transfer from personal account to corporate account. repayment for unlinked credit card and funds collection share unified daily add-up.

5. Verification tool indicated with BOC SMS code (WAP version) means mobile banking WAP version is applicable; and verification tool without BOC SMS code means Api version is applicable.

Article 13 The customers shall ensure to logon the correct mobile banking website of BOC (http://wap.boc.cn) if they use browser. Please enter this website directly, and avoid indirect visit of WAP sites of BOC mobile banking by e-mail or other hyperlinks. The customers shall download Api from the BOC portal website (http://www.boc.cn) or other designated websites. Do not download and use unknown customer terminals for any transaction. BOC provides customers with the reserved information validation service to help them effectively identify phony websites. The customers are advised to timely set or check the reserved information upon the first-time use of the mobile banking service, and not disclose such reserved information to the inquiries by anyone else, other websites, telephone or SMS except handling business with BOC.

Article 14 The customers shall pay for using the BOC mobile banking services based on relevant charging standard published by BOC. Except otherwise agreed, BOC will deduct relevant service fees from the customers’ registered accounts for mobile banking and deduct transfer & remittance fees from their transferred-out accounts.

Article 15 The customers shall open services at counters if they intend to apply for investment functions such as mobile banking foreign exchange, third party custody, precious metals, funds, T-bonds and B share bank-securities transfer. While handling foreign exchange purchases & sales, third party custody, funds, T-bonds and B share bank-securities transfer, customers should obey the trading rules and operational guides made by supervisory authorities, and sign an agreement with mobile banking of BOC and complete e-Token verification at the first use of those trading services.

Article 16 BOC will publish an announcement in advance to remind its customers before updating of the website or mobile banking system. Customers shall use other channels of BOC such as counter service, online banking and phone banking to complete the transactions, in case the mobile banking service is suspended due to service upgrade or is not available as a result of force majeure.

Article 17 In accordance with the national provisions and regulatory requirements, BOC will regularly check the applicability of these Rules, update it out of the business and technology development needs on a timely basis, and make prior announcement by suitable means. Please regularly read these Rules. The BOC mobile banking service users shall comply with these Rules.

Article 18 BOC will make prior announcement with respect to its system upgrading, business change or charging modification, or any amendment to these Rules according to business development needs, and it will not inform the customers individually. For any dissent, the customers have the right to cancel relevant mobile banking services. The customers are deemed to agree with and accept such amendment or change if they do not cancel or continue to accept relevant services. The amended or modified businesses or Rules will prevail.

Note: "Announcement" herein is made in the banking outlets and portal website (http://www.boc.cn) of BOC.