1) What is Two-Factor Authentication (2FA)?

Two-Factor Authentication is a security measure adopted by Changjiang Securities Brokerage (HK) Limited to enhance the safety of online trading. Whenever you use the online trading service, you will receive a 6-digit one-time password via SMS sent to your registered mobile phone number with our company. You are required to enter this password to log in to your online trading account. After enabling 2FA, you need to provide the following information for login and trading:

a. Account number

b. Login password

c. One-time password sent to your mobile

2) When will Two-Factor Authentication take effect?

Starting April 27, 2018, securities clients will be required to use their registered mobile phone number to receive a one-time password when logging into their online trading platform; otherwise, they will be unable to log in to their online trading account. Please note that your account number and login password remain unchanged. If you did not register your mobile phone number to receive the one-time password before April 27, 2018, you will be unable to log in to your online trading account. We urge you to register your mobile phone number to receive the one-time password as soon as possible to avoid affecting your trading.

3) Who needs to register a mobile number to receive one-time passwords?

All clients who wish to conduct online trading through Changjiang Securities Brokerage (HK) Limited are required to register a valid mobile number for receiving one-time passwords.

4) Can clients opt out of using Two-Factor Authentication (2FA) to log in to their online trading accounts?

No. Two-factor authentication is a requirement of Hong Kong regulators. When a customer conducts an online transaction, the customer will receive a 6-digit "one-time password" via SMS through a mobile phone number registered with the company. The customer must enter this password to authenticate the login process.

5) Will there be any changes to online trading services?

No changes will be made to online trading functions. Two-Factor Authentication only alters your login and online trading verification procedures.

6) Why does Changjiang Securities Brokerage (HK) Limited introduce Two-Factor Authentication for online trading? What are the benefits?

Changjiang Securities Brokerage (HK) Limited is committed to ensuring a high level of security for its clients' online transactions. Two-factor authentication verifies client identity through the following aspects, enhancing credibility:

a. known Information (account number and login password)

b. Verification code issued by Changjiang Securities Brokerage (HK) Limited (one-time password sent to your mobile phone)

With increasingly sophisticated online fraud tactics, enhanced cyber security is essential to counter potential risks. Two-Factor Authentication enables you to trade online with greater peace of mind.

7) Why does the online trading system reject the one-time password?

For security purposes, randomly generated 6-digit one-time passwords are only valid for a short period. You will be prompted to retry if the password expires. Please click the Resend Dynamic Password button on the verification page to generate a new password and re-enter it.

If login still fails, please contact our Client Services & Operations Department Hotline: (852) 2823-0388 for assistance.

8) Can I receive one-time passwords when I am overseas?

If you are overseas or using a foreign network provider, you may not be able to receive international SMS messages. Please note that when you are in mainland China or overseas, you need to turn on your mobile phone and activate roaming service to ensure you can receive one-time password SMS messages to complete online transactions. Please contact your telecommunications service provider for details.

9) Can I use an overseas mobile phone number for this service?

Yes, our company currently supports mobile phone numbers from the following countries:

10) Why am I not receiving the SMS verification code??

The phone number you are using must match our records. Please ensure the number is correct. If needed, please log in to our website to download the information change form or contact our Client Services & Operations Department to change your phone number.

11) What should I do if I receive a verification code via SMS but do not log in to the online trading platform?

Please contact our Client Services & Operations Department Hotline 2823 0388 immediately.

12) Are there any charges for the SMS verification service?

Currently, this SMS verification code service is free. However, your mobile network provider may charge you for SMS services. Please contact your mobile network provider for details.

13) Will verification codes be forwarded to other numbers if I enable SMS forwarding service?

The SMS verification code will only be sent to the mobile phone number you registered with our company and will not be forwarded to other mobile phone numbers, even if you have activated SMS forwarding

14) What account activities will trigger instant email notifications to clients?

l   Login to the system

l   Reset password

l   Fund transfer to third-party accounts

l   Change customer and account details (including email address, residential or mailing address, telephone number, and registered bank information)

15) Can clients opt out of certain account activity email notifications?

Clients may choose not to receive "Execution Transaction" notifications. If applying, clients must submit the relevant form in advance (the "Opt-Out of Receiving Prompt Notification of Trade Execution Form " is available in the "Forms Download" section of our website's "Account Service" tab; please complete it and return it to us by mail, email, or fax). Please note that clients must understand the risks involved, especially the possibility of not being able to detect unauthorized transactions in a timely manner.

16) What precautions can prevent unauthorised login caused by password leakage?

l   Set a strong password containing no less than 8 alphanumeric characters

l   Avoid using easily identifiable information such as login names, phone numbers, dates of birth or other personal details as passwords

l   Passwords should be kept highly confidential and should not be shared with anyone, including our staff

l   Change passwords regularly (e.g. every 90 days), Alternatively, change your password as soon as you suspect it has been compromised.

Use distinct passwo