New guidelines have been set out by the Securities and Futures Commission (“SFC”) regarding the baseline requirements to reduce or mitigate hacking risks associated with internet trading. Licensed corporations are required to implement a Two-factor authentication (“2FA”) for its clients to login to their online trading accounts effective from 27 April 2018.  To comply with the new guidelines, the eWinner series* internet trading platforms of Yuanta Securities (Hong Kong) Company Limited (“YSHK”) has been implemented a combination of two different types of authentication for clients to log-in their online trading accounts.

YSHK 2FA procedures with immediate effect:

    The 1st step of authentication (prevailing):
Client enters account number and password.

    The 2nd step of authentication (newly implemented):
Client enters a one-time security token generated by the FortiToken Mobile App (provided by YSHK) that installed on the mobile device.

* eWinner series: eWinner (Web Trading Version) / eWinner (PC Version) /  eWinner Plus  (iOS Version) / eWinner Plus (Android Version)

eWinner (Web Trade Version) supports with Two-Factor Authentication, after the successful registration of FortiToken Mobile App, please take the below steps to login to eWinner (Web Trade Version):

1. Please login with your account number and password for first step of authentication





2.Press “Confirm” and input the 6-digit one-time token generated from FortiToken Mobile App for second step of authentication




3. Press “Confirm” and you may login to your eWinner (Web Trade Version).
eWinner (PC Version) supports with Two-Factor Authentication, after the successful registration of FortiToken Mobile App, please take the below steps to login to eWinner (PC Version):

1. Please login with your account number and password for first step of authentication



2.Press “Confirm” and input the 6-digit one-time token generated from FortiToken Mobile App for second step of authentication



3.Press “Confirm” and you may login to your eWinner (Web Trade Version).
eWinner Plus (iOS Version) is only available in Traditional & Simplified Chinese.
 

eWinner Plus (Android Version) is only available in Traditional& Simplified Chinese.
SP Trader (PC Version) supports with Two-Factor Authentication, please take the below steps to login to SP Trader (PC Version) with the SMS OTP provided by Yuanta Securities (Hong Kong):

1. Please input  ysspthk1.yuanta.com.hk in HOST and then login with your user ID  and password for first step of authentication



2. Press "Accept & Login" and register your device by inputting the SMS OTP provided by Yuanta Securities (Hong Kong) for second step of authentication


3. Click "Confrm" and login to your SP Trader (PC Version).it represents your device has been registered successfully. Next time when you are using the same device to login, you will process the 2FA automatically.

4. Register device will be shown in "Device Security Management". Please note that maximum 5 devices can be registered with the same account.


5. You can remove the registered devices in "Device Security Management".

SP Trader (iOS Version) supports with Two-Factor Authentication, please take the below steps to login to SP Trader (iOS Version) with the SMS OTP provided by Yuanta Securities (Hong Kong):

1. Please input ysspthk1.yuanta.com.hk in HOST, then login with your user ID and password for first step of authentication





2. Press "Login" and register your device by inputting the SMS OTP provided by Yuanta Securities (Hong Kong) for second step of authentication








3. Click "Confrm" and login to your SP Trader (iOS Version), it represents your device has been registered succesfully. Next time when you are using the same device to login, you will process the 2FA automatically.

4. Registered device will be shown in "Device Security Management". Please note that maximum 5 devices can be registered with the same account.



5. You can remove the registered devices in "Device Security Management".


SP Trader (Android Version) supports with Two-Factor Authentication, please take the below steps to login to SP Trader (Android Version) with the SMS OTP provided by Yuanta Securities (Hong Kong):

1. Please input ysspthk1.yuanta.com.hk in HOST, then login with your user ID and password for first step of authentication





2. Press "Login" and register your device by inputting the SMS OTP provided by Yuanta Securities (Hong Kong) for second step of authentication



3. Click "Confrm" and login to your SP Trader (Android Version), it represents your device has been registered succesfully. Next time when you are using the same device to login, you will process the 2FA automatically.

4. Registered device will be shown in "Device Security Management". Please note that maximum 5 devices can be registered with the same account.






5. You can remove the registered devices in "Device Security Management".



FortiToken Mobile App is compatible with iOS version 9 or above and Android OS version 4.4 or above. Please visit FortiToken Mobile (product guide) for the requirements on operating system.

Search for "FortiToken Mobile App" and download the app from the Google Play and  App Store. Also, you may download the apk file from here(https://www.yuanta.com.hk/Portal/Content/User/Image/FortiToken/FortiToken.apk). 

Yuanta Securities (Hong Kong) is not responsible for any delay in transactions that occur after you download the apk file from other channel/websites. Should you require further information about this letter or require technical supports, please contact your Account Manager or call our Customer Service Hotline at (852) 3555 7878 for immediate assistance.

FAQs

1) Two-Factor Authentication

Question 1: Why has Yuanta Securities (Hong Kong) implemented the two-factor authentication ? 
           
New guidelines have been set out by the Securities and Futures Commission regarding the baseline requirements to reduce or mitigate hacking risks associated with internet trading. Yuanta Securities (Hong Kong) is required to implement a Two-factor authentication for our clients to login to their online trading accounts effective from 27 April 2018.

Question 2: What is two-factor authentication ? 
           
Two-factor authenticaion strengthens security by requiring the user to provide a combination of two different types of authentication to login to their online trading account. The first step of authauthentication is to provide the login ID and password followed by the second step, such as providing a one-time token code generated by the FortiToken Mobile App that installed on the mobile device or obtaining a one-time password from SMS which provided by YSHK.

Question 3: Will I be charged for registering and using two-factor authentication for login ?
           
Yuanta Securities (Hong Kong) will not charge you for registering and using FortiToken Mobile App or SMS One-Time Password for login.

Question 4: Am I required to use two-factor authentication? 
           
Yes. You are required to use FortiToken Mobile App to generate the one-time token code for login to eWinner series. 

2) One-Time Token & One-Time Password

Question 5: What is one-time token? 
           
Yuanta Securities (Hong Kong)required client to use FortiToken Mobile App to generate the one-time token code for login to eWinner series. Each token is valid only for the respective login within a short time.

Question 6: Why if my one-time token is not accepted by eWinner series? 
           
Each token generated by FortiToken Mobile App is valid for the respective login within a short time, therefore it may not be accepted by eWinner series after the time limit and error message will be displayed. Please repeat the login procedure or wait for a moment to let FortiToken Mobile App to regenerate another one-time token and confirm the login.

Question 7: How to obtain the one-time password? 
           
Before you proceed with your login, Yuanta Securities (Hong Kong) will prompt you to enter a 6-digit OTP and send the OTP via SMS to your registered mobile phone number.

Question 8: Can I receive the One-time Password when I am aboard?
           
It will depend on whether you have roaming service for your mobile phone number. Please contact your mobile service provider and/or mobile phone hardware supplier for details. Please contact your mobile service provider for roaming SMS charges, however Yuanta Securities (Hong Kong) will not be responsible for such charges.

3) System Requirment

Question 9: What if my FortiToken Mobile App activated device is lost or I plan to get a new mobile device? 
    
Please contact your Account Manager or call our Customer Service Hotline at (852) 3555 7878 for re-issue the new FortiToken Mobile App. Also, you are required to complete identity verification before activation.

Question 10: What is the system requirment for FortiToken Mobile App?
            
FortiToken Mobile App is compatible with iOS version 9 or above and Android OS version 4.4 or above. Please visit FortiToken Mobile (product guide) for the requirements on operating system.