# How do we know if the PC we use for online banking is infected?

Look for signs on the computer and on the network, and reduce the risk either way. On the computer: unexpected remote-access tools, pop-ups asking you to re-enter banking details, browser extensions you did not install, security software that was switched off. On the network: the PC contacting an unfamiliar outside server at regular intervals, day and night, which is how banking malware and remote-access trojans stay in touch with their operators. Your bank's own alerts about new devices or changed payees matter too. The safest setup is a dedicated computer, or a separate user account used only for banking, with no e-mail on it, current updates and two-person approval for payments above a limit. NetSenX flags beaconing from that PC on every plan; it does not see what happens in the browser and does not replace the bank's own security checks.

FAQ: [Attack techniques explained](https://netsenx.com/en/faq/attacks) · https://netsenx.com/en/faq/is-the-pc-we-use-for-online-banking-infected

## Read next

- https://netsenx.com/en/detect-lateral-movement-c2-beaconing
- https://netsenx.com/en/is-someone-inside-your-network

## Related questions

- [How would we know if our ERP database was copied out of the company?](https://netsenx.com/en/faq/how-would-we-know-if-our-erp-database-was-copied-out)
- [Can network monitoring tell a backup upload from data theft?](https://netsenx.com/en/faq/can-network-monitoring-tell-a-backup-from-data-theft)
- [Why would a normal workstation connect to the domain controller at night?](https://netsenx.com/en/faq/why-would-a-workstation-connect-to-the-domain-controller-at-night)
- [What is ARP spoofing, and how do we detect it on a small office network?](https://netsenx.com/en/faq/what-is-arp-spoofing-and-how-to-detect-it)
- [Can someone on our Wi-Fi read other users' traffic?](https://netsenx.com/en/faq/can-someone-on-our-wi-fi-read-other-users-traffic)