Industrial strength security, all year round
We’re 100% committed to protecting your security and privacy online
01
Security alerts
We will notify you of any scams targeting customers with details on how to keep yourself safe.
Fraudulent emails and telephone calls that appear to be from UBank or other legitimate businesses may attempt to trick you into providing personal information such as Internet or Telephone Banking password etc.
Latest security alert - Oct 2015: Spam emails
UBank is aware of spam emails circulating that contain malicious software. If you click on a link or open an attachment in the email, the malicious software may allow unauthorised access to your accounts.
Examples of the emails currently circulating are below.
If you receive this email, do not click on any links or attachments. Please forward it to spoof@nab.com.au and then delete it.
If you received an email of this type and have clicked on the links, please contact us immediately on 13 30 80.
02
What we do to protect you
Security measures to keep your investments as secure as possible.
SMS security
We send you a unique password via SMS to make it twice as hard for scammers to compromise your security.
Transaction monitoring
Every transaction made through UBank is monitored for anything suspicious or unusual.
Firewalls
Prevent potentially dangerous material entering UBank’s systems.
Session tokens
Make it very difficult for your banking session to be compromised.
128-bit Secure Sockets Layer Encryption
This is the current security standard utilised by most banks in Australia in connection with their internet banking customers.
Digital certificates
Verify the identity and authenticity of our websites.
Website security scans
Check for vulnerabilities.
Banking sessions timeout facility
We’ll automatically log you out if you’ve been inactive for a while.
Maximum transfer limits
As an additional precaution, we limit the maximum you can transfer via online banking each business day. If you need to transfer more, call us on 13 30 80 to arrange for this to be paid into one of your linked accounts.
Lockout
After a number of failed logins, access to online banking is automatically blocked.
VeriSign digital certificates
Verify that you’re connected to the real UBank.
Industry Working Groups
We work with government and industry bodies to ensure the very best eCommerce security.
03
Safety tips
Simple steps to protect yourself from unwanted scammers.
Look after your password
- Don’t give it to anyone! Not even UBank staff.
- Make sure it’s hard to guess. Never write it down. Change it frequently.
- Don’t use the same password for your regular internet websites. They are often less secure and easily compromised by hackers.
- Your password should be at least 6 characters long and contain at least 1 numeric and 1 alpha character.
- Consider creating a password based on a mnemonic such as an easily remembered phrase or song title. Or take the first letter of each word in a phrase and add numbers to it. For example, “To be or not to be, that is the question” can become “2borX2b”.
Remember to log off
When you’ve finished an online banking session, make sure you log off.
Don't use public computers for online banking
Avoid using computers in public places such as internet cafes, hotels and airport lounges to conduct online banking when possible.
Be aware
- Never leave your computer unattended while banking online, especially when on a shared computer.
- Make sure the URL reads “https” or “secure” and a lock is displayed in the bottom right of your screen.
Keep an eye on your mobile phone
- We will SMS you one-time passwords for internet transaction so it’s important to keep your phone secure. If it ever stops working, get in touch with your service provider to ensure you haven’t been a victim of mobile porting.
Up the anti with anti-virus software
It’s really important to have an up-to-date anti-virus program to detect and prevent online attacks and keep scammers away from your money.
Keep operating systems current
Ensure automatic updates are switched on and installed when available.
Don’t get caught by phishing
Treat any unsolicited email with suspicion as UBank will never send you an email with a link to online banking.
Regularly check your account statements
If you discover a transaction you don’t remember making, or do not recognise, please let us know.
Card security
If you have a UBank Debit Card:
- Sign the back immediately on receipt
- Don’t let anyone else use it – including a family member or friend
- Regularly check that you still have your card
- Take reasonable steps to protect it and keep the receipt after making a transaction
- Notify us immediately if you become aware that your card has been lost, stolen or used by someone else
- Destroy your card on the expiry date by cutting it diagonally in half (including any embedded microchip on the card; magnetic strip and security code)
- Don’t use an ATM or other equipment if anything about it appears unusual
- Take care to prevent anyone else seeing your password or PIN being entered in electronic equipment
- Try to memorise your PIN so you don’t have to write it down or disguise it
- Notify us immediately if you become aware that your PIN has been lost, stolen, known or used by someone else
- Don’t choose a PIN that is easily identified with you (for example, your birth date, car registration, telephone number or your name in part or full)
- Change PIN and passwords regularly
Remember: If you think your online banking information has been compromised, you’ve received a scam email, or there has been unauthorised access to your account, please contact us immediately.
04
Types of fraud
Hints and tips to ensure your money stays where it belongs.
-
If your online banking credentials have been compromised, scammers may transfer your phone number to another provider so they can receive any security codes sent by UBank.
Warning sign: Your mobile phone service has been disconnected suddenly.
What you should do: Immediately call your mobile provider to find the reason why your mobile service is no longer working.
If your mobile has been transferred to another provider without your permission, please contact us immediately.
-
This type of fraud involves using someone else’s identity and personal information to steal money, open bank accounts, conduct illegal business or gain other financial benefits.
Warning signs: You receive a call, SMS or email completely out of the blue requesting personal details.
Money goes missing from your bank account without any explanation.
You are unable to obtain credit or a loan because of an explicable bad credit rating.
What you should do: Never give out personal information to people you don’t know or trust. You should ensure any request for your details is verified as genuine before you answer any questions.
-
Phishing is when scammers try to trick you into providing your personal information – such as passwords or bank account details.
Never disclose information including Telephone or Online banking passwords, card PINs or CVV (card verification value) numbers.
Here are a few ways scammers may try to get these details from you:
- By email
Warning sign: You receive an authentic looking email to get your details. UBank will never send you an email asking for your password or send a link to the login page for online banking.
What you should do: If you suspect an email isn’t genuine, do not click on any links. Report it to UBank by email spoof@nab.com.au
- Over the phone
Warning sign: A scammer, pretending to be from UBank, may contact you and request account details such as bank account number or passwords. Ironically, it will probably be to notify you of a “problem” with account security.
What you should do: If you have any concerns on the legitimacy of a call, don’t answer any questions. Contact UBank directly.
- By SMS
Warning sign: You are sent an SMS from UBank asking you to provide account details. UBank will never send you an SMS requesting account information.
What you should do: If you receive an SMS message you haven't requested or you’re suspicious of, please contact UBank directly.
-
Fraudsters may seek to befriend you over the internet, often through dating/friendship sites, with the sole intent to defraud you or get you to commit fraudulent activity on their behalf.
Warning sign: These fraudsters are likely to ask for money to pay for flights to visit or send funds to help them overcome an illness.
Also, they may trick you into defrauding other people. This involves opening a bank account in your name and then providing the fraudster with the account details or transferring funds for them. In this instance, you could be committing fraud on their behalf.
What you should do: Contact UBank to report it.
-
Scammers are seeking to defraud unsuspecting online shoppers.
In some instances scammers have set up high-quality fake websites that promote the sale of popular desirable products, such as electronic items, at prices that are the best available on the internet by legitimate businesses.
Unfortunately, shoppers will fall victim to these scams and once they have paid for the item/s they never receive the goods.
Warning signs: The website is new and the seller has not had an established history of being a legitimate online retailer.
The price of goods is below (in some cases substantially below) the normal retail prices found on established legitimate websites for new products.
The website asks for payment of funds to be made by direct EFT funds transfer rather than providing the usual array of payment methods available by a legitimate online retailer.
What you should do: Never send your personal information, credit card details or EFT payment to a website you are not certain is genuine.
Be suspicious of product prices that are substantially below the prices offered by legitimate well known online retailers. If the price is ‘too good to be true’ …
-
Warning signs: Advertisements promise a big income for little and target people looking for a new job.
What you should do: As the old saying goes, “If it’s too good to be true, it probably is”. Report the email as spam.
To report a scam or suspicious advertisement, or find out more, go to SCAMwatch.
-
Warning signs: Advertisements that “pop up” in a different browser window aren’t always what they seem. They may be downloading “spyware” or “adware”.
These programs gather user information and monitor online activity, usually for advertising purposes.
What you should do: Ensure you have security software installed that detects and removes spyware.
-
These are harmful programs loaded to your computer to obtain information without your knowledge.
Viruses spread by infecting computers and then replicating.
Trojans look like genuine applications but embed themselves in your computer and monitor activity.
Warning signs: Unusual messages display on your screen, poor system performance, missing data and problems accessing your hard drive.
What you should do: Run your anti-virus software immediately.
Security software
Protect your computer from viruses, worms and Trojans with up-to-date firewalls and anti-virus, anti-spam and anti-spyware software.
A SPAM filtering product is important to block fake or virus-related emails.
For more specific information about how to protect your computer, visit the Microsoft® Security & Privacy site or Apple® Product Security site.
05
The UBank Defence
Working 24/7 to keep your money safe.
Should the worst ever occur, you’re still protected.
The UBank Defence is our promise to you that we’ll reimburse 100% of your money should it be fraudulently taken from your account provided;
- It’s clear you didn’t contribute to the loss
- You promptly let us know when you become aware of any unauthorised transactions
If you have any questions, or would like to know more about our security, please contact us.
When should you notify us?
Contact us immediately if:
- Your password/PIN becomes known to any other person or is compromised.
- Your card or Authentication Device has been misused, lost or stolen.
- The computer you use to access online banking is lost, stolen or fraudulently accessed.
- Your UBank account has been accessed by someone other than yourself.
- Unauthorised transactions have been made without your knowledge.
- Your mobile phone is lost, stolen or unexpectedly disconnected.