Sign the back of new cards as soon as you get them.
Don’t let anyone else use your card.
Regularly check that you still have your card and device.
Let us know as soon as you realise your card or device or PIN has been lost, stolen or used by someone else.
Don’t use an electronic banking facility such as an ATM, EFTPOS terminal or pay through a website if you think something isn’t right – fraudsters can use fake equipment to steal cards or capture PIN details.
When your card expires, destroy it by shredding or cutting it up. Make sure you slice through the embedded microchip, magnetic strip and security code.
Keeping your banking information secure
Don’t share your passwords, PINs, passcodes or pattern locks with anyone.
We recommend accessing NAB’s website by typing nab.com.au into your browser, rather than a link from within an email, SMS, a pop-up window, or from your browser history.
Make your password/passcode/PIN hard to guess. Don’t choose one that’s easily identified with you (e.g. your birth date, car registration, telephone number or name).
Be careful with your passwords, passcodes and PINs. Avoid writing them down or recording them in a device and choose different ones for each of your accounts.
Don’t let anyone watch you enter your passwords, passcodes or PINs.
Don’t share your Visa Secure one-time passcode with anyone, unless you're completing an online purchase that you initiated.
Please be aware that if anyone else has Touch ID or Face ID set up on your device using their fingerprints or image, they may be able to access your banking accounts and change some of your settings. This could impact your liability for unauthorised transactions. Treat your device like your wallet or purse. Keep it close at all times.
If the guidelines above are not followed, you may be liable for any unauthorised transactions.
Liability for losses resulting from unauthorised transactions will be governed by the ePayments Code.
Avoiding scams and hoaxes
Treat any unexpected emails, SMS or phone calls with caution. NAB is phasing out sending links in unexpected SMS messages. If you do receive an SMS containing a phone number asking you to contact NAB, search nab.com.au to verify that the phone number is legitimate where possible. You should treat any unexpected SMS messages with a link as suspicious. We’ll never send you an email or SMS asking you to provide your personal or banking details via a link or attachment nor will we send you a link taking you directly to Internet Banking. If you do receive these kinds of messages claiming to be from ‘NAB’, don’t act on them. Instead, forward the message to firstname.lastname@example.org and then delete it. Alternatively, you can forward the suspicious SMS to 0476 220 003.
If you feel like a call might not be genuine, hang up, and call back on an official phone number to verify the call was legitimate (the general NAB number is listed on this brochure, on the back of your cards and online). Never provide personal information or allow the caller to have remote access to your computer on unsolicited calls.
We’ll SMS you one-time passcodes for NAB Internet Banking transactions, password resets and your requests for Open Banking data sharing – so it’s important to keep your phone secure. We might also send you a security code to verify you when you call us. This is the only code we will ask you to provide to us. Make sure you read the SMS in its entirety before sharing that code with us. Otherwise, do not provide the one-time passcode or security codes to anyone calling you even if they say they are from ‘NAB’.
When enrolling your card into a digital wallet we’ll send you a verification code to complete your enrolment with the digital wallet provider. Never share this code with anyone else.
If your mobile phone ever stops working, get in touch with your service provider to make sure you haven’t been a victim of ‘mobile phone porting’. This is where scammers use your information to transfer your phone number to another provider so they can intercept SMS passcodes sent to you.
When downloading Apps, ensure that they are from official App stores (App Store or Google Play). Never download an App from a link in an email or SMS.
Regularly check your account statements and transaction history. If you spot a transaction you don’t remember or recognise, let us know straight away.
Only use trusted devices and trusted Wifi networks to do online banking. Never accept a request to download a program or certificate to your device in order to use a public Wifi network.
Regularly check your Open Banking data sharing permissions in NAB Internet Banking/NAB app (consents for your banking data to be shared with an accredited third party). If you spot content you don’t remember or recognise, call us straight away. For instructions on how to do this, please visit the open banking service page.
Install up-to-date anti-virus software on your devices to detect and prevent online attacks. NAB offers customers 6-months free security software.
Secure your letterbox with a lock to prevent your mail being stolen.
Let us know straight away if your email, address or contact details change.
Never give out personal information to people you don’t know or trust.
Don’t publish confidential information about yourself on social media, including your full name, date of birth, address or phone number – criminals can use this information to impersonate you.
Shred documents containing your personal information before throwing them away.
When to notify NAB
If your card, phone or device has been lost or stolen, call us immediately on 1800 033 103 (within Australia) or +61 3 8641 9121 (from overseas) 24 hours, 7 days a week - toll free. (Calls from mobile phones are charged at applicable mobile phone rates.)
You can also block, unblock and replace your linked personal and business cards by clicking on Cards in the main menu in NAB Internet Banking, the Cards menu in the NAB app or by calling NAB. If you have enrolled your NAB card into a Digital Wallet (i.e. Google Pay, Apple Pay etc) or digital payments and want to block all digital payments transactions, please call NAB.
If you believe something isn’t right with your account, let us know straight away. Call the numbers listed below especially if:
Someone finds out your PIN, passcodes or passwords.
There’s an error, unauthorised access or unauthorised transaction on your account.
Your mobile phone is lost or stolen and your mobile phone number is registered for SMS Security.
You’ve provided your banking details to an unsolicited email or unknown caller.
Call us to tell us about any changes to your address.
If you’re d/Deaf or find it hard to hear or speak to hearing people on the phone, the National Relay Service can help. To contact NAB give our phone number 13 22 65 or 13 10 12 for business customers to the National Relay Service operator when asked.