Securing your personal information
How do you make sure your money and accounts don’t fall into the wrong hands? It all starts with securing your personal information, including:
- devices that you use to make payments (these may include your smartphone, tablet or wearable device)
- personal Identification Numbers (PINs)
- phone passcodes
- pattern Lock codes
- internet banking passwords
- online account passwords and
- SMS and security codes.
Tips to help keep your money and accounts safe
Card and device security
- Sign the back of new cards as soon as you get them.
- Don’t let anyone else use your card.
- Regularly check that you still have your card and device.
- Let us know as soon as you realise your card, device or PIN has been lost, stolen or used by someone else.
- Don’t use a payment device if you think something isn’t right. Fraudsters can use fake equipment to steal cards or capture PIN details.
- When your card expires, destroy it by shredding or cutting it up. Make sure you slice through the embedded microchip, magnetic strip and security code.
Keeping your banking information secure
- Don’t share your passwords, PINs or passcodes with anyone. We recommend accessing NAB’s website by typing nab.com.au into your browser, rather than from a link in an email, SMS, a pop-up window, or from your browser history.
- When transacting with NAB online, make sure your internet session is secure – check that the URL (web address) has ‘https’ at the start, and a closed padlock icon.
- Make your password or PIN hard to guess. Don’t choose a password or PIN that’s easily identified with you (e.g. your birth date, car registration, telephone number or name).
- Never write passwords or PINs down, and change them frequently.
- Use a different password or PIN for each of your online accounts.
- Don’t let anyone watch you enter your NAB Internet Banking password, or your PIN at an ATM.
- Don’t share your Visa Secure one-time passcode with anyone, unless you’re completing an online purchase that you initiated.
- If you have your fingerprints or Face ID saved to your phone, you can use them to log in to the NAB app. To set up Touch ID or Face ID, go to Settings and select ON for Touch ID or Face ID. You should only set up Touch ID or Face ID if only your fingerprints or face image are saved on the device. If you do save someone else’s prints or image, they will be able to access your account information and change some of your settings and payment limits. That means your liability of unauthorised transactions may be affected.
- Treat your device like your wallet or purse. Keep it close at all times.
If the guidelines above are not followed, you may be liable for any unauthorised transactions.
Avoiding scams and hoaxes
- Treat any unsolicited emails, SMS or phone calls with caution. We’ll never send an email or SMS with a link or attachment asking you to provide personal or banking details. If you do receive a message of this nature purporting to be from ‘NAB’, don’t act on it. Instead, forward the message to email@example.com and then delete it. Alternatively, you can forward suspicious SMS messages to 0476 220 003.
- If you feel like a call might not be genuine, hang up, and call back on an official phone number to verify the call was legitimate (the general NAB number is listed below, on the back of your cards and online). Never provide personal information or allow the caller to have remote access to your computer on unsolicited calls.
- We’ll SMS you one-time passcodes for internet banking transactions, password resets and your requests for Open Banking data sharing, so it’s important to keep your phone secure. These messages should not be shared with anyone, even NAB. If you call NAB, we may send you an identification verification SMS. This is the only code we will ask you to provide to us.
- If your mobile phone ever stops working, get in touch with your service provider to make sure you haven’t been a victim of ‘mobile phone porting’. This is where scammers may use your information to transfer your phone number to another provider so they can intercept SMS passcodes sent to you.
- When downloading apps, ensure that they are from official app stores (the App Store or Google Play). Never download an app from a link in an email or SMS.
- Regularly check your account statements. If you spot a transaction you don’t remember or recognise, let us know straight away.
- Install up-to-date anti-virus software on your devices to detect and prevent online attacks. NAB offers customers six months free security software. Visit our anti-virus software security page to learn more.
- Avoid using computers in public places like internet cafes, hotels and airport lounges to do online banking.
- Only bank on trusted devices and on trusted WiFi networks. Never accept a request to download a program or certificate to your device to use a public WiFi network.
- Regularly check your open banking data sharing permissions in internet banking (when you’ve requested for your banking data to be shared with an accredited third party). If you spot a consent you don’t remember or recognise, call us straight away.
- Report any scams to the Australian Federal Government’s SCAMWatch service, opens in new window.
- Keep up-to-date with online threats and advice on our security homepage, or sign up to the Australian Federal Government’s free Stay Smart Online Alert Service, opens in new window.
App Store is a trademark of Apple Inc., registered in the U.S. and other countries.
Google Play and the Google Play logo are trademarks of Google LLC.
Reduce the risk of identity theft
- Secure your letterbox with a lock to prevent your mail being stolen.
- Let us know straight away if your address or contact details change.
- Never give out personal information to people you don’t know or trust.
- Don’t publish confidential information about yourself on social media, including your full name, date of birth, address or phone number – criminals can use this information to impersonate you.
- Shred documents containing your personal information before throwing them away.
When to notify NAB
If your card, phone or device has been lost or stolen, call us immediately on 1800 033 103 (within Australia) or +61 3 8641 9121 (from overseas) 24 hours, 7 days a week. (Calls from mobile phones are charged at applicable mobile phone rates.)
You can also block, unblock and replace your linked consumer and business cards by clicking on My cards on the main menu in the NAB Internet Banking or the My cards menu in the NAB app.
If you believe something isn’t right with your account, let us know straight away. Call the numbers listed below especially if:
- someone finds out your PIN, passcodes or passwords.
- there’s an error, unauthorised access or unauthorised transaction on your account.
- your mobile phone is lost or stolen and your mobile phone number is registered for SMS Security.
- you’ve provided your banking details to an unsolicited email or unknown caller.
Call us to tell us about any changes to your address.
For more information call
13 22 65 (personal customers)
13 10 12 (business customers)
Available 24 hours, 7 days a week.
Hearing impaired customers with telephone typewriters can contact us on 13 36 77.
You can also visit our security homepage.