Latest security alerts

NAB is aware of a current phishing email campaign targeting customers. Please see two examples below.

The email claims to be a message from NAB requesting you to view your BPAY payment status or reset your password. This leads to a fake NAB website asking for personal information and banking credentials.

Do not click on the link.

NAB will never ask you to confirm, update or disclose personal or banking information via a link in an email or text message.

If you receive this type of email or text message, please forward it to phish@nab.com.au and then delete it.

If you have received this type of email or text message and have clicked on the link or entered your details, please contact your local branch or call 13 22 65 immediately.

NAB is aware that Australians are being targeted with sophisticated investment scams promising lucrative returns. In 2019, Australians reported to the Australian Competition and Consumer Commission (ACCC) a loss of $61 million from investment scams.

In the current financial climate, the promise of attractive returns is luring everyday Australians to invest millions in suspicious overseas companies that have slick online profiles.

The ACCC advises that these fake investment companies are proactively contacting Australians online or by phone, and claiming to be stock brokers offering investment advice, promotions, and hot tips or offering free investment seminars.

The ACCC advises the fraudster will claim what they are offering is low-risk, and will provide you with quick and high returns, or encourage you to invest in overseas companies. The offer may sound very legitimate, with resources to back up their claims. They may say you need to act quickly and invest, or you will miss out.

Before transferring any money to an investment company, check the Australian Securities and Investments Commission’s (ASIC) list of companies that you should not deal with. You can learn more about investment scams here on the ACCC’s Scamwatch website.

If you believe that you have paid money to an investment scam, please contact NAB immediately on 13 22 65.

NAB is aware of current SMS phishing campaigns targeting customers. Please see examples below.

The messages claim to be from NAB stating that your account has been locked or suspended, and direct you to click on a link to restore your account. This leads to fake NAB websites asking for personal information and banking credentials.

Do not click on the link.

NAB will never ask you to confirm, update or disclose personal or banking information via a link in an email or text message.

When sending phishing text messages, criminals sometimes set the sender name as “NAB”, meaning that fraudulent text messages can appear in the same conversation as legitimate messages from NAB. This is not a sign that NAB systems have been breached in any way– it simply means a criminal is impersonating our brand.

If you have received this type of text message, please forward it to 0476 220 003 (047 NAB 0003) or take a screenshot, email it to phish@nab.com.au and then delete it.

If you have received this type of email or text message, and have clicked on the link or entered your details please contact your local branch or call 13 22 65 immediately.

NAB is aware of emails circulating which contain malicious software. The emails may purport to be from legitimate businesses, requesting you to open attachments such as .zip files. Please see two examples below.

If you receive an email of this kind and click on the links or attachments, the malicious software may infect your computer and allow unauthorised access to your accounts. When making a funds transfer, the malicious software may manipulate the recipient bank account details.

Before authorising any payments, carefully check the account details listed match the account you intended to pay. If the bank account details listed are different, do not proceed.

If you have clicked on links or attachments in a suspicious email or SMS, or notice anything unusual on your Internet Banking or NAB Connect account:

· Do not proceed with any transactions

· Call NAB on 13 22 65 (Internet Banking) or 1300 888 413 (NAB Connect) and advise your computer may be infected with malicious software.

· NAB will assist you to remove the malicious software from your computer, and confirm your recent payments to ensure they are valid.

To help protect your computer against malicious software, keep software on your computer up to date, including the latest anti-virus and security updates. Take advantage of NAB’s anti-virus offers for customers: ‘Anti-virus offer for customers’.

Learn more about adding extra security to your account by using a security token, dual authorisation and segregation of duties: ‘Security for NAB Connect Customers’.

Please report suspicious messages to phish@nab.com.au.

Fraudulent emails that appear to be from us or other legitimate businesses may attempt to trick you into providing personal information such as your mobile phone number, NAB ID, Internet or Telephone Banking password, credit card details, etc. NAB will never send you an email asking for your password or send you a link to login to Internet Banking.

Don't respond to any email requests for this information and don’t click on any links within these emails, even if they appear to have come from us. We'll never ask you to disclose your details in this way.

For more information on phishing messages, read 'Spam and Phishing messages'.