Everyday money
.png)
Australians have seen an increase in fraud and scams recently, we encourage everyone to remain alert. If you receive a message or call that seems strange, then you’re probably right! Reminder, if you receive a weird call, hang up and call us on our official phone number. Don’t click on any strange links, forward any weird SMSes to +61 476 220 003 or emails to phish@NAB.com.au, then delete.
We’re here to help and should the worst occur, you’re still protected
The ubank defence is our promise to you that we’ll reimburse 100% of your money should it be fraudulently taken from your account, provided:
Our fraud team may send you an SMS from time to time to confirm any high-risk payments. This is to protect you and make sure the payments aren’t fraudulent.
For anything deemed high risk you’ll receive an SMS from the following numbers (this is our fraud team contacting you).
+61 489 954 380
+61 437 126 492
These SMSes will only ask for a Yes, No or Cancel response or instruct you to call our fraud team directly on 1300 705 750.
Types of fraud, phishing and scams to look out for
What is identity theft or takeover?
This is when a criminal has enough information about an individual to impersonate them for financial gain or other benefits. Criminals can gather your details by stealing from your letterbox or through phishing scams, data breaches, social engineering, malware or hacking systems.
How does it occur?
When these criminals have enough information, they can attempt to apply for finance, open bank accounts, phone accounts or set up other services in your name.
What to look for
Always look out for changes to your account that you didn’t request .
This might include:
What is mobile phone porting?
This is when your mobile phone number is “ported” or transferred to a new telecommunications provider without your permission. This may enable criminals to receive SMS authentication codes sent by your bank, in order to authorise transfers without your knowledge.
How does it occur?
In some cases, all that is required to port a phone number is an account or phone number and date of birth. These details are often included on phishing sites that appear to represent legitimate companies requesting personal and financial information. Another common way of accessing this information is by stealing mail out of letter boxes or rubbish bins.
What to look for
If your mobile phone service is suddenly disconnected, it may show ‘SOS only’ where the carrier name usually appears on the screen. This could be a warning sign that your mobile phone has been transferred to another provider without your authorisation.
If your service does not return in a short period, contact your mobile provider immediately.
What is card fraud?
Any unauthorised transactions made on your Visa Debit card. This may be due to a card or device being lost or stolen.
How does it occur?
Card fraud can occur when the your card details are used to process an unauthorised transaction. Your details may have been compromised through things such as online shopping or physically obtained (i.e. your card is used after being lost or stolen).
What to look for
Banks use historical spending patterns and trends prior and after the transaction(s) in questions to make a decision to process or stop the transaction(s).
It’s important that you also keep an eye on transactions and contact us if you see anything suspicious.
What are scams and phishing?
Spam refers to unsolicited junk emails that are sent to large numbers of people at once. Spam emails are typically advertising fake products or get-rich-quick schemes.
Phishing emails are more sinister than spam. They’re designed to trick you into providing personal information like a mobile phone number, usernames and passwords, or credit card details or bank details.
How does it occur?
These fraudulent emails or text messages usually appear to be from ubank, NAB or other legitimate businesses. Ubank and NAB will never contact you asking for personal information such as account details and/or passwords; and we will never send you a link to online banking asking you to log in.
What to look for
There are a few signs the email you received may not be legitimate, including:
Report suspicious messages to phish@ubank.com.au and then delete them, without clicking on the links or attachments.
What are scams?
There are many types of scams
1. Investment scams
Australians lose millions to investment scams every year.
How does it occur?
Individuals or businesses receive a cold call and are offered attractive investment returns or professional-sounding business opportunities. Once the investment is made, the victim usually receives no returns.
What to look for
These scammers are mainly based overseas and often tell victims they only need to invest $1,000 - $2,000 to start seeing returns. Often this escalates into requests for more money.
2. Romance and friendship scams
Today, it’s easier than ever to make friends and build relationships online. The downside is criminals have become clever at taking advantage of people looking for love. Scammers may be looking for financial gain, to gather information or to use their new ‘friends’ to help them launder money.
What to look for
A combination of these red flags could indicate a friend or relative is involved in a scam:
3. Remote access scams
Some phone scammers impersonate a bank, telco or computer company and tell you there’s an issue with your computer, banking or phone.
What to look for
They’ll ask you to download a program that gives them remote access to your computer, so they can ‘fix’ the issue. If you do this, they can access all the information on your computer. You should never give an unsolicited caller access to your computer.
4. Phishing scams
Impersonating ubank, NAB or another company to gain access to your accounts.
What to look for
Usually, in a phishing phone call:
Be on the look-out for suspicious messages
Ubank and NAB are aware of scam phone calls targeting Australians. You may receive a call where the caller pretends to be from organisations like your bank, Telstra, NBN, Microsoft, Amazon, ATO or the police, or receive a text message asking you to call your bank due to security concerns. Once on the call, the caller may request remote access to your computer and bank accounts, or ask you to provide personal or banking information.
Never give an unsolicited caller remote access to your computer or online bank accounts, or provide personal or banking information.
If you ever have concerns as to the legitimacy of a call, hang up and call the company back on a publicly available number.
If you have provided information on this type of call, please call ubank on 13 30 80.
You can learn more about scam calls here.
Ubank and NAB are aware of various phishing emails and text messages circulating which contain malicious software or lead to phishing sites. Fraudulent emails or texts that appear to be from us or other legitimate businesses may attempt to trick you into providing personal information such as your mobile phone number, ID, banking passwords, or credit card details. Ubank or NAB will never send you an email asking for your password or send you a link to login to Internet Banking.
Don't respond to any email requests for this information and don’t click on any links within these emails.
If you have clicked on links or attachments in a suspicious email or SMS, or sent funds based on a request received from a suspicious email please call ubank on 13 30 80.
If you receive a suspicious message, do not click on any links or attachments. Please forward it to phish@ubank.com.au and then delete it.
Visit the NAB Security Hub for more tips to help you stay safe online and the NAB Latest Security Alerts page to see more fraud and scams examples.
Ubank and NAB are aware that Australians are currently being targeted with investment scams promising lucrative returns.
The ACCC advises that these fake investment companies are proactively contacting Australians online or by phone, and claiming to be stock brokers offering investment advice, promotions, and hot tips or offering free investment seminars.
The fraudster will claim the investment is low-risk with quick and high returns, or encourage you to invest in overseas companies. The offer may sound very legitimate, with resources to back up their claims. They may say you need to act quickly and invest, or you will miss out.
Before transferring any money to an investment company, check the Australian Securities and Investments Commission’s (ASIC) list of companies that you should not deal with. You can learn more about investment scams on the ACCC’s Scamwatch website, and by reading this investment scams article.
If you believe that you have paid money to an investment scam, please contact ubank on 13 30 80.
Ransomware is a type of malicious software (malware) that encrypts (or locks) the files on a computer, making them inaccessible. Once the malware has been downloaded onto the victim’s computer, the victim receives a message on their computer screen from the criminal (the ransom note), advising them that their files have been locked, and demanding money in return for unlocking the files.
Cybercriminals usually demand victims pay the ransom in virtual currencies, such as Bitcoin, which is difficult for law enforcement to trace. Ransomware attacks are just like any other extortion attempt and police advise that businesses should not comply with the criminals’ request for money.
Businesses are advised to ensure they have active and effective cyber security controls in place. Our recommended steps are:
If you believe you may have fallen victim to ransomware, please call ubank on 13 30 80 immediately.
Ubank and NAB are aware of purchasing scams targeting Australian consumers, with scammers active on both the buying and selling sides of transactions. These scams take place on the common platforms used by people to buy and sell goods and services, such as eBay, Gumtree, Facebook Marketplace and Carsales.
If you’re selling an item, a scammer may send you a fake or altered receipt claiming they have transferred funds into your account. After you send or hand over the item, they will cease communication without having paid you.
If you’re purchasing an item, a scammer posing as a legitimate seller may post an item for sale which appears to be a good deal. They may put up an advertisement that is fake, or sell items that aren’t rightfully theirs. When you start communicating with them, they may send you pictures of the item which appear to be legitimate. However, these images are often stolen from the Internet or from other legitimate advertisements. Once you pay them, the seller will stop communicating and you won’t receive the item.
Tips to avoid a purchasing scam:
If you believe you may have fallen victim to a scam, please contact ubank on 13 30 80 immediately. You can learn more about purchasing scams here.
Ubank and NAB are aware of invoice scam attempts targeting Australian businesses. An invoice scam is when a business receives an emailed invoice from a supplier whose email account has been compromised by a criminal. The criminal will alter the payment details on the invoice to a fraudulent or mule account. As the invoice looks legitimate, the business doesn’t question the payment details, and sends the payment to the fraudulent account.
Another variation of an invoice scam is when a business receives a request advising a supplier’s or employee’s payment details have changed, and to make payments to a new account.
Before processing invoices, check the payment details against the last invoice. If they have changed, or you receive a request to update payment details:
If you have received an email of this type and actioned the request, please contact ubank on 13 30 80. Watch this video to learn more about invoice scams.
Be on the lookout
Passkeys
Passkeys are a simple and secure way to log into the ubank app that provides an additional layer of protection against phishing and scams. With a passkey, you can log into the ubank app by the same way you log into your personal device.
To be able to set up a passkey you must:
Passwords for Online Banking
Use a unique password for each of your online accounts and make your passwords hard to guess. Your password should:
Online browsing behaviour
If you have a ubank debit card
Security measures to keep your money safe
We’ll send you one-time passwords via SMS when you add a new payee via the app or Online banking, as an extra security measure
Card purchases and ATM cash withdrawals
Our team continuously monitor transactions for anything suspicious or unusual, 24/7
Card purchases and ATM cash withdrawals
Ubank’s website uses TLS (Transport Layer Security) encryption technology to protect your information. To ensure compatibility with our site, please keep your browser up to date
Card purchases and ATM cash withdrawals
We’ll automatically log you out if you’ve been inactive for a while
Card purchases and ATM cash withdrawals
We limit the maximum you can transfer via Online banking each business day. If you need to transfer more, call us on 13 30 80 for assistance
Card purchases and ATM cash withdrawals
After a number of failed logins, access to online banking is automatically blocked
Card purchases and ATM cash withdrawals
We'll send you a notification whenever a new device is added to your account
Card purchases and ATM cash withdrawals
Transactions to some crypto exchanges have been restricted to help protect you from fraud
Card purchases and ATM cash withdrawals
A passkey lets you use the security features on your device to sign in to the ubank app. They provide an additional layer of protection against phishing and scams.
You should contact us immediately on 13 30 80 when: