Protect Yourself from Phishing Scams

As phishing scams become more sophisticated, it’s important to know how to protect yourself and your accounts.

Phishing is a type of scam where criminals impersonate trusted organisations to trick you into handing over personal and / or financial information.

Here's how to stay safe.

Spot the Signs of a Phishing Attempt

Phishing messages may:

• Claim there’s an urgent issue with your account
• Ask you to ‘verify’ yourself by logging in, providing card information, and / or PIN numbers and passwords
• Contain suspicious links or attachments
• Come from email addresses or phone numbers that look almost right
• Use vague greetings like “Dear customer”

Note: We will never ask you to click a link in an unsolicited email or SMS to verify your details or reset your password.

Think Before You Click

If you receive a message claiming to be from IMB:

• Do not click links or download attachments
• Never share your banking password, one-time codes, or card PIN
• Go directly to our website by typing the URL into your browser
• If unsure, call us on the number listed on our website or on the back  of your debit card. Do not call the number in the message

Use Strong Security

To protect your banking information:

• Use  a strong, unique password for online banking
• Register your mobile number for Internet Banking to allow you access to One Time Passcodes for added security when transacting
• Regularly review your account activity through the mobile app or internet banking

Keep Your Devices Secure

• Keep your phone, tablet and computer software up to date
• Install reputable antivirus and anti-malware tools
• Don’t use public Wi-Fi to access your bank accounts

If You Think You’ve Been Phished

If you believe you’ve responded to a phishing scam:

1. Call us immediately
2. Change your online banking password
3. Check your recent account transactions
4. Report the scam to Scamwatch at scamwatch.gov.au

If you receive any notifications from us about digital cards being added to your account, contact us immediately. This could indicate that you have unknowingly been phished. Acting quickly can prevent further damage.

Remember

• IMB will never email, text or call you asking for your PIN, password, or one-time codes
• We will never send you a link asking you to log in or confirm your account details
• When in doubt, stop and contact us directly

Stop. Think. Protect
For more tips, check out the content on the scams and security section of our website.