Is it really IMB Bank?

Phishing is a fraudulent tactic where scammers impersonate trusted entities, like your bank, to trick you into revealing personal information such as passwords, account details, or security codes, enabling them to gain access to your funds. At IMB Bank, your security is our priority, and we want to empower you to identify and avoid these deceptive scams.

How Fraudsters May Try to Deceive You (Phishing)

Scammers use various methods to mimic IMB Bank and trick you:

• Email: Fraudsters may send authentic-looking emails requesting your personal details. These emails often contain malicious links or attachments.
• Over the Phone: Scammers might call you, pretending to be from IMB,     claiming there's an issue with your account security that requires you to     provide account details or passwords.
• SMS(Text Messages): You might receive SMS messages, seemingly from IMB,     asking for your account or password details. We've also seen "lost phone" scams where someone pretends to be a relative and asks for urgent money transfers.

What IMB Bank Will NEVER Do

To help you identify legitimate communications, remember that IMB Bank will NEVER:

• Send Emails with Direct Login Links: We will not issue emails that provide     links taking you directly to IMB's Internet Banking system or directly to a web form for completion where you are asked to input sensitive information immediately. Unless specifically for an approved IMB-sponsored community event, we will always direct you to our Home Page or a landing page within the imb.com.au domain (this may include links starting with     www.click.coms.imb.com.au).
• Request Sensitive Information via Unsecured Channels: We will never request,     nor will we provide, Account or Member numbers in unsecured emails. We     will not publish private information in unsecured emails.
• Ask for Passwords, PINs, or Security Answers via Email/Return Email: IMB     will never request passwords, PINs, or answers to security questions from     members in an email or a return email. All secured communications with     members will be completed inside Internet Banking using the Secure Email     facility.
• Unsolicited Calls Asking for Downloads: We will not call you unsolicited and tell you to download software or open a link.
• Ask for Remote Access: We will not seek to remotely access your device/computer without your explicit and verified consent, or put you under pressure to act instantly.
• Send SMS Requesting Account/Password Details: IMB will never send an SMS requesting account or password information.

How to Identify Genuine Emails and Messages from IMB Bank

• Check the Sender's Email Address: While scammers can spoof sender names, carefully inspect the full email address. It should always come from an official IMB domain.

• Verify Links (Hover, Don't Click): Before clicking any link in an email, hover your mouse cursor over it to see the actual URL. Ensure it points to imb.com.au or a clearly related IMB domain (e.g., www.click.coms.imb.com.au).

• Look for Personalisation (Beyond Generic Greetings): Genuine IMB     communications will often address you by your name, rather than generic     greetings like "Dear Customer."
• Be Wary of Urgency or Threats: Scammers often use urgent language or     threats ("Your account is locked!", "Payment overdue," "Immediate action required!") to pressure you into acting quickly without thinking.
• Check for Poor Grammar or Spelling: While not always present, errors can be     a red flag.
• Review IMB's Official Communication Practices: Familiarise yourself with how     IMB typically communicates. For example, all secured personal communications will be via our Secure Email facility within Internet Banking.

What to Do If You Suspect a Phishing Attempt

If you suspect you have received an email, phone call, orSMS purporting to be from IMB that you are suspicious about:

1. Do NOT click on any links, open attachments, or provide any information.
2. Contact IMB Bank immediately on 133 462 (8 am – 8 pm Monday to Friday, 9 am – 4 pm on Saturdays). If outside these hours, refer to our official website for contact details.
3. Validate the Contact: If you receive a suspicious phone call, hang up and     independently verify the caller's identity by looking up IMB's official website and calling the advertised number. Never call back on a number provided by the suspicious caller.

Your vigilance is the strongest defence against phishing and impersonation scams. Stay informed, stay sceptical, and always verify directly with IMB Bank using trusted contact methods.