March scam alert:  Beware of text messages asking you to click a link to redeem CommBank Awards points that are about to expire. See more.

Security features to help you detect scams    

Help protect yourself with our range of security features and tools designed to help you detect and prevent scams.

Tips to help prevent scams    

Stay up to date with the latest on scams, new trends and tips from our experts to help protect yourself.

Report a scam    

If you think you have been scammed, message us in the CommBank app or call us on 13 2221, or CommBiz 13 2339

Our virtual assistant Ceba can also help or connect you to a specialist.

Six security features to help you prevent and detect a scam

Learn about scam types and how to protect yourself.

Extra checks for first-time payments

Get alerts if a first-time payment looks unusual, thanks to NameCheck and Confirmation of Payee.

Verify CommBank calls instantly

Received a call from us? CallerCheck pops up as a security notification in your CommBank app so you know it's us.

Confirm your identity using CustomerCheck

CustomerCheck helps us securely confirm your identity through a notification in your CommBank app.

Stay protected with CommBank notifications

Turn on CommBank app notifications for alerts so you can act fast if something doesn't look right.

Extra security when you log onto NetBank

Multi-factor authentication adds an additional layer of protection to help keep your banking secure.

ConnectID - simple, secure identity verification

With your consent, ConnectID® 1 lets you securely prove your identity with approved businesses using the CommBank app.

Tips from our safety obsessed experts 

Keep up to date on how to better spot and prevent scams before they happen including tips from CommBank scams and fraud experts.

Deepfakes are realistic AI-enhanced scams that you need to watch out for.

Learn more about Investment scams

Learn how urgent payment requests can impact your business.

Learn more about business email compromise

Watch how one wrong click may be all it takes for a fake text to succeed.

Learn about fake text messages (phishing)

Received an unexpected call or message from us?

We'll never ask you to

✘ Share your NetBank Client ID, NetCode or passwords

✘ Share your card details including your PIN, expiry date or CVC

✘ Withdraw cash, transfer money or buy gift cards

✘ Login directly to your account via a link from an email or SMS

✘ Move money to a “safe” account

✘ Help us catch cyber criminals

✘ Share your screen or download remote access software

 

What to do:

  • Ask the caller to verify it's us by sending a CallerCheck security code to your CommBank app. 
  • Hang up and then contact us directly. Message us in the CommBank app or by calling 13 2221 or CommBiz 13 2339.

Stop. Check. Reject.   Three simple steps to help protect yourself from scams.

    1. Stop
      Could this be a scam?

      If a call, email, text or social media post seem off, stop and take a breath so you can think clearly. Scammers often pressure you to act immediately.

    2. Check
      Verify before you act.

      Contact the organisation via their official website or app.

    3. Reject
      Take action to protect yourself.

      If you’re unsure, hang up on the caller and block the number, or delete the email or message.

      If you’ve shared any personal or banking details, change your passwords immediately and message us in the CommBank app or call 13 2221 or CommBiz 13 2339.

Better Protect Your Business from Scams and Cyber Threats

Scam tips in your language

Here are some ways our technology and security experts are working to help you stay safe.

    • We’ll contact you if we detect unusual activity
    • First-time or unusual payments may be held for up to 48 hours
    • You may need to confirm some transactions in the CommBank app or with a NetCode
    • When you report a scam, our cyber experts act fast to shut it down

How we use behavioural information to help better protect you

Behavioural information helps us understand patterns in how you interact with your device such as how you hold your phone, tap on the screen, or type. CommBank uses this information to help detect suspicious cyber activity and financial crime, helping protect you from fraud, scams, and identity theft.

Behavioural information refers to data that measures patterns in how an individual moves, behaves, or interacts with their device. It can include factors such as how a device is held or moved, how a person types or taps on the screen, and other routine interaction patterns. This information reflects behaviour rather than personal content, and is often used to help verify identity or detect unusual activity. 

CommBank is collecting behavioural information about the way you interact with your devices while using the CommBank app, NetBank and CommBiz. This includes information about how you interact with your devices such as typing speed, keystroke patterns and mouse movement to help identify potential fraud. 

CommBank collects behavioural information to help detect suspicious cyber activity and financial crime to combat fraud and scams, such as identity theft. 

Behavioural information allows CommBank to understand how a customer typically uses their device. When activity falls outside these patterns, it may signal a customer’s account has been compromised or unauthorised device use. 

The way that you interact with our digital platforms is used to help identify if a third party is in control of your banking. All behavioural information we collect is held by our trusted third party in a de-identified form to help maintain your privacy. 

Your behavioural information will only be collected when you are using the CommBank app, NetBank and CommBiz. 

If you don’t consent to this information being collected, you won’t be able to use these platforms. We can support you to remove your NetBank ID if required.  

If you don’t want CommBank to collect this information for you or your child (who is under 14 years old), you will need to go to a CommBank branch and request the removal of their Netbank ID or de-register devices that have the CommBank App.   

Sometimes we may reach out to confirm your details

  • There may be a time when we will reach out to you to confirm information on your account or your identity.

    Having accurate and up-to-date details is part of our ‘Know Your Customer (KYC) requirements. It also helps us protect you from fraud, as we can contact you immediately if we detect any suspicious activity.

    If you’re ever concerned whether the person you’re speaking to is legitimately from CommBank, you can use the CallerCheck feature in the CommBank app to verify your caller’s identity.

    Regardless of whether the caller has been identified, we will never ask you to transfer funds, share your screen or reveal your passwords.

Things you should know

1 ConnectID is a registered trade mark of ConnectID Pty Ltd ABN 80 648 970 101.