Protect Yourself

Be scam aware

• Never provide your PIN or internet banking details to anyone - not even your bank. The bank will never ask you for this information.
• Never disclose personal information over the telephone unless it can be verified that you are speaking to a trusted individual or service.

Never provide personal information to anyone who calls or emails you.

• Avoid phishing scams that ask for your personal information, like your address, bank account number, or tax file number.
• Be wary of anyone asking for personal information via text, on the phone or by mail. Identity thieves may be pretending to be government agencies, banks or stores so they can get your information.

Shred personal documents.

• Never throw personal documents in the trash or recycling bin without shredding them first. These include:
• Bank statements, Receipts, Medical statements, 401(k) or savings account statements,
• Credit card offers, Expired plastic such as debit cards and credit cards, Personal records

Create Complex Passwords.

Weak passwords can be guessed, and even strong passwords can be figured out through methods such as brute force attacks.

How to create a strong password

• Make your passwords very long
• It should consist of letters with a different casing, special symbols, and numbers
• Don’t use a common phrase
• Don’t use passwords containing your name of Date of Birth
• Don’t reuse your password
• Use a password manager
• Don’t store passwords in your browser.

Monitor your mail.

• Check your physical mail often. If you can, opt for paperless statements from institutions that may use your personal information when contacting you.
• If you're going out of town, place a hold on your mail, ask for someone to pick up your mail for you, or put a lock on your mailbox.
• If you expect certain documents to arrive in the mail, such as credit card statements, but they don't, alert your financial institution.

App privacy settings.

Even though application security can apply to desktop devices, the term is used mostly in reference to mobile apps. We recommend you have your settings fixed to private on all social media platforms.

Protect biometrics.

Protect your biometric information by being cautious about where you share images of photo ID, and avoiding sending images or selfies to unexpected or unverified requests.

Be scam aware:

• Be wary of web links sent via text or email prompting you to sign in to your internet banking or provide personal information.
• Always access internet banking via www.virginmoney.com.au or via our Virgin Money app.

Be aware of computer security scams

• Scammers may contact you posing as antivirus or software providers, or even Virgin Money, to try and gain access to your device.
• It’s safest to install security software through a trusted IT professional or in‑person service provider.
• Be wary of unsolicited calls offering technical support or asking for personal information.

Keep your software up to date.

One of the most important cyber security tips to mitigate ransomware is updating outdated software, both operating system and applications.

This helps to remove critical vulnerabilities that hackers use to access your devices.

Use firewalls and antivirus.

A firewall is a software or firmware that prevents unauthorized access to a network.

Install Anti-theft.

Anti-theft refers to data protection and theft prevention when data is in transit or at rest.

Do not charge your electronic devices by connecting them to other people's chargers or computers.

Besides increasing the risk of malware infection, in some situations connecting devices to other people's computer equipment causes data to be transferred between them.

Consider using a security token.

Using a security token for online transactions can make it even harder for a scammer to access your account. Virgin Money offers physical and soft security tokens to assist customers in strengthening their online security.

Check the website's authenticity.

If you are shopping on an unfamiliar website, conduct your own research about the website to validate it is a reputable retailer.

Make sure the site is secure.

Typically, in the address bar of your internet browser, you should see a little padlock to the left side of the website address.

Know what you're purchasing.

Whenever you enter card details online, be sure you know what you are purchasing and that the company you are purchasing from is reputable and legitimate.

Be cautious when clicking links from unknown contacts.

• If you have received a hyperlink in an email or text, avoid clicking it and do not provide any personal information.
• You can check the link's legitimacy by hovering over it before clicking. If it looks unusual, discard the message.
• As a general rule, do not provide your personal details to anyone you do not know or trust, especially if it includes a proposition that involves payment.

Beware of requests to share one-time passcodes.

• This can be over the phone, or via a web page that you have been invited to visit through an unsolicited call, SMS or email.
• Never share verification codes including to someone you believe might be us.

Be scam aware.

If it sounds too good to be true, it most likely is.

Never provide remote access to your electronic devices

No matter how legitimate the caller may seem.

Independent financial advice.

Always seek independent financial advice prior to investing from a registered financial advisor.

Visit moneysmart.gov.au for more information.

Be careful of who you interact with online.

Look out for rapid declarations of affection and discussion of matters that involve financial hardship.

Always validate who you are speaking with.

If you receive an unexpected call from someone claiming to be from a company, (for example telecommunications, law enforcement or your bank), always pause and verify this through a trusted and legitimate source before you provide any personal information, access to devices or money.

Confirm bank details.

Always confirm bank details or a change of bank details over the phone prior to making payment. Never confirm by email.

Don't pay upfront.

Refrain from sending funds upfront to a private seller and use secure payment methods. Conduct your due diligence before making a purchase.

Never disclose bank details.

Never provide your PIN or Internet Banking details to anyone – not even to Virgin Money. We will never ask you for this information.

Don't click third party links.

Always access Internet Banking via www.virginmoney.com.au or the Virgin Money mobile app.

IDCARE

IDCARE is a not-for-profit national identity and cyber support service. IDCARE can help BOQ customers reduce the harm they experience from the compromise and misuse of their identity information.

Visit https://www.idcare.org/ for more information.