Your bank protects your money with its own systems, but your login is still your responsibility. This guide is part of our guide to securing your key accounts.
Set up your login
- Use a unique password. Generate it in your password manager. Never reuse a bank password.
- Use the strongest login option on offer. This may be the bank's app, a card reader, a passkey or a code. Avoid SMS if there is an alternative, because of SIM swap attacks.
- Protect your banking email and phone. Your bank's alerts and resets depend on them. See why email is the master key.
Turn on alerts
Set up text or app notifications for:
- Every payment or anything above a small amount.
- New payees.
- Changes to your contact details.
- Logins from new devices.
An alert within seconds gives you the best chance to stop fraud.
Log in safely
- Use the official app, or a bookmark that you have saved.
- Never follow a link from an email, text or search ad.
- Avoid shared computers and public Wi-Fi for banking.
- Log out when you finish.
- Keep your phone locked with a strong PIN. See securing your phone.
Scams aimed at bank customers
| Scam | What happens | What to do |
|---|---|---|
| Fake bank text | A link to a fake login page | Do not click. Open the app |
| "Safe account" call | A caller says that your money is at risk, and tells you to move it | Hang up. Call the number on your card |
| Code-stealing call | A caller asks you to read out a code | Never share codes |
| Remote access scam | "Support" asks you to install software | Hang up. Do not install it |
| Invoice fraud | A hacked email changes the payment details | Confirm by phone, using a known number |
Banks will never ask you to move money to a "safe account", or to share your one-time codes.
If something goes wrong
- Call the number on the back of your card, or use your banking app, right away.
- Change your banking password from a device that you trust.
- Check your email for hidden access, using our email checklist.
- Report it to the police or your national fraud center.