Security Advice

Attention: open in a new window. | Print |

For safer banking

Hume is commited to the security of its customers in all aspects of its services. We provide robust systems and policies to ensure a maximum level of security to protect your details, privacy and finances. Your understanding and assistance can help us make your protection even more complete.

Please periodically review this page to ensure you are up to date with advice to mitigate potential threats.

Always report any unauthorised or suspicious transactions to us on 1300 004 863.

Alerts

Latest security threats

January 2013 -  Visa Email Scam


Border residents are reporting receiving an email from a body posing as VISA support.  The email refers to their account being restricted due to fraudulent use and encourages the customer to enter detailed information about their card and account in order to lift the restriction.  This is a scam and is not from Visa.  

As a reminder, people will never be contacted by a financial institution or a third party seeking such privileged information via phone or email, any such contact should be deemed as illegitimate. 

More information on this scam can be found here 

July 2012 - Fraud Warning and Steps to Protect Superannuation Savings

Law enforcement bodies are calling on the banking, finance and superannuation industries to help raise awareness about the growing threat of serious and organised investment fraud targeting Australia’s $1.3 trillion pool of superannuation savings.

Banks, credit unions and super funds are being asked to pass on warnings to help protect their customers from a serious threat to their retirement savings.


March 2012 – Paypal Email Scam


Another email scam is in circulation. People are sent an email notifying them that a transaction will be made from their Paypal account.  The email states that if they would like to decline the payment from Paypal, to follow the link provided and enter their bank card information.
 
Customers who are suspicious of any emails requesting their banking or card details to contact Hume on 02 6051 3211.


 
October 2011 – Corrupted iBank screen


Hume customers have recently been targeted with an unofficially altered iBank login page which requests a repeat login. Hume will never request you to enter your password or date of birth twice. When accessing iBank, customers should always go via Hume’s main website www.humebuild.com.au, never store your internet banking login page in your favourites.


Customers who are suspicious of any variation to their internet banking login page can call  Hume’s Internet Banking Help Desk on 1300 004 863

General Security

General Account Security

The security of our customer's finances and information are of paramount importance to Hume. To better ensure the resiliance of our security systems, you can follow these helpful tips to protect yourself against those attempting to defraud you.

  • Check your transaction history and statements to make sure there are no unathourised transactions on any of your accounts
  • Check your transaction history each time you update your passbook, or log on to iBank, mBank, or Hume Connect
  • Do not allow strangers to transact through your account
  • Set strong passwords and change them regularly
  • Create passwords with letters and numbers that cannot be easily attributable to you
  • Always memorise your password or pin and do not write it down or store it on your computer
  • Report any unauthorised use or suspected unathorised use
  • Keep your passbook and chequebook in a safe place under your control
  • Do not keep your chequebook with anything containing your signature (i.e. drivers licence or bank card)
  • Do not sign blank cheque forms - all details should be completed before you sign a cheque.

Online Security

Internet, mobile and phone banking security

While Hume provides state of the art technology to defend its online services, a proportion of our capacity to secure these services depends on you. Thankfully, protecting yourself online doesn't need to be difficult. This is why we have compiled this advice to better ensure your security.

  • When accessing iBank or mBank, always go via Hume's website (this website), and look for the blue "iBank Login" button. Never bookmark or store your online banking page in favourites
  • Always access Hume's website by typing in the address http://www.humebuild.com.au/ Never log in by clicking a link in an email
  • When internet banking, use a security token or mobile token which can be downloaded on your mobile (See security device tab for more information)
  • Keep your external transfer limit to the minimum required
  • Never send money to someone you don't know or trust
  • Check that your data is encrypted by looking for the verisign secured symbol in your address bar (often represented by a 'lock' depending on your browser)
  • Always log out from iBank or mBank and close your internet browser when you have finished
  • Never respond to an email or phone call asking for your pin, password or account details (Hume will never ask for these details)
  • Avoid any 'pop up' windows that direct you to another website and ask you for your customer identification or password
  • Avoid using publicly shared computers and WiFi networks (e.g. internet café's)
  • Utilise the password lock capability of your mobile when it is not in use.
  • Only use a trusted and secure computer to access your internet banking
  • Ensure you install security software and update it regularly
  • Keep your computer software up to date by turning on 'automatic updates'
  • Do not click on links or open email attachments from unknown sources
  • Scan your computer with anti-virus software at regular intervals
  • Delete spam and hoax emails, as they can carry viruses and other malicious software
  • Clear cookies and old files on a regular basis.


Card Security

Cashcard and credit card security

The convinence of cards and eftpos offer a fantastic way to pay for and manage your money, however, like your cash, it is important that you ensure the security of your cards. The following advice can help you further your protection.

  • Sign your Cashcard or Visa card immediately when you receive it
  • Always check any ATM or Eftpos machine you use for evidence of tampering, or discreet skimming devices
  • Always cover your PIN when at an ATM or EFTPOS machine
  • Keep your card and PIN separate at all times
  • Do not record your PIN on, or with your card
  • Do not disclose your PIN to anyone
  • Do not allow anyone else to use your PIN or card
  • Do not let anyone else see your Pin
  • Register your Hume Visa card for Verified by Visa

Emergency after hours contact:


To report lost or stolen Cashcards, Visa Cards, or PINs phone: 1800 252 730

Security Devices

How secure is iBank?

The security of customers' transactions, records and details is of paramount importance to Hume. This is why iBank uses 128-bit encryption to provide a high level of security for customers' details and transactions. 

To take security one step further, Hume offers security devices to verify the identity of the customer before they log on.

A security device is either a small, physical electronic token (security token) or a password generator application (mobile token) that generates a unique six digit code. The correct pin, as generated from the security device, needs to be entered to access your internet banking account and can be used anywhere in the world. For more information please read the security token FAQ below.

How do I download a mobile token?

Mobile tokens may be used on a variety of modern phones as an alternative to security devices, saving you from having to carry an additional device with you when you access iBank or mBank.  To check if your mobile phone is supported go to http://vipmobile.verisign.com/supportedphones.v


If you already have a security token:

You will need to firstly contact Hume to deactivate your current security token and notify Hume that you would like to use a mobile token. 

If you do not have a security token

You will need to notify Hume via iBank or at a branch that you would like to use a mobile token. To notify via iBank go to  ‘Other’, ‘Security Options' and follow the instructions on the page. Once you have done this, you can download a mobile token.

On your mobile phone, open your web browser and go to http://m.verisign.com

Select the appropriate make and model of your phone and follow the directions provided on the Verisign website

Depending on the type of mobile you have and the web browser  you are using, you will be directed to an appropriate link to download the one time password generator application to your mobile phone.*

* Carrier charges may apply for downloading data and applications to your mobile phone.

Your mobile token will be issued within one business day and you will be prompted to complete the activation at this time.

Security device FAQ

A security token is a small, physical electronic device (see picture below). The token generates a unique password (one time password) each time the button is pressed. You use this one time password in conjunction with your member number and own password to log on to iBank or mBank and also for select transactions within iBank or mBank.

token-learnmore 

You can obtain a token from any Hume Branch.

Activating your security device is easy. Just logon to iBank like you normally do.

This is the screen you will see the first time you logon after your security device is issued to you. Choose ‘activate’ if you have your token. If you don’t have your token yet, you can defer activation for 30 days.

Activating-Security-Device-Intro-Page

On the next screen follow the prompts and and click 'activate'

Activating-Security-Device

From now on you will be required to use your security device when you logon to iBank

Replacement tokens can be ordered over the counter at Hume branches

Approximately 3 years. Your token will display the word ‘disabled’ when the battery is low.

A mobile token is an application that is downloaded to your mobile phone (see picture below). The application generates a unique password (one time password) every 30 seconds. You use this one time password in conjunction with your member number and own password to log on to iBank or mBank and also for select transactions within iBank or mBank. You can use a mobile token as an alternative to a security token; you cannot use both.

First, notify Hume via iBank that you would like to use a mobile token (go to ‘Other’, ‘Security Options’ and follow the instructions on the page). Once you have done this, you can download a mobile token from http://m.verisign.com. Carrier charges may be incurred depending on your mobile phone plan.

Mobile tokens are available for Windows Mobile, Windows Phone 7, Android, Iphone, Ipad, Ipod Touch, Blackberry, and various other (non-smart) phones.

Your security device can be used wherever you can log into iBank or mBank. This includes overseas and remote areas. If you are using a mobile token but don’t have mobile phone coverage, the token on your mobile will still work.

If sufficient ID is provided over the phone we may disable your security device temporarily until a replacement can be arranged.

If you lose your security token you must report it to Hume Building Society immediately by phoning 1300 004 863.

If you lose your mobile phone and you have a mobile token downloaded to it, you must report
it to Hume Building Society immediately by phoning 1300 004 863.

Please visit any Hume branch to obtain a replacement security token or download a mobile token directly to your phone by typing http://m.verisign.com into your mobile browser. In either case, you must contact Hume to deactivate your current security device before a replacement security token can be issued or a mobile token can be downloaded. Security tokens are generally issued within 24 hours of the request or posted within 48 hours.

Mobile tokens can be downloaded to your mobile for free. Carrier charges may be incurred depending on your mobile phone plan.

If you require a physical token, your first token is free for all individual customers. Business customers may have 4 free security tokens per membership with additional tokens available at $20 each. Please note that if an individual customer who has a token for personal use is also a signatory on a business account, that customer does not need an additional token and their token does not count towards the four free tokens the business is allowed.

Wait 30 seconds until a new code is generated on your mobile. On the electronic device press the grey button again to generate a new one time password. If the code is entered 3 times incorrectly, you will become locked out. If you are locked out contact Hume Building Society by phoning 1300 004 863.

For more information on VeriSign’s security products go to https://vipmobile.verisign.com.

Hume does not set any limits on BPay transactions. Some Billers set minimum and/or maximum limits for payments. Please contact your Biller if you require further information.

Liability for unauthorised transactions will be determined under the EFT Code of Conduct and not under these guidelines. However, failure by you to keep your card and code/PIN secure may increase your liability for unauthorised use. Hume’s Electronic Transaction Terms and Conditions that apply to the use of your card and PIN, internet banking and information on Hume’s products are available in the Product Disclosure Statement (PDS) at any Hume branch or at www.humebuild.com.au