If you ever suspect any unusual activity when using Heritage internet banking or the Heritage website, we would encourage you to call our Contact Centre on 131422 (8:30 am - 7 pm Mon-Sat), or via e-mail to
fraudalert@heritage.com.au.
Security Alert: April 2012
Hoax Email
Recently there have been hoax emails, purporting to come from Heritage asking the recipient to go to a website designed to capture personal information. Those who unsuspectingly obey any instructions given in the email or on the linked website may later discover that their details have been used to access their Heritage Online accounts.
The email in question is NOT from Heritage, do not click on the link or reply to the email. If you have actually followed the instructions in the bogus email, it is possible that your details may have been compromised – you should immediately change ALL your Heritage Online passwords, and also telephone Heritage immediately on 13 14 22 (8:30 am - 7 pm Mon-Sat).
Two samples of the hoax email are shown below.
Security Alert: February 2012
Mobile Phone Porting
Fraudsters who have compromised your credentials may port or transfer you mobile phone number to another provider, allowing them to receive security codes and alerts sent to that phone via SMS.
- Be wary of unsolicited calls and emails asking for contact and identity details.
- If your phone service suddenly stops working, contact your provider immediately as this may be an indicator that the number has been ported to another provider.
- Ask your mobile phone service provider to add extra security questions to your account if available, especially for actions such as porting of the number.
If your phone has been ported without your permission and you are registered for SMS security, please contact Heritage immediately on 13 14 22.
Security Alert: June 2010
A new telephone scam targeting Heritage members has reinforced the need for extreme caution in protecting details about your accounts.
The latest scam involves people purporting to be from “Heritage head office” ringing members and asking for their card or account numbers.
On at least one occasion, a member gave out their details. That member subsequently visited a branch to confirm the transaction, and was able to close the old account and open a new one to prevent any problems.
Heritage Senior Fraud Officer Shane Kamler said technological advances have changed the way that we carry out financial transactions, but have also created a wave of new scams involving bank accounts and credit cards.
“Technology has made it possible for us to buy items and carry out banking transactions on-line or through phone banking,” Mr Kamler said
“Scammers often take advantage of people’s unfamiliarity with these new technologies in an attempt to coerce account information from them and ultimately steal their money.
“This latest scam again demonstrates the need to be suspicious about any request to provide your account details to anyone over the phone.”
Mr Kamler said banks and other financial institutions often contact their customers/members to alert them to suspicious activity on their account, but would never ask them to provide details over the phone.
At Heritage the staff from our Contact Centre will always:
• identify themselves
• convey Heritage Privacy provisions and
• proceed to identify the member using previously supplied information.
If you have any doubts regarding the identity of a caller simply hang up and ring Heritage back yourself.
Your account information and personal details are valuable assets. Protect them and never give account or credit card details to anyone that you do not know or trust.
To make sure that as many people as possible are aware of this please pass this information on to your friends and neighbours.
Security Alert: January 2010
Recently there have been further instances of bogus emails, purporting to come from Heritage, and asking the recipient to go to a website designed to capture personal security details or compromise their computer. The emails appear very similar to those shown in the October 2009 and November 2009 alerts shown below.
Security Alert: November 2009
Recently there have been instances of bogus emails, purporting to come from Heritage, and asking the recipient to go to a website designed to capture personal security details or compromise their computer (a link to which is provided in the email).
Those who unsuspectingly obey any instructions given in the email or on the linked website may later discover that their details have been used to access their Heritage Online accounts.
The email in question is NOT from Heritage. If you have received a copy, could you please forward it to us at fraudalert@heritage.com.au. If you have actually followed the instructions in the bogus email, it is possible that your internet banking details and any other details may have been compromised – you should immediately change ALL your Heritage Online passwords, and also telephone Heritage immediately on 13 14 22 (8:30 am - 7 pm Mon-Sat).
A sample of the bogus email is shown below.
REMEMBER: While Heritage may send informational or confirmatory receipt emails, Heritage will NEVER send an email that would request the disclosure of any personal security details such as your PIN, Internet Banking Passwords, Credit Card details or require you to click on links or attachments within the email to update or verify details.
Security Alert: October 2009
Recently there have been instances of bogus emails, purporting to come from Heritage, and asking the recipient to go to a website (a link to which is provided in the e-mail) and key in his/her Internet Banking id and passwords. The website address in question is very similar to the legitimate Heritage website.
Members who click on the link are taken to the bogus (“ghost”) website and prompted for login details and passwords, Pay anyone Passwords, Email address and Email access password. Those who unsuspectingly obey these instructions may later discover that these details have been used to access their Heritage Online accounts. Sometimes this particular site also goes on to ask for credit card details to supposedly ‘unlock’ your account. This is also bogus and designed to capture these details.
The emails in question is NOT from Heritage. If you have received a copy, could you please forward it to us at fraudalert@heritage.com.au. If you have actually followed the instructions in the bogus email, it is possible that your internet banking details and Credit Card details may have been compromised – you should immediately change ALL your Heritage Online passwords, and also telephone Heritage immediately on 13 14 22 (8:30 am - 7 pm Mon-Sat).
A sample of two of the bogus emails are shown below.
REMEMBER: While Heritage may send informational or confirmatory receipt emails, Heritage will NEVER send an email that would request the disclosure of any personal security details such as your PIN, Internet Banking Passwords, Credit Card details or require you to click on links or attachments within the email to update or verify details.
Vishing Security Warning: July 2009
Recently, there has been an increase in fraudulent activity targeting financial institutions in the form of "Vishing".
Recent examples of such activity include unsolicited telephone calls, requesting people to enter their credit card and PIN number to reactivate their card or update their account details. Heritage does not use this sort of call to members to update information. Should you receive such a call you should just hang up without providing any information and contact Heritage on 13 14 22 or via email to fraudalert@heritage.com.au .
REMEMBER: While Heritage may send informational or confirmatory receipt emails, Heritage will NEVER send an email or make a phone call that would request the disclosure of any personal security details such as your PIN, Internet Banking Passwords, Credit Card details or require you to click on links or attachments within the email to update or verify details.
Security Alert: October 2008
Recently there have been instances of bogus emails, purporting to come from Heritage, and asking the recipient to go to a website (a link to which is provided in the e-mail) and key in his/her Internet Banking id and passwords. The website address in question is very similar to the legitimate Heritage Online website.
Members who click on the link are taken to the bogus (“ghost”) website and prompted for login details and passwords. Those who unsuspectingly obey these instructions may later discover that these details have been used to access their Heritage Online accounts.
The email in question is NOT from Heritage. If you have received a copy, could you please forward it to us at fraudalert@heritage.com.au. If you have actually followed the instructions in the bogus email, it is possible that your internet banking details may have been compromised – you should immediately change ALL your Heritage Online passwords, and also telephone Heritage immediately on 13 14 22 (8:30 am - 7 pm Mon-Sat).
Samples of the bogus emails are shown below.
REMEMBER: While Heritage may send informational or confirmatory receipt emails, Heritage will NEVER send an email that would request the disclosure of any personal security details such as your PIN, Internet Banking Passwords, Credit Card details or require you to click on links or attachments within the email to update or verify details.
Security Alert: September 2008
There has lately been an increase in virus-type activity targeting financial institutions. Heritage is therefore advising members to take extra precautions when conducting Internet Banking activities.
Recent examples of such fraudulent activity include prompting for "Pay Anyone" passwords at unexpected points where not usually requested - for example, at login.
As an extra level of security, members are encouraged to ensure they have a valid email address loaded on their internet banking records. (You can use the "Change Email Address" option in the "Member" menu to do this.) An up-to-date email address greatly assists with the early detection of any invalid transactions. Heritage Online will send you an email to verify that certain significant actions have occurred on your account. This includes things such as BPAY, funds transfers, addition of a new scheduled transfer, change of email address etc. If you ever receive one of these confirmation emails without having personally done the transaction it is referring to, please change your passwords and call our Contact Centre on 13 14 22 (8:30 am - 7 pm Mon-Sat).
View our online security tips