Stay alert: Fraudulent website impersonating Heritage Bank

6 August 2026

We are aware of a fraudulent website impersonating Heritage Bank attempting to steal customer information.

The fake website has been designed to look like an official Heritage Bank login page, using our branding and phrases such as "Heritage Bank Official" and " Heritage Bank Sign in." However, it is not hosted on an official Heritage Bank website.

Whilst we are working to remove this site and many sites like it regularly, it is important that our customers are aware of how to spot, protect and avoid these sites to help stay scam aware.

How to protect yourself & stay scam aware

To help keep your information secure:

• Always access Heritage Bank's online banking by typing our official website address directly into your browser. Check against the below URLs:
  - For internet banking: https://ib.heritage.com.au/IB/Login.aspx
  - For the Heritage Bank official site: https://www.heritage.com.au
• Carefully check the website address before entering your login details. If the URL looks unusual or is not an official Heritage Bank domain, do not continue.
• Pay specific attention to the URL. Are there any typos? Extra sections that aren’t normally there? Double check by re-typing the web address.
• Avoid clicking on links in unsolicited emails, text messages, or social media posts.
• Enable multi-factor authentication where available.
• Keep your devices and security software up to date.

What to do if you think you've been affected

If you believe you have entered your banking details on a fraudulent website:

• Contact us immediately on 13 14 22.
• Change your online banking password as soon as possible.
• Monitor your accounts for any unauthorised transactions.

How the scam works

Potential risks

Visiting or interacting with these kinds of phishing sites may result in:

• Theft of your member number and password.
• Collection of personal and financial information.
• Installation of malicious software (malware) on your device.
• Redirection to other scam websites.
• Unauthorised access to your bank accounts and financial fraud.

We're here to help

We encourage our members to Stop. Think. Challenge. to be on guard against scams.

The security of our customers is our highest priority. We continue to monitor and investigate fraudulent activity targeting our customers and work to have scam websites removed as quickly as possible.

If you are ever unsure whether a website, email, or message claiming to be from Heritage Bank is genuine, please contact us before providing any personal or banking information.

If you are concerned about the security of your account, it’s very important you change ALL your Heritage Online passwords and call us immediately on 13 14 22. If you have been a victim of a scam, please report it to Heritage and your other financial institutions as soon as possible. Once you have done so, you can also report it to the ACCC via the report a scam page to help protect others from similar scams.

Share this information to help spread the word to your friends and family.