SBS Security

We’ve got your back.

When you’re with SBS, you’re placing your trust in us to keep your money and your details safe. That’s a partnership we take very seriously. SBS (or any bank) will never ask you for your bank passwords or PIN numbers: in person, on the phone, in writing or by email. A bank email will also never have a link in the email and ask you to log into your account. If you get any such requests, phone SBS on 0800 727 2265 immediately to report it.

Your security and privacy is very important to us.
As a matter of practice we take numerous precautionary steps to safeguard the privacy of personal information, which includes routine security assessments and using NZ government security advisories and best practices to protect our systems. SBS Bank takes customer data security and privacy seriously and train all our staff on the importance of never sharing information with others unless required.

We have implemented controls and a risk-based strategy to ensure we meet all compliance and regulatory requirements. We continuously assess the effectiveness of our controls and look to identify gaps and implement improvements. Our privacy policy sets out what we do, and what we don’t do.

How to avoid scams.

• Never tell anyone your login details, PIN, passwords or verification codes – not the police, bank staff, friends or family.
• Check your statements. Advise your bank immediately of any unauthorised transactions.
• If you suspect you’ve been taken in by a scam, even if you’re not sure, please contact us on 0800 727 2265 as soon as possible.
• Please check our Protecting yourself against scams flyer.

What to expect during an SBS phone conversation.

If we call you, we will always ask a series of questions to identify you before we discuss your accounts with you. If you’re ever concerned about these calls, please phone our Contact Centre on 0800 727 2265.

Likewise, when you phone us, we’ll ask you for a verbal passphrase and/or a series of questions to identify you. Your verbal passphrase should not be the same as your internet banking password.

How we protect your information.

SBS Bank takes the security of your personal information very seriously. All stored customer information is protected from unauthorised access through the use of passwords, user log-ons and other security procedures.

We will only disclose your personal information to third parties in line with the Privacy Statement in our General Terms and Conditions, or if you have otherwise authorised us to do so. For further details on how SBS Bank collects, uses and discloses your personal information, please refer to SBS Bank General Terms and Conditions.

Online banking security.

If your internet banking password is entered incorrectly three times, access to the service will be blocked. This prevents anyone making multiple attempts to guess your password. You can reset your password by calling us on 0800 727 2265. If your internet banking is idle for 10 minutes the system will time-out and you will have to re-enter your information.

SBS Bank is a member of the New Zealand Bankers Association and is subject to the Code of Banking Practice. The Code of Banking Practice sets out important information about our relationship with customers. This includes important information in relation to PINS and passwords, along with internet banking. For further details please refer to the Code of Banking Practice.

Keeping yourself secure.

You can protect yourself

• Don’t reveal personal or financial information in email, don’t respond to email solicitations for this information, and don’t click on links sent in emails you’re not sure of.
• Check the URL (the address) of websites. Scam websites may look identical to a real bank or business site, but the URL may have a slightly different spelling or domain (e.g.com vs .net).
• Protect your personal details (DOB, address, family names) on your social media accounts.
• Add privacy levels to your social media accounts.
  
  

We recommend you:

• Install anti-virus/anti-spyware software on your computer.
• Keep your software up to date.
• Memorise your passwords and never write these down.
• Clear your temporary internet files and cache.
• Please ensure that ‘cookies’ are enabled for your web browser.
• Cert NZ provide excellent advice about how to make a good password (please some helpful tips below)
• An easy way to create a good password is to make a passphrase, that’s four or more random words. Not only are passphrases easier to remember, they’re as strong as a password that uses a long mix of numbers, letters, and symbols.
• You can try making a passphrase that’s a sentence or fun phrase unique to you. For example, popcornwithbutterisbest or catseatpotatochips. Another idea is to look around you and pick four random items, for example Coffeelemoncupflowers
• Always use words that are random to you, and avoid using family names, birth dates or addresses – this type of information is easy for people to find.
• Never share your passwords with anyone – enough said!
• Think before you click on a link – ‘Phishing’ or social engineering attacks are used to trick you into revealing sensitive information. Banks will never ask for your internet banking login or password details via email or phone. Banks will never ask you to log into internet banking via a link in an email.
• Update software – regularly on your computer and smartphone. Use the most up to date operating system and latest version of your web browser.
• Back up files regularly – keep them secure. USB sticks, CD/DVDs and online storage are options.
  
  

You should be suspicious of

• Unsolicited phone calls, visits or email messages from individuals asking for information. If an unknown caller claims to be from a legitimate organisation – even if it’s one you know well – don’t use the contact details they provide to call back and verify the call is real.
• Phone calls, emails or texts advising that you’ve won a competition or ‘click to win’ surveys.
• Someone ringing to say you have an ‘issue’ with your computer.
• Emails claiming you have an inheritance from a long-lost relative.
• A request from someone you don’t know to ‘help them transfer funds’ – and they’ll give you an amount for your trouble.
• Your utility (phone, electricity, gas) company calling about an issue.
• Your bank calling.

Current scams.

SBS Bank has a dedicated team that looks after any threats regarding scams and fraud and constantly monitors policies and procedures to help protect your accounts. 

If you have any questions please phone us on 0800 727 2265 or email fraud@sbsbank.co.nz. If you have received an email from SBS Bank and think it might not be genuine, please contact us directly on 0800 727 2265 or forward the email to comms@sbsbank.co.nz.

Investment scam

We have been made aware of an investment scam circulating via email targeting investors with an offer purporting to be from SBS. If you receive an email from the domains sbs-clients.com, sbs-im.com or sbsbank-savings.com, do not engage and contact us on 0800 727 2265. If you suspect you’ve been targeted by a scam, even if you’re not sure, please phone us immediately.

Remember: SBS (or any bank) will never ask you for your bank passwords or PIN numbers - in person, over the phone, in writing or by email.

If you suspect you’ve been taken in by a scam, even if you’re not sure, please contact us on 0800 727 2265 as soon as possible.

Scammers can use technology to make their phone numbers look local and they might talk about local events and weather. They can pick up quite specific details about you through public and stolen data sources and will aim to get more information to defraud you (or people/businesses connected to you) now or later. There are different types of scams:

The ‘romance’ scam

An email/text correspondence that can go for many weeks or months with no actual meeting. But at some point, the scammer will mention money and ask you to transfer some to help them or their family. Even the smallest amount should set off alarm bells.

The ‘investment’ scam

An unexpected phone call or email offering shares in a company soon to list on the stock market with good returns. They can send documents that look genuine and websites that look real, with professional sounding staff. The Financial Markets Authority (FMA) lists all those licensed or authorised to operate in New Zealand, as well as scam and warning alerts.

Cold calling phone scams

People pretend to be a computer technician, from a power or phone company, police, a Government department offering a range of fake products, services, refunds, payments. Some may be urgent offers to stop a scam on your computer or your bank account, encouraging you to give them information right now. Don’t! No matter how convincing, hang up now and contact the company yourself to check the call is real.

Free helpful resources.

• The Banking Ombudsman has a selection of fraud/scam protection information that can be found here.
• NetSafe helps New Zealand internet users to stay safe online and lists all the latest scams through www.netsafe.org.nz or freephone 0508 NETSAFE (0508 638 723).
• Financial Markets Authority (FMA) – lists warnings and alerts and has information on scams protecting yourself against scams here.