Banking online safely: check your account and pay bills without the fear

Being able to check your balance, pay a bill or move a little money without leaving your armchair is one of the genuinely good things about a phone or computer. Yet online banking is also the thing people worry about most, and that worry is fair, because it is where scammers try hardest. The reassuring truth is that the banking itself is safe. Millions of Australians do it every day. Almost all the danger comes from one trick, a fake message pretending to be your bank, and once you can recognise that trick, you can bank with real confidence. This is a plain guide to doing it safely. It is general help, not financial advice.

The one idea that keeps your money safe

If you take nothing else from this page, take this: only reach your banking through your bank's own app, or by typing the bank's address in yourself, never by tapping a link someone sent you. Your genuine banking app, and the address you type in, always land on the real bank. A link in a text or email might land on a clever fake that looks identical and simply steals what you type. Get that one habit right and you have closed the door that nearly every banking scam tries to walk through.

Use the bank's own app, not a link in a text

Every big Australian bank has its own app, and it is the safest and simplest way to bank. You install it once from your phone's app store, and after that a tap opens it and it takes you straight to the genuine bank, every time. There is no address to type and no link to judge, which is exactly why it is safer. The app is a locked front door that only ever opens onto the real bank.

Compare that with a link in a text message. A scammer can send a message that looks exactly like your bank, with a link that goes to a copy of the bank's login page that they built. You would not see the difference, and anything you type there goes to them. So the rule is simple and it never changes: to log in, open the app you installed, or type the address yourself. Never log in by tapping a link that arrived in a message, no matter how real it looks.

The code the bank sends to your phone

When you sign in, or when you pay someone new, the bank often texts you a short code, usually six numbers. You type that code into the bank's app or website to prove it really is you. This is a good thing. It means that even if someone somehow learned your password, they still could not get in without the code that only lands on your phone. It is the bank looking after you, not an obstacle.

There is one rule that goes with it, and it matters more than any other: that code is yours and yours alone. The real bank will never ring you and ask you to read the code back to them. Nobody legitimate ever needs it. If anyone, by phone, text or email, asks you to tell them the code, that is a scam every single time, and the right thing to do is simply not to share it and to hang up. Guard that code like the key to your front door, because that is what it is.

Passkeys: easier and safer than a password

Many banks now offer something called a passkey, and it is worth knowing about because it is both simpler and safer than a password. Instead of remembering and typing a password, you sign in with your fingerprint, your face, or the PIN you already use to unlock your phone. There is nothing to memorise and, importantly, no password for a scammer to steal or trick out of you. A passkey only works on your own device, so it cannot be used from afar.

If your bank offers a passkey, turning it on is one of the kindest things you can do for your own peace of mind. It removes the password worry entirely and makes signing in a moment's work. It is exactly the sort of small, safe setup we are glad to walk through with you, so you end up with banking that is easy to get into and very hard for anyone else to.

How to spot a fake bank text

Almost every banking scam arrives the same way, so once you know the shape of it, you can see it coming. The fake message tries to make you feel a jolt of fear or urgency: your account has been locked, a payment needs approving, someone has tried to log in, click here right now to fix it. That rush of worry is the whole trick, because a worried person taps before they think. A calm reader who knows the pattern simply does not.

Hold on to this line: real banks do not ask you to log in through a link in a message. So if a text or email worries you, do not tap anything inside it. Do not reply to it. Instead, put it aside and check the safe way, by opening your bank's own app, or by ringing the bank on the number printed on the back of your card. If something really were wrong, you would see it there, on the genuine bank. Nine times out of ten you will find nothing wrong at all, and you will have quietly beaten the scam by doing nothing it asked.

When in doubt, the safest move is always to stop and check with someone. There is never any shame in pausing on a message that worries you, and a scammer is counting on you not to. If a text about your bank leaves you uneasy, our guide on how to spot a scam text or email walks through the tell-tale signs in more detail.

Let us set it up safely, at your pace

If online banking has felt like something to be nervous of, it does not have to stay that way, and getting it set up well is exactly the kind of thing we do gently and for good. We install your bank's genuine app, make signing in simple, turn on a passkey if your bank offers one, and show you a real fake bank text so you know one on sight. We never touch your money and never need your banking password. Get in touch and we will set it up calmly, at your pace, until it feels easy. New to all this? Start with our guide on where to start with tech help. This is general help getting set up safely, not financial advice.