Check you are connected to a legitimate Westpac website
It is important for you to be certain that your browser has connected to the real Westpac Internet Banking site.

Every time you connect to Internet Banking, the service sends your browser a piece of information called a 'digital certificate'. This certificate securely identifies the site you are connecting to, and is used to establish the encrypted session. You can view the contents of the certificate when you first connect or at any other time that you connect. For Microsoft Internet Explorer 5.01 and above, the certificate details can be obtained by double-clicking on the displayed on the status bar (bottom of your browser) browser).

For Netscape Communicator 4.77, click on the on the status bar and click the 'Page Info' button. This certificate has been 'digitally signed' by Verisign, the most recognised issuer of digital certificates in the world. Most browser software is written to automatically recognise any certificate 'signed' by Verisign.

Check the fields of the certificate. The 'Issuer' field should contain a reference to Verisign. The 'Subject' field should always show the organisation as Westpac Banking Corporation.

Each certificate also has a 'digital fingerprint' which is essentially a string of numbers. Like any fingerprint, it is unique, and you can verify the fingerprint displayed in the certificate by contacting the Westpac Internet helpline on 132 032.

If the fingerprint displayed in your browser does not match the fingerprint, you may have connected to an illegitimate site. Do not continue, and do not enter your customer number or password. To obtain assistance, contact 132 032 immediately.

For security purposes, Westpac will change its certificate at regular intervals. Likewise, you should regularly verify that the fingerprint displayed in your browser matches the fingerprint obtained, by contacting 132 032.

Please remember to always contact Westpac if you have any concerns about the authenticity of a Westpac looking website.

Check your email has come from Westpac

It is important that you only act upon instructions and advice from legitimate Westpac emails. Some criminals have access to certain technologies that allow them to send emails, which appear to be from Westpac, but are in fact from the fraudsters.

You should be aware that all legitimate Westpac emails use the same style, layout, terminology and language. You should also be aware of the following actions you can take to ensure your security:

• Familiarise yourself with Westpac looking emails and how they should appear. Always keep a copy of a legitimate email to compare against any suspicious looking emails.
• All Westpac emails will have a reference or link to security information.
• The language and text used should be professional sounding, use the correct terminology and grammar.
• Westpac will never ask for personal and login details via email.
• Under no circumstances should you send your personal details via return email.

Please remember to always contact Westpac on 132 032 if you have any concerns about the authenticity of an email, or if you have received a suspicious looking email.

Financial records protection

• Always keep your tax records and other financial documents in a secure place.
• When throwing out documents make sure your tax file number is not visible.
• Don't disclose your account information over the phone unless you made the call yourself.
• Request your personal information be deleted from marketing databases.
• Be wary of emails/websites which ask you to provide your personal or account information - they may be from a fake company.
• Keep photocopies of your records in a secure place, and the contact numbers of each institution so you can contact them immediately if you suspect fraud or theft.
• It may be tedious, but ensure you check your bank statements for any transactions you didn't make.

Computer protection

• Install appropriate anti virus software on your computer, and keep it updated.
• Always sign out of Internet Banking and close the browser window.
• Be careful when using a public or shared computer, eg in an Internet cafe always ensure you log off and close your browser session.

Password protection

• Don't use your Internet Banking password for other services, eg video account, hotmail password, mobile phone service.
• Change your passwords regularly and never write them down.

Privacy protection

• Ask what the privacy policy is for the companies you provide your personal/bank details to, and find out how they handle such information to ensure they respect your privacy.
• Ensure these companies protect your privacy by collecting only what is necessary and use this information only for reasons they disclose, ie they do not sell your personal details to marketing companies.

If you suspect any instance of misuse of your personal information, contact your financial institution immediately.