What you can do to protect yourself

Here are some common scenarios and steps you can take before contacting us.

Recognise suspicious communications

Scammers often impersonate trusted organisations.

  • We'll never ask for your password, One-Time PIN (OTP), account details or personal details via email, SMS or phone.
  • We’ll never ask you to transfer funds.

If something doesn’t feel right, don’t respond. Call us on 13 24 84 to verify.

Pause before you pay

Scammers often use a website that appears legitimate and request your account details and/or OTP to make a purchase or further transactions on your account.

  • Be cautious of deals on social media or unfamiliar websites.
  • Never enter your account details or OTP to complete a transaction unless you’re certain it’s legitimate.

Check before you share

Your security details are private – always keep them that way.

  • Never share your password, OTP or any other Online Activation Codes with anyone, even us.
  • If you give out your OTP or receive an SMS from MyCard about activity you didn’t request, please call us immediately on 13 24 84.
  • Update your password regularly and make sure your contact details are correct so we can contact you about any potential scams.

Think before you click

Malicious links and attachments are a common scam tactic.

  • Avoid clicking on suspicious links or downloading attachments from unknown sources. Scammers often use links or attachments to install malware or obtain your personal information.
  • Double-check the sender details before opening messages.

How we’re keeping your MyCard account safe

We have several safeguards in place to keep you safe from cyber threats, fraud and scams.

The Online Authorisation Code (OAC)

The Online Authorisation Code (OAC) is a security feature of MyCard Online that provides you with added protection when you are adding a new payee. When adding a new payee, the OAC will be sent to your registered mobile phone number via SMS before you can transfer funds. Please ensure your mobile number is up-to-date.

Our Two-Way Alert service

Our Two-Way Alert service is set up for all MyCard credit cardholders and ensures a quick and easy two-way communication with us in the event of any suspicious activity being detected when making a purchase.

MyCard Online security measures

The MyCard website is closely monitored 24 hours a day by dedicated personnel who review the website to identify opportunities to enhance the site's security and to maintain all the MyCard Online services available for our customers.

A digital certificate (found by clicking on the Padlock Icon in the Status Bar at the foot of the page) is used to verify the identity and authenticity of the MyCard website.

When logging in to MyCard Online, you will see the date and time of your last sign in. Contact our Customer Service Centre immediately on 13 24 84 (+61 2 8225 0615 if calling from overseas) if you notice a discrepancy in the date and time of your last log in.

Data encryption

When logged in to MyCard Online or the MyCard App your connection is encrypted to ensure the confidentiality of all data sent and received.