Security

How we protect you

• Two-step sign-in. Turn it on in Security to require a code from an authenticator app each time you sign in. Keep your recovery codes somewhere safe.
• Transaction PIN. Payments, wires and escrow releases need your personal PIN. Five wrong attempts lock PIN use for 15 minutes.
• Automatic sign-out. Online banking signs you out after 15 minutes without activity.
• Alerts. We message you about payments and changes to your security settings, by email and, if you choose, by text.
• Card controls. Freeze a card instantly, set limits, and report it lost or stolen from online banking.
• Payment checks. We screen payments to protect customers from fraud, sanctions breaches and money laundering. Sometimes this means we ask you about a payment before it goes.

What we will never do

• Ask for your password, PIN, full card number or two-step code by phone, email or text
• Ask you to move money to a "safe account"
• Send you a link that signs you straight into online banking

Keeping yourself safe

• Type our address yourself or use a bookmark, and check the padlock in your browser
• Use a password you don't use anywhere else, and turn on two-step sign-in
• Be wary of urgent requests to pay, even from people you know; check by calling them
• Keep your phone and browser up to date