How do I keep my account secure?
The security of your account and personal details is very important to us. Ensuring that your devices and personal information remain safe is essential to avoid exposure to risk.
If you suspect that your CommSec account may have been compromised, please call us on 13 15 19 between 8am and 6pm, Monday to Friday, Sydney time (or +61 2 8397 1206 if calling from overseas).
What are the security features of the website?
To manage your account security details, log in to the website using your unique Client ID and login password, go to Settings, and view the options under Security & Passwords.
Login password
You’ll enter this with your Client ID to access all your linked accounts.
Trading password (optional)
If you set up a trading password, you’ll need to enter it whenever you place an order online.
SMS security
We’ll send a unique PIN code to your mobile phone whenever you perform a task on the website that requires additional client verification (e.g. viewing personal information).
Security Q&A
An alternative to SMS Security. If you set up security questions, you’ll need to answer them whenever we need to verify you (either online, or to identify you when you call us). Must be set up online, not over the phone.
Phone PIN
Used to verify your identity over the phone, along with your Client ID.
Tips to protect your information
There are a few things you can do to protect yourself from online threats like malware and identity theft. These tips can save you a lot of time and trouble if something does go wrong.
Tip 1: Keep your devices secure
- Enable automatic updates to ensure you always have the latest operating system, security patches, and software.
- Always download software from a reputable source.
- Consider running firewall software, anti-virus software, and anti-spyware software.
Tip 2: Look out for hoax emails, phone calls, and SMS text messages
If you ever receive a questionable email message with an attachment, don’t open the attachment. If you can’t confirm that the message is legitimate and the attachment is safe, delete the message immediately.
What might a hoax email look like?
- Email requests for private information or to collect prizes/rewards
- Poor grammar and punctuation
- Foreign voice recordings
- Unusual or unrecognisable email or phone details
- Embedded web links or email addresses that are clickable
- Anyone claiming that CommSec or the Commonwealth Bank has provided them with your contact details.
As well as fraudulent emails, you should be wary of automated phone calls and SMS text messages from unknown sources pretending to be CommSec or the Commonwealth Bank. This includes any unsolicited contact from a third party claiming that we have given them your contact details.
We will never ask you to update or disclose your confidential information via any channel other than logging in to your account at commsec.com.au or contacting us on 13 15 19.
Tip 3: Protect your privacy and identity
- Choose a strong password using a combination of characters, numbers, and symbols.
- Change your password regularly (we recommend at least every three months).
- Never share or record your Client ID or password.
- Only access your account on trusted devices and networks.
- Always log out of your account when you're done.
- Keep your contact details up to date so we can get in touch quickly if we see any unusual activity on your account.
Have you been contacted by a fraudulent party?
If you receive a suspicious email, phone call, or SMS from someone claiming to be from CommSec or the Commonwealth Bank, please do not disclose your account details. Contact CommSec on 13 15 19 or CBA customer service on 13 22 21. You can also email us at hoax@cba.com.au.
More about online security
