Open banking security tips

What is open banking?

Open banking gives you the option to share your banking information with accredited third parties, including financial institutions. It makes it easier to manage, compare and switch banking products and services.

How does open banking work?

Open banking is part of the Consumer Data Right, opens in new window - new legislation designed to allow you to share your data with accredited third parties. If you do choose to share your information, there are strict rules and security protocols in place to protect it.

All open banking participants that send and receive data must be accredited by the Australian Competition and Consumer Commission (ACCC) and the Australian Information Commissioner (OAIC). They have set strict accreditation criteria, as well as privacy and information security standards.

From 1 July 2020, if you are a NAB online customer aged 18 and over, and either an individual or a sole trader, you will be able to share your account summary, balances and transaction history for open accounts such as:

• credit or debit cards
• term deposits
• transaction and savings accounts.

Open banking isn't mandatory - you'll have full control of your data and whether you want to participate. You'll never need to give your NAB banking password to a third party.

What happens to my information when i participate in open banking?

If you choose to share your information, it will be sent to and stored by the accredited third party using a secure connection. NAB will never ask you to confirm, update or disclose personal or banking information via a link in an email or text message.

You can choose to end the sharing at any time, and you can also ask for your data to be deleted.

Learn more about open banking and how to start sharing or manage your sharing permissions in our how to share data using open banking guide.

Security tips for using open banking

We know that open banking is new, so here are some tips to help protect your accounts and information.

Check who you're sharing your information with

Before sharing your information, make sure you're interacting with an accredited third party by checking to see if they're listed on the Australian Competition and Consumer Commission (ACCC) Consumer Data Right website, opens in new window. Here you'll also be able to see and access official third party websites.

Regularly check your data sharing permissions using your NAB Internet Banking account. To do this, log in to internet banking and select Settings/Mailbox and then select Data sharing permissions.

You can also use internet banking to revoke your permission to share data at any time and ask for your data to be deleted. Click on any third party to see the sharing details, or choose to stop sharing.

Never share your NAB Internet Banking password

You will never be asked to share your NAB password or PIN number with us or with any accredited third party.

Instead, when you decide to share your information with an accredited third party, we’ll send a one-time password to the mobile number you use for NAB Internet Banking.

I’ve received a suspicious email/sms about open banking – what should i do?

Forward suspicious emails to phish@nab.com.au and then delete them.

Forward suspicious text messages to 0476 220 003 (047 NAB 0003) and then delete them.

View the latest security alerts to stay up-to-date and protected.

How can i improve my account security?

Enable multi-factor authentication

Multi-factor authentication (MFA) is an added layer of security designed to confirm your identity when logging in to an online service.

You can register for MFA at any time using the above instructions, or read secure your accounts with multi-factor authentication to learn more.

Create and keep secure passwords

Creating strong passwords is the first step in eliminating the risk of unauthorised access by those willing to put in a bit of guesswork. Never share your password, not even with someone you trust.

Visit our security homepage for more tips on how to stay safe online.

Who to contact for help

If you've provided personal or banking details in response to a suspicious message, call us immediately on 13 22 65 or contact your local branch for help.