How to help protect your business
Ways to help protect your business from scams and cyber threats, including staff education, securing accounts and more.
Read about current business scams
Staying informed about which business scams are currently active can be a good form of defence.
Educate your staff
Your staff can be your best defence against scams and fraud. Make sure they know what part they play in helping keep themselves, the business, and your customers safe.
To help you and your staff remember some simple actionable tips, use the PACT acronym, which stands for:
P – Pause
A – Activate
C – Call out
T – Train
Pause before sharing information
Ask employees to think before sharing sensitive information especially in response to unexpected phone calls requesting banking and personal details, to transfer money or download software.
Activate a second layer of security
Use two-factor authentication (2FA), across business systems. Remind employees to protect their devices with a password, PIN or biometric ID and to keep their device operating systems, apps and anti-virus software up to date.
Call out suspicious activity
Educate your staff so they know how to identify suspicious activity, scams, phishing emails or texts and what to do.
Train your staff
Look out for irregularities on invoices, particularly relating to changes in details, and implement call back verification processes for anyone who makes payments.
For more information about educating your staff about online security visit the Own Your Online website.
Review your business security processes
- Make sure your security processes and policies are up to date and are followed
- Back up your data regularly, capturing all the digital information you need to keep your business running
- Make sure passwords are long, strong and unique
- Use two-factor authentication, where available
- Set your devices, software, operating systems and apps to update automatically
If you don't have an online security policy, the Own Your Online website has a useful guide to help you get started.
Help secure your business accounts
OnlineCode two-factor authentication
If you’re registered for OnlineCode in the ANZ goMoney app and Internet Banking—, it adds a second layer of security to verify certain transactions.
Control access to your accounts
Decide how your employees and your accountant access your online banking by assigning them a profile in ANZ Direct Online (ADO) – Administrator, Authoriser or User.
Read more about practical tips to keep your ADO access secure.
Use more than one authoriser
Set your account rules so payments made in goMoney, ANZ Direct Online or Internet Banking require more than one authoriser (signatory). Add new authorisers to your account by calling our Business Specialists.
How we help keep you safe
Read more about other ways we help safeguard your accounts and information.
Secure your payment terminals and online platforms
- Be wary of customers who make unusual requests, like asking for immediate returns, large voucher purchases over the phone, or to handle the EFTPOS— terminal themselves.
- Only use solutions and practices that comply with Payment Card Industry Data Security Standards (PCI DSS) compliant solution with Card Security PCI DSS. For more information, see the ANZ Merchant Operating Guide on EFTPOS card and device payments.
- Protect your website with 3D secure authentication to help prevent online payment fraud. To check if it is enabled, contact your website payment gateway provider, or call us on 0800 473 453.
- To reduce the risk of bot-driven fraud through your website, secure your website’s checkout process with tools like CAPTCHA, to help distinguish between human activity and automated activity.
Guide to business cyber resilience
Tips and information to help protect your business from evolving cyber risks. This includes processes, ways to engage staff around scams and fraud, and layers of security your business and employees can use.
Related content
Important information
This material is for information purposes only.