Tips for using ANZ Direct Online safely

Create segregation of duties within your finance or payment team to reduce internal fraud risk:

• One person should create or upload the batch; a different person should approve it
• Approvers should always check the output report to confirm what they're approving
• Remove Site Administrator access to create or approve batches. If they sometimes need to do this, reduce their limit to $1
• If a Site Administrator needs a higher limit temporarily, another Site Administrator should increase it and make sure the change is recorded and monitored.

Unless there's a genuine need, remove any Super Users in ADO to ensure your business always requires two users to authenticate payment batches.

• Each user should have a maximum transaction amount – a batch can have multiple transactions of varying amounts, but no single transaction should exceed the user's set limit.
• Check the Site Limits that have been set for you in ADO and make sure it's suitable for your daily or monthly activity.
• Reduce limits if they're too high.

• Regularly check user access on your sites are current.
• Remove staff that have left or moved to other roles.
• Reduce limits to $1 for users who don’t use ADO on a regular basis.

• Make sure your team knows what to do if they're affected by a scam.
• Have a documented process in place that includes key contact details, such as your bank's fraud team.