Your data is sensitive, so we have a range of security controls in place to protect it.
There are also ways you can protect yourself against fraudsters, and reduce the chance of them taking your data or tricking you into giving your details away.
Information about you
- Tell us if any of your personal details change. This helps us confirm your identity when you contact us.
- Check statements and policy information to make sure the information is correct.
- Don't let anyone, including friends and family, use your name and personal details instead of their own.
Sensitive credentials
- Use a strong password that's hard for someone to guess – it should have more than 8 characters and include upper and lowercase letters, numbers and symbols.
- Don't share your username and password. Keep them safe.
- Don't share your online banking login details.
- Don't email anyone your credit card or debit card numbers.
Emails
- Check the sender's email address. If you weren't expecting the email or don't recognise the sender, don't open the email.
- Contact the sender by another method, like their official phone number, to see if the email is genuine.
- Don't click on links or open attachments unless you trust the sender.
Text messages and phone calls
- Don't reply to messages, click any links or send any personal information unless you know the message is from a trusted source.
- Any messages you're unsure of, get in touch with the sender using another contact method.
- Call the phone number on a company’s website if you receive a phone call you weren’t expecting or are unsure about the caller’s identity.
Social media
- Only interact with verified accounts – look for the blue tick on our AA accounts.
- Never share personal or payment details with unverified accounts.
Websites
- Only enter sensitive information on secure websites – look for the closed padlock symbol in the address bar before the website link.
- Be careful what you upload and post online.
Your IT equipment
- Keep your IT equipment and security products – like antivirus software – up to date.
- Secure access to your device using a strong PIN, password, passcode, or biometrics – like face or fingerprint recognition.
Reporting an issue
If you're not expecting an email, phone call or text from us, report it.
We'll either confirm it's us, or direct you to our security and fraud teams to investigate.
To report an email
- Open a new email
- Attach the suspected scam email (drag it from your inbox and drop into the new open email), or take a screenshot if you're reporting a text message
- Send it to: [email protected]
Scam text messages
- Forward the text to 7726