Stay sharp day-to-day.
- Make sure your team is scam-aware, especially anyone handling payments.
- Encourage a culture of questioning payment instructions, even from senior executives.
- Check first-time payments and changes to payee details with the payee directly by calling a verified number.
- Get the latest scam alerts on ASB Scam Updates or NCSC Alerts.
- Never share Netcodes or FastNet Business Token codes. The ASB Fraud team will never ask for these.
Set up safeguards in FastNet Business.
- Use strong, unique passwords and don't reuse your banking password anywhere else.
- Set up multiple approvers for payments - this helps keep your business safe if one person is targeted by a scam. Your relationship manager can help with this.
- Turn on multi-factor authentication for an extra layer of protection.
- Speak to your relationship manager about setting up IP address verification so your team can only log in from trusted IP addresses.
- Review your payment limits for accounts and users to make sure they're right for your business.
Remember, ASB will never:
- Ask you to read out (or disclose in any way) your password, Netcode, or FastNet Business token.
- Request remote access to your device.
- Direct you to a web address that isn't asb.co.nz
- Send you a text message or email to verify a call.
- Ask you to move money to "keep it safe".
What to do if something feels off
If you get a call from someone claiming to be from ASB, ask for a Caller Check notification in your ASB Mobile Banking app. If they can't send one, or they send it outside the app - it's likely a scam.
For any call that doesn't feel quite right, hang up and call 0800 ASB FRAUD or your Relationship Manager straight away.
