Internet banking monitoring
Our internet banking security team monitors internet banking transactions. They analyse internet banking activity looking for unusual activity on our customers' accounts. You may receive a call from a member of our monitoring team to verify a payment made using internet banking. We'll never ask for your online banking login details.
Cyber incidents monitoring
More cyber incidents are occurring in New Zealand, affecting organisations and individuals. Financial services are increasingly becoming targets for cyber criminals and while most events are averted without you even noticing, we do understand that you may be concerned.
Organisations are advised to limit public comment on security matters, as what's reported in the media can put them at future risk.
For more information on different types of cyber security incidents and their prevention, see CERT NZ's Technical Guides and Critical Controls pages.
Card activity monitoring
All Kiwibank customers' cards are protected by a world class tool used by our dedicated fraud prevention team. We monitor activity on all cards – ATM/EFTPOS, Visa debit and credit cards – 24 hours of every day.
If we notice any unusual spending on your card, we'll try to contact you to make sure it's you spending your money. If we can't get in touch with you and we believe there's a high chance of fraud, we may temporarily block your card to stop any more transactions until we can speak to you.
To help us protect you, please make sure we have your current contact details. You can update them in internet banking or our mobile app by following these instructions.
Planning to travel overseas?
If you're going overseas and planning to use online banking or any of your Kiwibank cards, find out more about what you need to know before you head off.
FraudWatch International
FraudWatch International are the global leaders in online fraud protection services. We've enlisted the services of FraudWatch International to prevent and protect against online threats and ensure the integrity of our online services.
Automatic time-outs
You'll be automatically logged out if your internet banking session remains inactive for more than five minutes. If you're using our mobile app, you'll be logged out after four minutes of inactivity. This reduces the risk of anyone else accessing your bank information if your computer or device is left unattended.
Password lockout
If your internet banking password and mobile app four-digit security code are entered incorrectly three times, access to your online banking will be blocked. This prevents anyone from making multiple attempts to guess your password.
- How to reset your internet banking password
- How to reset your security code
Extended Validation Secure Socket Layer (SSL) Certificate
We use digital certificates from DigiCert that verify that you're connected to our official internet banking website. These certificates also confirm that all communication between you and Kiwibank is encrypted and therefore secure. Encryption is a mathematical method of coding information.
We recommend that you use one of our supported browsers, but if you don't, you can still confirm our Extended Validation Certificate by clicking on the padlock to the right of the address bar.
Browser cache
The pages you visit while logged in to internet banking are not cached. This means that other people can't use your computer to view your bank account details by selecting the browser back button.