Security guidelines

When accessing My AMP using a PC or mobile device you should:

• Make sure you are accessing the correct website address amp.com.au 
• Make sure you can locate the padlock symbol on your screen before you enter your logon details 
• Look for ‘https’ in URLs displayed in your browser’s address bar.The ‘s’ stands for secure. If you don’t see it, you’re not in a secure web session and shouldn’t enter any Security Access Code or personal or financial data 
• Check the last logon time and date displayed on the welcome screen. If this is not correct contact us immediately 
• Change your password on a regular basis. This can be done securely through My AMP if you have provided us with your Australian mobile phone number and are able to receive sms messages. Phone 13 30 30 if we do not have your mobile phone number 
• Never provide anyone, including AMP Bank staff with your user name and password 
• Logoff and close the My AMP browser when you have finished 
• Never allow your Internet browser to save your password for you.

When using the Internet, you should:

• Avoid using shared computers, eg Internet cafes. If you do use a shared Internet computer you should change your password as soon as possible
• Never click on a link in an email which purportedly sends you to My AMP. Open a new browser window and type amp.com.au. Hyperlinks can show you one thing, but send you somewhere else. We will never send you an email with a link to My AMP
• Never click on any attachments on suspicious emails. They could contain viruses or spyware that records where you go online and captures any passwords or credit card numbers you type
• Install and regularly update firewall, anti-virus, anti-spyware and spam filtering software on your home PC. If automatic updates are available, ensure they are enabled
• Delete spam without reading it. Don’t open or ‘preview’ emails from unknown sources. Check if your Internet Service Provider (ISP) offers a spam filtering service
• Shop online with reputable dealers and if you are unsure use other means to verify them, eg call them.

We monitor transactions to meet regulatory and compliance obligations relating to anti-money laundering and counter terrorism financing. 

We may:

• Disclose information to regulatory and/or law enforcement agencies where legally obliged to 
• Delay, block or refuse transactions where we have reasonable grounds to believe that they breach Australian law or the law of another country 
• Require additional information from you to enable us to comply with our obligations.

You must not initiate or conduct a transaction that may be in breach of Australian law or the law of any other country.

No transaction entered into by you can be an unauthorised transaction for the purpose of determining liability for unauthorised transactions.

Your liability for losses will be determined under the ePayments Code (summarised below – however, you should refer to the actual Code for full details), where that code applies, rather than the guidelines provided.

You are liable for loss resulting from an unauthorised transaction:

a. Where we can prove on balance of probability that you have contributed to the loss:

• through your own fraud or your contravention of the security requirements as set out in paragraph (b) below and you will be liable for the actual loss which occurred before you told us of your Access Card or Security Access Code being misused, lost or stolen, or 
• by your unreasonable delay in telling us after you became aware of the misuse, loss or theft of your Access Card or Security Access Code and you will be liable for actual loss which occurred between: 
  • The time you became aware or should reasonably have become aware that your Access Card or Security Access Code has been breached misused, lost or stolen, and
  • When you told us. 

However, your liability will not extend to the following amounts:

• The portion of loss which exceeds the daily transaction limit.
• The portion of loss which exceeds any periodic transaction limit.
• The portion of loss which exceeds the balance of your account (including any prearranged credit). 
• All losses incurred on any accounts which AMP Bank and you had not agreed could be accessed using the access method.

Where a Security Access Code was required and neither of the situations (i) or (ii) above apply, you are liable for loss resulting from unauthorised transactions to the smallest of these amounts:

• $150.
• The balance of your Account (including any prearranged credit), or 
• The actual loss as at the time you told us that your Access Card had been misused, lost or stolen or your Security Access Code has been breached.

For any period when our 13 30 30 service is not available for you to provide us notice of the misuse, loss or theft of your Access Card or Security Access Code, you will not be liable for any losses occurring as a result of the non-notification during that period, provided that notification is made within a reasonable time of the 13 30 30 service again becoming available.

b. You are in breach of the security requirements if you:

• Are engaging in fraud
• Keep a record of one or more Security Access Codes (without making any reasonable attempt to protect their security) on one article or several articles that are kept with the Access Card or which could be lost or stolen at the same time as the Access Card 
• Disclosed your Security Access Code to anyone including a family member or friend 
• Wrote or indicated a Security Access Code (without making a reasonable attempt to protect the security) on an article that could be lost or stolen 
• Allowed someone else to use your Security Access Code 
• Acted with extreme carelessness in failing to protect your Security Access Code 
• Use a numeric pass code that represents your birth date or an alphabet Security Access Code that is a recognisable part of your name.

Your transactions

No transaction entered into by you can be an unauthorised transaction for the purpose of determining liability for unauthorised transactions.

You are not liable for loss resulting from an unauthorised transaction if:

• The loss is caused by the fraudulent or negligent conduct of AMP Bank’s employees’ or agents’ or companies involved in networking arrangements or of merchants or their agents or employees 
• The loss resulted from the use of an Access Card or Security Access Code that was forged, faulty, expired or cancelled 
• The loss occurred before you received your Access Card or Security Access Code 
• The loss is caused by the same transaction being incorrectly debited more than once 
• The loss occurred after you told us that your Access Card or Security Access Code had been misused, lost or stolen 
• It is clear that you did not contribute to the loss 
• The loss resulted from the unauthorised use of an Access Card where a PIN was not required and you did not delay reporting the loss or theft of the Access Card.