Important security information - online payments using POLi

[Original at https://www.asb.co.nz/story24389.aspx]

Important security information for ASB and Bank Direct customers making online payments using POLi
We take the security and protection of our customer’s internet banking experience and information very seriously. Through our proactive security and fraud monitoring we have identified the POLi payment service is “spoofing/mirroring” the ASB and Bank Direct secure internet banking sites so that they look identical to our genuine sites, and capture customer information. The POLi payment service is offered as a payment option by a number of NZ online websites.

When making a payment via a website that offers POLi as a payment option, you will be asked to enter your internet banking user ID and password and Netcode into a page that looks like an ASB FastNet Classic or Bank Direct NetDirect site. Note that these are not our secure websites and we are unable to audit the security of the POLi service. Your information is then used by POLi to log on to our genuine sites in your name.

Due to the serious security and fraud risks to ASB and Bank Direct internet banking customers, we have requested POLi to immediately remove their unauthorised ASB and Bank Direct sites.

If you are an ASB or Bank Direct customer, we recommend that you do not use the POLi payment service due to the security risks involved. We are not associated with, and have never endorsed, POLi.

Questions and Answers

I need to make an urgent purchase, and would normally use POLi to make the payment. What can I use instead?
You will be able to use other payment methods offered by the merchant, for example your credit card, or Visa Debit. Here is more information about staying safe when using your credit or debit card online and how ASB Triple Check works https://www.asb.co.nz/staysafeonline

What should I do if I have used the POLi system previously?
If you have used the POLi service in the past, we strongly recommend you change your internet banking password immediately (as you should do regularly). If you notice any irregular activity on your accounts, please immediately contact us on 0800 803 804.

I thought ASB and Bank Direct endorsed/supported the POLi service?
We have never endorsed the POLi service, as we are unable to audit its security.

ENDS

© Scoop Media