[Original at https://www.asb.co.nz/story24389.aspx]
Important
security information for ASB and Bank Direct customers
making online payments using POLi
We take the
security and protection of our customer’s internet banking
experience and information very seriously. Through our
proactive security and fraud monitoring we have identified
the POLi payment service is “spoofing/mirroring” the ASB
and Bank Direct secure internet banking sites so that they
look identical to our genuine sites, and capture customer
information. The POLi payment service is offered as a
payment option by a number of NZ online websites.
When making a payment via a website that offers POLi as a payment option, you will be asked to enter your internet banking user ID and password and Netcode into a page that looks like an ASB FastNet Classic or Bank Direct NetDirect site. Note that these are not our secure websites and we are unable to audit the security of the POLi service. Your information is then used by POLi to log on to our genuine sites in your name.
Due to the serious security and fraud risks to ASB and Bank Direct internet banking customers, we have requested POLi to immediately remove their unauthorised ASB and Bank Direct sites.
If you are
an ASB or Bank Direct customer, we recommend that you
do not use the POLi payment service due to
the security risks involved. We are not associated with, and
have never endorsed, POLi. Questions and
Answers I need to make an urgent purchase, and would
normally use POLi to make the payment. What can I use
instead?
What should I do if I have used the POLi system
previously?
If you have used the POLi service in
the past, we strongly recommend you change your internet
banking password immediately (as you should do regularly).
If you notice any irregular activity on your accounts,
please immediately contact us on 0800 803 804.
I
thought ASB and Bank Direct endorsed/supported the POLi
service?
We have never endorsed the POLi
service, as we are unable to audit its
security.
ENDS