Fraudsters often look for data on people that they can use to impersonate or defraud them.

They may research you or your colleagues, so we advise that you educate your staff about protecting their data and ensure they are fraud aware too.

What kind of data might a fraudster steal?

• Personal details, such as your name, address, date of birth and National Insurance number.
• Contact details like your mobile phone, landline, work number and email address(es).
• Memorable information used for security and passwords, such as mother’s maiden name, schools or university attended, pet names, car makes and names of family members.
• Your bank account number, sort code and card details.
• PINs, passwords, Digipass number or other login details.

Ways fraudsters might get hold of your data:

• Social media and online forums – LinkedIn, Facebook, Twitter, Instagram, Reddit – all public platforms could hold a wealth of information about you, your employees, your business and your customers.
• Your company website – if your business has a website, consider what information you include. We advise you not to put your bank details on your website, as fraudsters can use this to impersonate you or your bank.
• Competitions and quizzes – particularly those found on social media websites.
• Calling you and pretending to be a trusted organisation.
• Companies who sell your email address or phone number - always read terms and conditions when signing up for a product or service.
• Bank statements, post and paper documents. Always lock away documents that hold sensitive information and destroy them when no longer required.
• Hacking into email accounts. Ensure your IT systems are secure and be wary of using shared internet connections outside of work. Consider that your suppliers, customers and partners can also have their emails hacked. We recommend that you do not share sensitive data via email – if you need to, encrypt the information with a password.
  

There are several ways to log in depending on what type of account you have.

Start by going to our website www.triodos.co.uk and in the top right-hand corner you'll see a link for "Log in" to Internet Banking.

If you’re a Personal Savings or Investments customer, you will only need your username and password.

If you’re a Current Account customer you will need your digipass (the green pin pad), the PIN to your digipass (which you set yourself), and details regarding the security word you set up when applying for the account. We've produced a short online video to show you how to set up your digipass and activate your online banking. Watch the video on YouTube now. 

Alternatively, if you have access to the Triodos Mobile Banking App, you can log into Internet Banking using your QR code reader. You can find more information on how this works here.

To set up standing orders in the Triodos Mobile Banking App or Internet Banking, choose the account you wish the money to be taken from. Enter recipients’ details and the amount. Click the calendar icon next to the payment date to set the frequency of the payment and save your changes. Authorise the payment to complete the set up.

Vishing is where a fraudster uses voice messages or phone calls to try to steal identities, and financial information like your PIN, card details and Digipass code.

The term comes from the combination of ‘phishing’ and ‘voice’. Phishing is where fraudsters use email, regular phone calls and fake websites to dupe people into giving them personal details and financial information.

Vishing is specifically the use of a VOIP service (Voice Over Internet Protocol, or an internet phone service), which enables fraudsters to communicate with their potential victims via automated voice messages and the phone keypad.

Vishers can create fake caller ID profiles so that their phone number seems legitimate, and vishing requests sound urgent, to panic the victim into acting without thinking.

 Examples of vishing:

• Your bank account has been compromised
  You receive call from what appears to be Triodos Bank’s phone number. When you answer, you hear a recording pretending to be from Triodos, saying that your bank account has been compromised, and you need to call a freephone number to reset your security details. Calling this number, you would hear another automated message asking for your bank account number, Digipass code or other personal details via the phone keypad.
• You’re eligible for a loan
  You are offered loan or credit terms too good to be true (they probably are), and to receive the money, you just need to pay an upfront fee or provide your security details.
• You’re due a refund
  You receive a message that says you are due a refund. This is usually someone claiming to be from a trusted organisation. If you opt in – usually by pressing a number on your telephone - you will be redirected to a call centre agent who will attempt to defraud you or steal your information.
• Don’t miss this investment opportunity
  An automated voice message tells you about an investment opportunity too good to turn down. You’ll be encouraged to transfer money to invest in a company or service that doesn’t exist.
• You’ve won a prize
  Victims hear an automated voice message about a free offer or prize, and just need to pay postage, redemption or admin fees to claim. There’s often a deadline to hurry people into handing over their card details.

What you can do

If you receive an unexpected phone call with an automated response, hang up, search for the company’s genuine contact details online and check whether the call was legitimate. If it was, the company will be able to help you, and if it was a vishing attempt, letting the company know enables them to take action, and you will have protected yourself from fraud.

If the call relates to an investment opportunity, check the FCA register to see if the investor is regulated, and confirm the company exists by checking Companies House.

How to report a vishing scam

If you think you have been a victim of a vishing attack, call us immediately on 0330 355 0355. Then report to the FCA using their reporting form.

If you have lost money to suspected investment fraud, report it to Action Fraud on 0300 123 2040.

Development is ongoing so you may have to go back to old Internet Banking for some features and services, we’ll always tell you when this will happen.

If you do not already have Internet Banking, you can apply for it by downloading the Internet Banking application form and returning it to us. Due to security, we require a signature from you in order to give you access to Internet Banking.

We’re bringing Internet Banking up-to-date to be simpler and easier to use. More touch screen friendly. Easier access to your day-to-day banking needs.

Development is ongoing so you may have to go back to old Internet Banking for some features and services, we will always tell you when this will happen.

Watch our video on the new Internet Banking to see the improvements that we have made.

Bank impersonation fraud is when a fraudster impersonates someone from the bank in order to trick a victim into making payments to a fraudulent account.

What a fraudster might do:

• A fraudster usually calls their victim, though may use email or another contact method. It’s likely they already know information about the victim, including their name and who they bank with.
• While impersonating the bank staff member, the fraudster might tell the victim their account is under threat and they need to make payments to a “safe account” or set up payments in order to “block the funds”.
• The fraudster might ask for details from the Digipass so they can access the account and make payments to the fraudulent account themselves.
• The fraudster might ask the victim to download screen sharing software so they can view or control the victim’s computer. This can make it easier to take control of the account.
• In any scenario, the fraudster will foster a feeling of panic in order to get the victim to comply with their requests as quickly as possible.
• Fraudsters might also impersonate other well-known, trusted companies such as Microsoft, Apple, BT or HMRC.

What Triodos Bank will never do

• We’ll never call you to tell you to log into internet banking or to make a payment to a “safe account”. If we believe your account to be under threat, we can block the account ourselves and do not need you to do anything from your end.
• We’ll never ask you for your full Digipass number or your Digipass PIN.
• We’ll never ask you to download any software onto your PC or mobile phone.

What you can do to protect yourself

• Never give out your personal details to someone who has called you unexpectedly.
• Never download any software onto your PC or mobile phone when asked by someone over the phone or by email – even if you think you are speaking to a trusted organisation.
• Never give anyone your Digipass number or your Digipass PIN. Triodos will never ask for this information.
• Do not let someone else use your Digipass – even a colleague or family member. Your Digipass is assigned to you as an individual and must only be used by yourself. If you leave your place of work, please let us know and we can arrange for your Digipass to be cancelled.
• If you are unsure about someone who has called you claiming to be from the bank or another company, hang up and call back on the company’s published telephone number.

Once you have applied for an account online, and it has been opened (or once you've applied for Internet Banking access for an existing account) we'll send your username by email.

For security reasons your unique password will be sent separately by post. With this information you can then log in and start using Triodos Internet Banking.

If you have opened a Triodos Current Account, you will not have a password and username. Instead, you can log into Internet Banking with the Triodos digipass or using the Triodos Mobile Banking App.

You can make a faster payment or CHAPs payment through Internet Banking or the Triodos Mobile Banking App. You’ll need to authorise the payment with either your digipass, your username and password or your Triodos Mobile Banking App passcode.

To make a payment in the app or Internet Banking, follow these steps:

• Log in and select the account you’d like to make a payment from. Select the green ‘Payment’ button.
• Enter the payment details and then at the bottom you’ll see two options – Faster Payment and CHAPS Payment. Select the type of payment you’d like to make. You can also set the payment date and make it a regular payment or Standing Order by selecting the calendar icon. 

Please bear in mind that Faster Payments will normally be received within two hours of the payment being authorised but may take up to one business day.

CHAPS payments authorised before 2pm on a business day will be received by the end of the day.

If we are unable to match the information you have entered on our password reset page with the information we hold on record you will need to call our Customer Contact Team on 0330 355 0355 or (+44) 117 973 9339 if you are not in the UK. We will be able to send a new password to you by post, this will be sent to your registered address. When calling us please have your account number and security details at hand.

If you are trying to log into Internet Banking for a Business account you do not need a username and password but will have a Digipass and PIN. 

Our friendly, Bristol-based Contact Team is here for you. Our opening hours are published on our help and support page. 

You can cancel a standing order through Internet Banking if you are a digipass user or the Triodos Mobile Banking App.

In Internet Banking, you’ll need to go to old Internet Banking via the green ‘Go to old Internet Banking’ button in the top menu bar. Then ‘Account Information’ and ‘Scheduled Payments’. Here you can edit the amount or cancel. If you use Mobile Secure Key you will need to cancel your standing order in the mobile app.

In the Triodos Mobile App, go to your account then the ‘Upcoming’ tab and select and delete the payment.

If the text is from a sender you know, or from a shortcode (five to eight digits long):

• Reply ‘STOP’. You shouldn’t be charged for this, and it will let the sender know you don’t want to receive their text messages.
• If you’re unhappy about receiving the text or continue to receive them after asking the sender to stop, you can complain to the Information Commissioners Office (ICO) on 0303 123 1113 or online.

If the spoof text message (sometimes known as smishing) is from an unknown sender, or from an organisation you’re not familiar with:

• Do not reply or click on a link in the text. Responding confirms your number is active and could result in you receiving more messages or calls.
• Report the spam text to your network operator. Simply forward the text to 7726. An easy way to remember ‘7726’ is that they’re the numbers on your phone keypad that spell out the word ‘SPAM’. You may get an automated response thanking you for the report and giving you further instructions if needed, like forwarding on the number the spam text message was sent from. You won’t be charged for forwarding spam texts to 7726.
  

You will have access to the features tour within new Internet Banking. There is also more support available at www.triodos.co.uk/help/internet-banking.

You have various options for contacting Triodos to ask questions or request information. One of which is a secure messaging service which is accessed by logging in to your Internet Banking. You can send us a secure message and you will also receive secure messages from Triodos from time to time. When we do send you a message you will receive an e mail advising you to log in to Internet Banking to read it. Secure messages are responded to within our Contact Team opening hours, if your request is urgent please call us on 0330 355 0355 or (+44) 117 973 9339 if you are not in the UK. Our opening hours are published on our help and support page. 

All Personal and Business customers will be upgraded to the new Internet Banking in the coming weeks and will be notified a few days before this is going to happen. You won’t need to do anything. There are no changes to your account or the way you log in. Always log in via the Triodos Bank website.

Please contact us by sending a secure message in internet banking or call us on 0330 355 0355

We have created a features tour within new Internet Banking to guide you through key changes. However, you can expect;

• New clean look and feel with simpler navigation
• New home page view of all your accounts
• Quicker access to day-to-day banking needs like making payments, add new payees and authorising payments
• Make faster payments, CHAPS or set up regular payments (standing orders)
• Save new payee (icon)
• View all your accounts on one overview screen
• New ‘Feed’ feature for quick access to important notifications and messages
• To view your standing orders select your account then select ‘Upcoming payments’
• You can navigate back to the old style Internet Banking any time via the green ‘Go to old Internet Banking’ button in the top right navigation

Please note, that although the design of Internet Banking is changing;

• Your personal log in details will stay the same
• You’ll recognise your accounts in a familiar place on the homepage
• You’ll still be protected by the latest security measures. We will continue to use the digipass security measures to protect your money and your personal information
• You’ll carry out your day-to-day banking tasks in a familiar way

There is no change to the Android or iPhone app.

Watch our playlist of how-to videos on help and support with Internet Banking. 

1.         Go to ‘Payments’ tab

2.         Select your account you would like to make a payment from

3.         Enter recipient’s details and amount

4.         To save payee click (+icon )

5.         Select payment type – click on [i] to check daily limits

6.         Press complete payment

7.         Follow on screen instructions to authorise payments

8.         Select payment you wish to authorise

9.         Click ‘Authorise and submit’