Do not respond to any email that asks you for information about your internet banking log in details. If you have received a suspicious email, do not respond and call our Contact Team as soon as you can during our opening hours on 0330 355 0355 to check if it is a genuine email.

Our opening hours are published on our help and support page.

Vishing is where a fraudster uses voice messages or phone calls to try to steal identities, and financial information like your PIN, card details and Digipass code.

The term comes from the combination of ‘phishing’ and ‘voice’. Phishing is where fraudsters use email, regular phone calls and fake websites to dupe people into giving them personal details and financial information.

Vishing is specifically the use of a VOIP service (Voice Over Internet Protocol, or an internet phone service), which enables fraudsters to communicate with their potential victims via automated voice messages and the phone keypad.

Vishers can create fake caller ID profiles so that their phone number seems legitimate, and vishing requests sound urgent, to panic the victim into acting without thinking.

 Examples of vishing:

• Your bank account has been compromised
  You receive call from what appears to be Triodos Bank’s phone number. When you answer, you hear a recording pretending to be from Triodos, saying that your bank account has been compromised, and you need to call a freephone number to reset your security details. Calling this number, you would hear another automated message asking for your bank account number, Digipass code or other personal details via the phone keypad.
• You’re eligible for a loan
  You are offered loan or credit terms too good to be true (they probably are), and to receive the money, you just need to pay an upfront fee or provide your security details.
• You’re due a refund
  You receive a message that says you are due a refund. This is usually someone claiming to be from a trusted organisation. If you opt in – usually by pressing a number on your telephone - you will be redirected to a call centre agent who will attempt to defraud you or steal your information.
• Don’t miss this investment opportunity
  An automated voice message tells you about an investment opportunity too good to turn down. You’ll be encouraged to transfer money to invest in a company or service that doesn’t exist.
• You’ve won a prize
  Victims hear an automated voice message about a free offer or prize, and just need to pay postage, redemption or admin fees to claim. There’s often a deadline to hurry people into handing over their card details.

What you can do

If you receive an unexpected phone call with an automated response, hang up, search for the company’s genuine contact details online and check whether the call was legitimate. If it was, the company will be able to help you, and if it was a vishing attempt, letting the company know enables them to take action, and you will have protected yourself from fraud.

If the call relates to an investment opportunity, check the FCA register to see if the investor is regulated, and confirm the company exists by checking Companies House.

How to report a vishing scam

If you think you have been a victim of a vishing attack, call us immediately on 0330 355 0355. Then report to the FCA using their reporting form.

If you have lost money to suspected investment fraud, report it to Action Fraud on 0300 123 2040.

You can request a temporary increase to your account daily payment limit in either Internet Banking or the Triodos Mobile App. You can increase your limit up to £2 million for Savings Accounts, or £3 million for the Personal Current Account. You can set your higher daily payment limit for up to seven days.

Personal Current Account Payments

When paying another account with another bank, for payments over £20,000 you will need to request a temporary payment limit increase.  Once you’ve made the request for the temporary limit increase it can take a minimum of four hours for it to take effect. CHAPS payments must be made before 2pm if they need to be received by the end of that working day. Foreign payments must be made before 1pm if they need to be sent that day, but please be aware they can take up to 10 working days to arrive. We therefore recommend you make the temporary daily limit change the day before to ensure you can make the CHAPS or foreign payment on time. You can set the maximum temporary limit increase of £3 million for up to seven days.

For payments over £250,000 : If you do not have a digipass, once you have authorised the payment in Mobile App or Internet Banking you will have to call our contact team to go through extra security checks.

As with all payments, please check the bank details you are paying to are genuine and correct before making the payment.

Savings Account Payments

If you want to make a payment for more than £20,000 you will need to request a temporary limit increase and wait a minimum of four hours before you can make the payment. You can set the temporary limit increase for up to seven days and the maximum you can pay is up to £2 million per day. Payments over £100,000 in one day will have to be made as a CHAPS payment with a fee of £20.

If you are paying more than £20,000 in one go from your Savings Account to your Personal Current Account, to then make a CHAPS payment of over £20,000 to another bank account, you will need to increase the payment limit on both of your accounts.

How to make the temporary payment limit increase

You will be able to make the temporary limit increase in the Triodos Mobile Banking App or via Internet Banking.

In the Mobile App go to ‘More’ then ‘Account Settings’ and select the account you wish to apply the temporary change to. From there, choose ‘Daily limit per transaction’ and fill in the temporary change with the amount and for how long you’d like this temporary change to be available.

In Internet Banking go to ‘Self Service’, ‘Account Settings’, ‘Daily Limit’, here you can request the temporary payment limit change.

Once you’ve submitted the request you’ll need to wait four hours before it goes live, we’ll send you an email confirmation once it has.

The digipass plastic is recyclable and in line with our sustainability commitment so please send in broken, old, damaged digi passes using the freepost address - Freepost TRIODOS BANK - and we will recycle it securely for you.

If you lose your connection after authorising a normal payment it will still be processed as normal - use the transaction history option to check the status of your payments. If the payment is not shown on one of these pages then it is still awaiting authorisation. If you lose your connection before authorisation they try logging back in and check the status of your payments. If you are unsure then please call the helpdesk. If you lose your connection after making an international payment, faster payment or urgent payment, please contact the helpdesk (call on 0330 355 0355 or alternatively you can email: [email protected]) who will confirm if the payment has been successfully authorised or not.

Bank impersonation fraud is when a fraudster impersonates someone from the bank in order to trick a victim into making payments to a fraudulent account.

What a fraudster might do:

• A fraudster usually calls their victim, though may use email or another contact method. It’s likely they already know information about the victim, including their name and who they bank with.
• While impersonating the bank staff member, the fraudster might tell the victim their account is under threat and they need to make payments to a “safe account” or set up payments in order to “block the funds”.
• The fraudster might ask for details from the Digipass so they can access the account and make payments to the fraudulent account themselves.
• The fraudster might ask the victim to download screen sharing software so they can view or control the victim’s computer. This can make it easier to take control of the account.
• In any scenario, the fraudster will foster a feeling of panic in order to get the victim to comply with their requests as quickly as possible.
• Fraudsters might also impersonate other well-known, trusted companies such as Microsoft, Apple, BT or HMRC.

What Triodos Bank will never do

• We’ll never call you to tell you to log into internet banking or to make a payment to a “safe account”. If we believe your account to be under threat, we can block the account ourselves and do not need you to do anything from your end.
• We’ll never ask you for your full Digipass number or your Digipass PIN.
• We’ll never ask you to download any software onto your PC or mobile phone.

What you can do to protect yourself

• Never give out your personal details to someone who has called you unexpectedly.
• Never download any software onto your PC or mobile phone when asked by someone over the phone or by email – even if you think you are speaking to a trusted organisation.
• Never give anyone your Digipass number or your Digipass PIN. Triodos will never ask for this information.
• Do not let someone else use your Digipass – even a colleague or family member. Your Digipass is assigned to you as an individual and must only be used by yourself. If you leave your place of work, please let us know and we can arrange for your Digipass to be cancelled.
• If you are unsure about someone who has called you claiming to be from the bank or another company, hang up and call back on the company’s published telephone number.

If you no longer require your digipass please return to us using the freepost address - Freepost TRIODOS BANK - and we will recycle it securely for you.

Did you know you can now replace your digipass with the Triodos Mobile Banking App? Find out how. 

If you need a new digipass because the battery is low (when it displays 5%) please let us know and we will send you a replacement. You should receive this within 5 business days.

We will replace your digipass free of charge when the battery level is 5% or less. In our experience when it proactively displays “Low Battery” it will still have quite a long battery life left. You can find out the amount of battery left on your digipass by following these instructions:

If you have the older style navy blue digipass:

• Turn it on by pressing the red power button.
• Press the letter “T” button five times until the display shows “TEST BATT?”
• Press the “=” sign.
  

The display will tell you what percent of battery you have left.

If you have the green digipass:

• Turn it on by pressing the OK button on the lower right of the digipass.
• Press the “>” button four times until you see “5. Info” on the screen.
• Press OK.
• Press the “>” button three times until it states “4. Battery level” on the screen.
• Press OK.

The display will tell you what percent of battery you have left.

You can send money from your Personal current account via Internet Banking or the Mobile App.

There are daily limits set depending on the type of payment and how you authorise the payment. The Faster Payment limit is cumulative and includes all amounts authorised on that day, even payments set for a future date. You are able to make multiple Faster Payments a day, but once the daily limit is reached, the payment needs to be made as a CHAPS payment, with a fee of £20.00.

See below for the daily authorisation limits for Faster Payments and CHAPS.

Faster Payments (Free of charge)

Digipass - Up to £20,000

Mobile App passcode - Up to £250

CHAPS (£20 fee)

Digipass - Up to £3m

Mobile App passcode - Up to £250

If you opened your account through the Mobile App and went through the ID and selfie check you can authorise payments up to £20,000 with your mobile passcode.

If you are making payments above £20,000 there are new daily payment limits. Please click here for more information.

If you want to move all your everyday banking to Triodos, it’s easy, safe, and secure with the Current Account Switch Service - what's more there is a seven-day switch guarantee. You can find out all about the service here.

Ready to switch?

Simply log in to your Mobile App, go to ‘More’ then ‘Account Settings’ and tap on ‘Switching Service’ to start your switch.

Alternatively, you can log in to Internet Banking, click on 'Self service' and use the quick links to ‘Switch current account’, which will take you to the switch form in old Internet Banking.

If the text is from a sender you know, or from a shortcode (five to eight digits long):

• Reply ‘STOP’. You shouldn’t be charged for this, and it will let the sender know you don’t want to receive their text messages.
• If you’re unhappy about receiving the text or continue to receive them after asking the sender to stop, you can complain to the Information Commissioners Office (ICO) on 0303 123 1113 or online.

If the spoof text message (sometimes known as smishing) is from an unknown sender, or from an organisation you’re not familiar with:

• Do not reply or click on a link in the text. Responding confirms your number is active and could result in you receiving more messages or calls.
• Report the spam text to your network operator. Simply forward the text to 7726. An easy way to remember ‘7726’ is that they’re the numbers on your phone keypad that spell out the word ‘SPAM’. You may get an automated response thanking you for the report and giving you further instructions if needed, like forwarding on the number the spam text message was sent from. You won’t be charged for forwarding spam texts to 7726.
  

Please contact us by sending a secure message in internet banking or call us on 0330 355 0355

Setting up a Direct Debit should be done through the company who will be claiming the Direct Debit. You can cancel a Direct Debit in Internet Banking by going to Self Service, Account settings, then Direct Debits, however you will need to contact the company who claim the Direct Debit to cancel it with them as well.

Identity fraud happens when someone steals and uses your personal information to buy products or services. They get hold of this information in many ways - taking post from your bin, looking for information about you online, or contacting you directly, pretending to be from a real organisation.

There are several things you can do – offline and online - to protect your personal information. Here are a few tips.

Protect yourself offline:

1. Shred your post
   Shred or cut up your post before putting it in the bin, so your name and address cannot be stolen.
2. Redirect your post
   If you move house, ask Royal Mail to redirect your post for at least a year.
3. Be tidy
   Don’t leave things like bills or personal documents lying around for others to see. Even on your work desk.
4. Know your bank
   This sounds like an odd one, but knowing how your bank will and won’t contact you can help you spot fraudulent emails, texts or calls claiming to be from your bank. If a bank statement or new bank card doesn’t arrive, tell your bank or card company immediately.

Protect yourself online:

1. Create complex passwords
   Create strong passwords and different passwords for every online account you have (email, online banking, social media, retail websites etc). Avoid using personal information in passwords, like names of family, school, pets, cars. This will reduce the likelihood that someone could guess or hack your password and access other platforms you use. You might find a password management tool useful.
2. Use anti-virus software
   Protect your internet-connected devices with up-to-date security software, and make sure you install all official software updates and security fixes on your devices.
3. Connect with those you know
   Don’t accept invitations from people you don’t know on social media sites.
4. Be wifi wise
   Public wifi connections and Hotspots can be hacked and used to see what you’re doing online. Whilst it’s fine to use public wifi for browsing, never use it for buying something, logging in, online banking, filling in forms – or anything else that requires your personal or card data.
5. Be private
   Double-check that your social media profiles are private so that you’re only sharing information with people you know.
6. Think before you post
   Before you post anything on social media, forums or online platforms, make sure you’re not revealing any personal information – even pictures of your car registration can be used to get your address from DVLA records.

The Internet Banking log in screen has three different tabs for you to choose from.

• Log in with digipass.
• Log in with username and password.
• Log in with Mobile App.

Select the option that is right for you and follow the on-screen steps.

If you are a business customer and have requested a digipass that hasn’t arrived, or you have lost a digipass, please contact us.

Investment fraud comes in many forms, but is typically when someone poses as an investment service provider, Financial Advisor or fund manager to convince you to transfer large sums of money into a company or service that doesn’t actually exist.

They can create convincing-looking websites and adverts, and send you emails, texts and automated voice messages offering investments that sound too good to be true. They often are.

Before you transfer any money:

• Always check the FCA's ScamSmart webpage for advice on being a ScamSmart investor
• Always check the FCA register to see if the investor is regulated and what they are regulated to do
• Always confirm the company exists by checking Companies House
• Always call the company on the number on their FCA register listing to confirm the correct payment details.

Genuine financial services will never:

• Cold call you
• Put pressure on you to invest
• Ask you to transfer immediately to lock in a deal or take advantage of a time-limited offer or special discount

As a general rule, if it sounds to good to be true, it probably is. Beware of promises of high returns and guaranteed returns with no risk.

>More fraud advice

Useful resources

• Money Advice Service - advice for choosing a financial advisor
• Age UK – Investment Scams

If you receive a call from Triodos, we’ll be happy for you to question who we are and call us back on the number published on our website, just to make sure. If you can, call us back from a different phone, as an extra safety precaution. Fraudsters can clone numbers, so it may look like the number we use to call you.

We will never call you to ask you to transfer money or for your Digipass codes, and we will never ask you to download software onto your device. If someone calls pretending to be from Triodos, and they ask you to do these things, hang up immediately and report it to us on 0330 355 0355.

1. Contact us immediately on 0330 355 0355 (or if abroad on +44 (0)1179 739339) if:

• You’ve lost your card or suspect it has been stolen
• You’ve lost any of your security details or think they have been stolen
• You think someone else may be able to use your card or security details

For card related queries, we're available 24/7. For other fraud related queries, we're available 8am-6pm Mon-Fri (9am-6pm Thu), and 10am-4pm weekends.

2. Once you've contacted us:

• We'll ask you for all information you have about the loss or theft and may require you to report it to the police
• If you find your card after reporting it as lost or stolen do not use it. Destroy your card immediately by cutting through both the magnetic stripe and chip

3. Once you’ve let us know, you can also report it to Action Fraud – the UK’s national fraud and cyber crime reporting centre:

• Call: 0300 123 2040
• Report it online: actionfraud.police.uk

We do not charge for digipass or issuing replacements for personal customers. Please ensure that you keep the digipass in a safe place to avoid unnecessary re-issue. Please return any old/unrequired digi passes to us at or freepost address - Freepost TRIODOS BANK - and we will recycle securely on your behalf.