Our primary feature regarding the digipass device is that of security. Our current providers VASCO have confirmed that the digipass can be recycled and if you wish to return your digipass to us if you no longer require it we will recycle it securely on your behalf.

Start by going to our website www.triodos.co.uk and in the top right-hand corner you'll see a link for "Log in" to Internet Banking.

If you have set up the Triodos App, you can log into Internet Banking using the app’s QR scanner on a second device. You can find more information on how this works here.

If you’re a Current Account customer and you do not use the Triodos App you will need your digipass and PIN, and details regarding the security word you set up when applying for the account.

If you’re a Personal Savings or Investments customer and do not use the Triodos App, you will need your username and password.

The digipass plastic is recyclable and in line with our sustainability commitment so please send in broken, old, damaged digi passes using the freepost address - Freepost TRIODOS BANK - and we will recycle it securely for you.

If you no longer require your digipass please return to us using the freepost address - Freepost TRIODOS BANK - and we will recycle it securely for you.

If we are unable to match the information you have entered on our password reset page with the information we hold on record you will need to call our Customer Contact Team on 0330 355 0355 or (+44) 117 973 9339 if you are not in the UK. We will be able to send a new password to you by post, this will be sent to your registered address. When calling us please have your account number and security details at hand.

If you are trying to log into Internet Banking for a Business account you do not need a username and password but will have a Digipass and PIN. 

Our friendly, Bristol-based Contact Team is here for you. Our opening hours are published on our help and support page. 

As you'd expect from a bank, we take security very seriously - here are some things we do to keep you safe. To help you spot fraud, we’d also like you to know the things we’d never do.

What we do

• Provide around the clock debit card transaction monitoring.
• Provide 24/7 phone support to answer your questions about your debit card.
• Let you freeze and unfreeze your card whenever you need to.
• Temporarily block accounts and debit cards if fraudulent activity is suspected.
• Automatically log you out of Internet Banking and the app after a period of inactivity.
• Keep you up to date with fraud protection advice.
• Send text alerts when online or card transactions are made.
• Temporarily suspend your Internet Banking if left dormant for a long time.

What we’ll never do

We will never contact you out of the blue to ask you:

• For your mobile app passcode.
• For your digipass PIN.
• For your card number or PIN.
• To transfer money out of your account.
• To click a link in an email to our Internet Banking.
  

If in doubt, call us on the number on our website, or delete the email without opening it.

Learn more about how to stay safe online or visit the action fraud website.

You can send your Triodos Digipass back to us for recycling, using our freepost address – simply write ‘Freepost TRIODOS BANK’ on the envelope (you do not need to attach a stamp). We have partnered with a Waste Electrical and Electronic Equipment (WEEE) Recycling Scheme and will safely recycle all digipasses.

Using the Mobile Secure Key is more convenient and means you and your money are better protected from fraud.

During activation, you provide a photo of your ID and a video of your face to verify it is really you - the digital equivalent of an ‘in-person’ identity check at a high street bank.

These are linked to your Mobile Secure Key and the devices you have set it up on, ensuring no one else can set up or use your Mobile Secure Key on their device.

If you have a physical digipass, the Mobile Secure Key will replace it. This means you can send your Triodos Digipass back to us for recycling, using our freepost address – simply write ‘Freepost TRIODOS BANK’ on the envelope (you do not need to attach a stamp). We have partnered with a Waste Electrical and Electronic Equipment (WEEE) Recycling Scheme and will safely recycle all digipasses.

• Related: How do I log in to IB

We do not charge for digipass or issuing replacements for personal customers. Please ensure that you keep the digipass in a safe place to avoid unnecessary re-issue. Please return any old/unrequired digi passes to us at or freepost address - Freepost TRIODOS BANK - and we will recycle securely on your behalf.

Yes. The Triodos App with Mobile Secure Key is an easier and more secure way to log in and authorise payments - both within the app and in Internet Banking via your desktop or laptop. If you prefer, you can continue to use your current login and authentication method.

Money mules are people used to help launder money, often without realising that’s what they’re doing. They help move illegitimate funds (money gained illegally) between accounts so that the money then appears to be legitimate. They may be asked to receive money into their account, then withdraw it and put it into another account, sometimes in another country. Sometimes the money mules are offered compensation or commission.

Even if money mules don’t know the money they’re transferring is fraudulent, they are still committing fraud and money laundering, and could be sentenced to time in prison or to pay a fine.

Money mules are often recruited into this activity through false job adverts, or social media posts that promote quick money-making opportunities. Sometimes they are duped by fake social media profiles that pretend to want a romantic relationship with the victim to gain their trust and affection before asking this favour or blackmailing them. This is also known as romance fraud.

Never move money between accounts you don’t know and trust, especially because someone else has asked you to, or if you don’t know where that money has come from. If you are suspicious of money laundering, call us immediately on 0330 355 0355.

We've produced a short online video to show you how to set up your digipass and activate your online banking. Watch the video on Youtube now, or follow the steps below.

You can also sign into online banking using the Triodos Mobile Banking App, find out how to here.

To get started, you will need your digipass, the pin for your digipass and your security word. When you first use it you will be prompted to change your digipass PIN to something memorable. You can do this by following these simple steps:

• Switch the digipass on by pressing “OK”
• Then press button “1”
• Enter the four-digit digipass PIN we sent you and press “OK”
• You will now be prompted to enter your own new digipass PIN, which for your security must meet the following criteria:
  

• • It must be four digits long and different to the PIN we sent to you
  • It must not be sequential or identical numbers, such as “1234” or “2222”
  • It must not be easily obtained or guessed, such as using your date of birth
  • Please note, if your choice of digipass PIN isn’t considered secure enough the message “Weak PIN” will be displayed. If this happens press “OK” and you will be prompted to enter a different, more secure, PIN.
    

When your PIN has been changed successfully, an eight-digit code will be displayed.

To login to internet banking, continue to the Triodos homepage. Instructions on how to login are here.

The digipass is one of our current methods of logging in to Internet Banking, as we feel this provides a strong level of security. We have now introduced the ability to log in to Internet Banking and to authorise payments in Internet Banking using the Triodos Mobile Banking App. You can find out more about how to do both of those things, here.

Currently the Triodos Mobile Banking App is only available for Personal Current Account customers, or Online Saver and Online Saver Plus customers that have opened an account using the Mobile App. But over the coming months we will be rolling it out to all Personal Savings and Investments customers. If you are not a Triodos Current Account customer yet, you can apply here.

In order to safeguard your personal information and money we require a three stage login process for internet banking, one of which involves the use of a digipass. This is similar to the card reader facility at some other banks and is used along with other systems to ensure your finances are kept safe. We constantly review our security measures and publish guidance on steps that can be taken to prevent fraud such as the Take 5 campaign through FFA UK.

You can request a temporary increase to your account daily payment limit in either Internet Banking or the Triodos Mobile App. You can increase your limit up to £2 million for Savings Accounts, or £3 million for the Personal Current Account. You can set your higher daily payment limit for up to seven days.

Personal Current Account Payments

When paying another account with another bank, for payments over £20,000 you will need to request a temporary payment limit increase.  Once you’ve made the request for the temporary limit increase it can take a minimum of four hours for it to take effect. CHAPS payments must be made before 2pm if they need to be received by the end of that working day. Foreign payments must be made before 1pm if they need to be sent that day, but please be aware they can take up to 10 working days to arrive. We therefore recommend you make the temporary daily limit change the day before to ensure you can make the CHAPS or foreign payment on time. You can set the maximum temporary limit increase of £3 million for up to seven days.

For payments over £250,000 : If you do not have a digipass, once you have authorised the payment in Mobile App or Internet Banking you will have to call our contact team to go through extra security checks.

As with all payments, please check the bank details you are paying to are genuine and correct before making the payment.

Savings Account Payments

If you want to make a payment for more than £20,000 you will need to request a temporary limit increase and wait a minimum of four hours before you can make the payment. You can set the temporary limit increase for up to seven days and the maximum you can pay is up to £2 million per day. Payments over £100,000 in one day will have to be made as a CHAPS payment with a fee of £20.

If you are paying more than £20,000 in one go from your Savings Account to your Personal Current Account, to then make a CHAPS payment of over £20,000 to another bank account, you will need to increase the payment limit on both of your accounts.

How to make the temporary payment limit increase

You will be able to make the temporary limit increase in the Triodos Mobile Banking App or via Internet Banking.

In the Mobile App go to ‘More’ then ‘Account Settings’ and select the account you wish to apply the temporary change to. From there, choose ‘Daily limit per transaction’ and fill in the temporary change with the amount and for how long you’d like this temporary change to be available.

In Internet Banking go to ‘Self Service’, ‘Account Settings’, ‘Daily Limit’, here you can request the temporary payment limit change.

Once you’ve submitted the request you’ll need to wait four hours before it goes live, we’ll send you an email confirmation once it has.

The Triodos Mobile Banking App and Mobile Secure Key are available to all personal customers. It’s not currently available for business accounts.

Bank impersonation fraud is when a fraudster impersonates someone from the bank in order to trick a victim into making payments to a fraudulent account.

What a fraudster might do:

• A fraudster usually calls their victim, though may use email or another contact method. It’s likely they already know information about the victim, including their name and who they bank with.
• While impersonating the bank staff member, the fraudster might tell the victim their account is under threat and they need to make payments to a “safe account” or set up payments in order to “block the funds”.
• The fraudster might ask for details from the Digipass so they can access the account and make payments to the fraudulent account themselves.
• The fraudster might ask the victim to download screen sharing software so they can view or control the victim’s computer. This can make it easier to take control of the account.
• In any scenario, the fraudster will foster a feeling of panic in order to get the victim to comply with their requests as quickly as possible.
• Fraudsters might also impersonate other well-known, trusted companies such as Microsoft, Apple, BT or HMRC.

What Triodos Bank will never do

• We’ll never call you to tell you to log into internet banking or to make a payment to a “safe account”. If we believe your account to be under threat, we can block the account ourselves and do not need you to do anything from your end.
• We’ll never ask you for your full Digipass number or your Digipass PIN.
• We’ll never ask you to download any software onto your PC or mobile phone.

What you can do to protect yourself

• Never give out your personal details to someone who has called you unexpectedly.
• Never download any software onto your PC or mobile phone when asked by someone over the phone or by email – even if you think you are speaking to a trusted organisation.
• Never give anyone your Digipass number or your Digipass PIN. Triodos will never ask for this information.
• Do not let someone else use your Digipass – even a colleague or family member. Your Digipass is assigned to you as an individual and must only be used by yourself. If you leave your place of work, please let us know and we can arrange for your Digipass to be cancelled.
• If you are unsure about someone who has called you claiming to be from the bank or another company, hang up and call back on the company’s published telephone number.

Do not respond to any email that asks you for information about your internet banking log in details. If you have received a suspicious email, do not respond and call our Contact Team as soon as you can during our opening hours on 0330 355 0355 to check if it is a genuine email.

Our opening hours are published on our help and support page.

Vishing is where a fraudster uses voice messages or phone calls to try to steal identities, and financial information like your PIN, card details and Digipass code.

The term comes from the combination of ‘phishing’ and ‘voice’. Phishing is where fraudsters use email, regular phone calls and fake websites to dupe people into giving them personal details and financial information.

Vishing is specifically the use of a VOIP service (Voice Over Internet Protocol, or an internet phone service), which enables fraudsters to communicate with their potential victims via automated voice messages and the phone keypad.

Vishers can create fake caller ID profiles so that their phone number seems legitimate, and vishing requests sound urgent, to panic the victim into acting without thinking.

 Examples of vishing:

• Your bank account has been compromised
  You receive call from what appears to be Triodos Bank’s phone number. When you answer, you hear a recording pretending to be from Triodos, saying that your bank account has been compromised, and you need to call a freephone number to reset your security details. Calling this number, you would hear another automated message asking for your bank account number, Digipass code or other personal details via the phone keypad.
• You’re eligible for a loan
  You are offered loan or credit terms too good to be true (they probably are), and to receive the money, you just need to pay an upfront fee or provide your security details.
• You’re due a refund
  You receive a message that says you are due a refund. This is usually someone claiming to be from a trusted organisation. If you opt in – usually by pressing a number on your telephone - you will be redirected to a call centre agent who will attempt to defraud you or steal your information.
• Don’t miss this investment opportunity
  An automated voice message tells you about an investment opportunity too good to turn down. You’ll be encouraged to transfer money to invest in a company or service that doesn’t exist.
• You’ve won a prize
  Victims hear an automated voice message about a free offer or prize, and just need to pay postage, redemption or admin fees to claim. There’s often a deadline to hurry people into handing over their card details.

What you can do

If you receive an unexpected phone call with an automated response, hang up, search for the company’s genuine contact details online and check whether the call was legitimate. If it was, the company will be able to help you, and if it was a vishing attempt, letting the company know enables them to take action, and you will have protected yourself from fraud.

If the call relates to an investment opportunity, check the FCA register to see if the investor is regulated, and confirm the company exists by checking Companies House.

How to report a vishing scam

If you think you have been a victim of a vishing attack, call us immediately on 0330 355 0355. Then report to the FCA using their reporting form.

If you have lost money to suspected investment fraud, report it to Action Fraud on 0300 123 2040.