How we’re protecting your account
Discover how UniSuper is safeguarding your account to reduce the risk of financial crime.
We ask security questions and use multi-factor authentication codes to verify your identity during all member enquiries. Our strict proof of identity measures reduce the risk of unauthorised parties attempting to access your account.
We send SMS and email notifications regarding certain requests on your account. If you receive a notification for a request that you did not make, please contact us.
Our financial crime and cybersecurity teams monitor for threats and may contact you to confirm activity on your account, such as withdrawals or rollovers. We also train our staff to spot suspicious activity and provide support if you're impacted by fraud.
We conduct regular reviews of our processes and internal controls to ensure they are adapted to the current threat environment.
We work with industry partners to combat increased threats of fraud and identity theft in Australia.
We protect your online account with encryption, as well as account and session lockout, to prevent unauthorised access.
We are committed to protecting the privacy and confidentiality of your information. Read our Privacy Policy (PDF, 138 KB) to find out how and why we collect and use personal information.
How you can protect your account
Protect your personal information and reduce the risk of financial crime, such as unauthorised access or fraudulent withdrawals, by following the steps below.
-
1. Check your account details regularly
- Review and set your account security preferences in your online account.
- Use mobile-based multi-factor authentication for added security.
- Check your account balance, transaction and login history regularly. Report anything suspicious to us as soon as possible.
- Keep your contact information updated so we can reach you for unusual activity or to verify requests.
- Always log out of your account when you’re done.
-
2. Optimise your passwords and devices
- Use a strong, unique password for each account and update it every 6 months.
- Never share your password with anyone, even family or friends.
- Avoid storing your passwords in your email account or documents. Instead, consider using a password manager.
- If your device or other accounts are compromised, you can remove devices through your online account.
- Stay secure with a passkey. Passkeys are a secure and convenient way to sign into your account (like a fingerprint, Face ID or PIN). Read more about passkeys.
If you suspect your account is compromised, change your password immediately and call us on 1800 331 685.
-
3. Secure your online browsing
- Avoid using public Wi-Fi networks while making transactions or submitting personal details.
- Log in to your online account from unisuper.com.au or type memberonline.unisuper.com.au into your browser.
- Check that the site is authentic by looking for https:// in the web address and a lock icon at the top or bottom of your browser window.
- Never leave your device unattended while logged in, and don’t grant remote access to unsolicited callers.
- Never ask anyone to contact us on your behalf if you have not provided written authorisation for them to act as a nominated representative – this may delay verification and subject your account to further scrutiny. You can nominate a representative by completing our third-party authority form (PDF, 553 KB).
- Only install apps from official stores like the Apple Store or Google Play, and manage app permissions regularly.
- Protect your device with up-to-date malware software and enable automatic system updates.
-
4. Manage your social profile
- Limit sharing personal details like your birthday, address, and location-based photos, as this information could be used to compromise your identity.
- Be cautious of unexpected social media contacts—scammers may impersonate friends, family, or even government entities such as the police and businesses to gain your trust.
Is it real or a scam?
Scams targeting super accounts are rising in Australia—protect your super by distinguishing real UniSuper messages from scam attempts.
Unlike fraud, which can happen without your knowledge or involvement, scams rely on your participation in giving bad actors your money or personal information.
UniSuper will never:
- ask for your password to your online account
- pressure you to provide your personal information over the phone —if in doubt, hang up and call the number on our website or statements to verify before sharing details
- ask for remote access to your device.
What to do if you suspect fraud or a scam
Forward suspicious emails
Send any unexpected or suspicious looking emails to enquiry@unisuper.com.au.
Change your password
If you think someone has your account password, change it immediately. Let your bank or financial institutions know, so they can help protect you too.
Contact IDCARE
If you are the victim of identity theft, contact IDCARE on 1800 595 160 for help.
IDCARE is the national identity and cyber support service.