Cyber security, scams and fraud
At HUB24, protecting your personal information, accounts and online access is a priority. Learn practical tips to help protect yourself and understand how HUB24 is working to protect yourself from financial scams.
Report a scam
If you suspect you’ve been targeted by a scam, it’s important to act quickly.
Do not respond to the scam message, and hang up from suspicious calls
Change your password in InvestorHub
Contact HUB24 immediately
During Business Hours:
Mon to Fri: 8.00am – 7.00pm AET Call our Client Services Team
Advisers: 1300 854 994
Investors: 1300 508 797
International calls: +61 2 4058 4770
After you have reported a scam
Once a suspected scam has been reported, the HUB24 Client Services Team will assess the situation, take the most appropriate actions and will keep you updated. Calling our Client Services Team during business hours is the fastest way to take action.
What you can do next
Report it to warn others:
Report investment scams to the Australian Securities & Investments Commission (ASIC)
Report any scam to the scamwatch.gov.au
Protect your identity
If you’re concerned your identity may be at risk, these services can help you take action:
Contact IDCARE on 1800 595 160. IDCARE is a free, government-funded service that provides confidential support and guidance to people affected by identity crime.
Be alert to follow-up scams
Scammers often re‑contact victims with offers to recover lost money or return funds for a fee. These requests are a warning sign. Stop and check before taking action.
Common scams to watch out for
Scammers often create messages that appear genuine or urgent to pressure you into acting quickly without checking first. Common examples are:
Impersonation scams
Someone pretending to be from a bank, financial institution or trusted organisation
Phishing emails or messages
Emails, texts or messages encouraging you to click a link or share personal information
Urgent requests
Messages designed to rush you into acting before you’ve had time to verify them
Requests for security codes or login details
Including one-time passcodes or account information
Scammers may try to impersonate HUB24
If you receive a message claiming to be from HUB24 and you’re unsure whether it’s legitimate, contact your financial adviser or call us directly on 1300 854 994.
If something doesn’t feel right, stop and check before taking action.
How HUB24 helps to protect you
As the number of cyber scams grow and become more sophisticated, HUB24 continues to invest in strong protections to help safeguard your account, your data and your investments.
Advanced security controls across the entire platform
Ongoing monitoring for suspicious activity
Mandatory multi-factor authentication (MFA)
Regular security enhancements
Our cyber security framework
At HUB24, cyber security is a critical component of our governance framework and a key enabler of sustainable business operations. Our approach is aligned with the internationally recognised ISO/IEC 27001 standard and integrated into our broader enterprise risk management practices. It is designed to protect the confidentiality, integrity, and availability of our systems and data, while supporting business growth and resilience.
What you can do
Use strong, unique login passwords and do not reuse the same password across multiple accounts
Never share your login details or codes
Be cautious with unexpected messages. Stop and check before you act.
If in doubt, speak with your adviser or contact HUB24 on 1300 854 994.
Multi-factor authentication (MFA) helps protect your account
Multi-factor authentication (MFA) adds an extra layer of security when you log in. In addition to your password, MFA requires a second step, such as a code from an authenticator app, before access is granted.
Even if someone obtains your password, MFA helps prevent unauthorised access to your account.
Important:
MFA is mandatory for all HUB24 users because it is an effective way to reduce the risk of account compromise.
When MFA is enabled, you must provide the MFA code to:
Verbal Verification and One-Time Passcode
To keep your information secure for phone-based enquiries, our Client Services Team will complete verbal verification and provide you with a One-Time Passcode (OTP) via mobile text message, which you will be required to disclose back to our Client Services Team to confirm your identity. Never share OTP with anyone else.
Click here to learn more about using MFA on HUB24
Useful links to help you stay informed
The following organisations provide trusted guidance on recognising, avoiding and reporting scams:
National Anti-Scam Centre
Information on current scams and how to report them
Australian Cyber Security Centre
Guidance for individuals and families on cyber threats and online safety
ACCC the little book of scams
A comprehensive guide to recognising and avoiding common scams