Helping to protect your super from online fraud and scams

Super scams can take many forms. In some cases, scammers may try to trick you into giving up your sensitive data and information. In others, pushy sales tactics or exaggerated promises might be used to pressure you into transferring your super into high-risk or unregulated investments. It’s important to be aware of these tactics, and the red flags to watch for when making any decisions about your super. 

Scammers typically try to illegally access super in two main ways: through self-managed super funds, known as SMSFs, and through the process of claimingthe early release of super. 

Hostplus has many lines of defence against scammers and fraudulent activity. Here are some tips to help protect yourself from potential fraud: 

• Stay vigilant. Remain alert to increased scam activity, especially email, SMS and telephone phishing scams. These are fraudulent communications that appear to come from an organisation you trust, including Hostplus.  
• Protect your credentials. Always keep your security codes, PINs and passwords private. Store them only in a reputable password manager. At Hostplus, we would never ask you to share your password or OTP with us. 
• Be wary of unsolicited offers to transfer your super or access it early. If it sounds too good to be true, it probably is. 
• Do not provide remote access to your computer or device to unknown third parties. They may use this access to try to steal your information. 
• Be cautious of unexpected emails and texts. Hover over links to check for misspelled web domain names and unusual sender email addresses. They can contain links that can damage your security. Official Hostplus emails come from addresses ending with hostplusmail.com.au or hostplus.com.au (for example, noreply@email.hostplus.com.au). 
• Report suspicious activity. If you detect suspicious activity or receive OTPs you didn’t initiate, notify the provider sending them, as this may indicate someone is trying to access your account with your password. 
• Use strong passphrases. Opt for unique, long (15+ characters) and unpredictable passphrases instead of passwords. Enable MFA on all online accounts where possible. More information about using MFA and passphrases can be found in the Australian Cyber Security Centre guidelines here. 
• Maintain security software. Ensure any device you use to access your online accounts has up-to-date anti-virus or similar security protections.  
• Keep your systems updated. Regularly apply software and operating system updates on your devices. 
• Monitor your account. Stay up to date about your Hostplus account by downloading the Hostplus mobile app and enabling mobile app and email notifications. Read all correspondence from Hostplus, including notification alerts and your annual statement.