Two-step verification
Every sign-in requires a code from your phone. Your password alone is never enough.
Security centre
Security you can
Security you can
see and trust.
Practical protections: strong authentication, session control, and careful verification. And clear guidance on what we'll never ask you for — so you can spot fraud the moment it appears.
PROTECTED 24/7
2FA · Session control · Fraud alerts
The most important thing on this page
We will never
We will never
ask you for:
Whatever the caller claims, whatever the email says, whatever the letter looks like — if someone asks for any of these, it isn't us.
Report it →Your password
Not by phone, not by email, not by text. Ever.
Your full card number
The last 4 digits, yes. The full 16, no.
A one-time code
Anyone who asks for the code from your phone is a fraudster.
Money moved to a "safe account"
There is no such thing. This is the classic fraud script.
Remote access to your device
We will never ask you to install an app to "verify" your account.
What we do
The protections
The protections
built in.
Every session, every transaction, every login — designed so that a stolen password isn't enough.
Session timeout
Idle sessions log out automatically. If you walk away, the screen locks.
Real-time alerts
A push notification for every transaction. If it isn't you, you know instantly.
Device management
See every device signed into your account. Revoke any you don't recognise.
Login history
A log of every sign-in — time, device, and location — visible in your account.
Encrypted end-to-end
All traffic between your device and our servers is encrypted with modern TLS.
Spotting fraud
Three signs
Three signs
something's wrong.
Fraud usually follows a pattern. If you see any of these, stop, hang up, and call us on the number on the back of your card.
-
01
Urgency
"Act now or your account will be frozen." Real banks don't rush you. Fraudsters do.
-
02
Secrecy
"Don't tell anyone, even the bank staff." If someone asks you to keep a secret, that's the tell.
-
03
New details
"Use this new sort code, this new account number, this new payee." Real banks don't change details by phone.
If it's happening now
Call us.
Call us.
Immediately.
Our fraud team is available 24/7. If you think your account has been compromised, call now — don't wait.
Learn more
Explore other
Explore other
sections.
Personal banking, business banking, or talk to a person.