Keeping your accounts safe online

Here's how we're protecting you and your accounts from fraud.

Looking after your money

Did you know our fraud prevention team and technology work behind the scenes to keep your accounts secure? Protecting your money from fraud is really important to us. Our aim is to prevent fraud from happening in the first place but, if it does, we’ll support you to get your money back with our claims process.

    • We carry out a range of fraud-prevention checks to make sure all new account applications are genuine. We do this to make sure that those who apply for a Tesco Bank account are who they say they are.We carry out a range of fraud-prevention checks to make sure all new account applications are genuine. We do this to make sure that those who apply for a Tesco Bank account are who they say they are.
    • If we suspect unusual activity on your account, we’ll stop the transaction and let you know we think you’re at risk of fraud. We’ll never send an alert that requests your security details.If we suspect unusual activity on your account, we’ll stop the transaction and let you know we think you’re at risk of fraud. We’ll never send an alert that requests your security details.
    • If we identify fraud stemming from phishing email scams, we work to close down the phishing websites as soon as possible.If we identify fraud stemming from phishing email scams, we work to close down the phishing websites as soon as possible.
    • We use the latest technology to manage the security of our Online Banking and Mobile Banking App.We use the latest technology to manage the security of our Online Banking and Mobile Banking App.
    • We use enhanced security when you register and log into Online Banking or our Mobile Banking App.We use enhanced security when you register and log into Online Banking or our Mobile Banking App.

    How we'll contact you

    • If we suspect you may be a victim of fraud, we’ll be in touch right away.If we suspect you may be a victim of fraud, we’ll be in touch right away.
    • We send alerts by text message or through push notifications on the Mobile Banking App.We send alerts by text message or through push notifications on the Mobile Banking App.
    • We’ll send alerts if we think your account is at risk of fraud, or if certain things happen – like a change of address.We’ll send alerts if we think your account is at risk of fraud, or if certain things happen – like a change of address.
    • At other times, we might contact you about your account(s) for other reasons.At other times, we might contact you about your account(s) for other reasons.
    • We may send you reminders, for example, when your statement is available to view online.We may send you reminders, for example, when your statement is available to view online.
    • We’ll never send an alert that requests your security details.We’ll never send an alert that requests your security details.
    • When you pay for something on a website or app, occasionally you'll be asked to authorise your payment in the Tesco Bank Mobile App. If you don't have the Mobile Banking App we may send you a text if you are trying to pay online with your debit or credit card. This will contain a one-time passcode, so we can tell it’s you making the payment. Don’t share this passcode with anyone else and Tesco Bank will never call to ask you for this.When you pay for something on a website or app, occasionally you'll be asked to authorise your payment in the Tesco Bank Mobile App. If you don't have the Mobile Banking App we may send you a text if you are trying to pay online with your debit or credit card. This will contain a one-time passcode, so we can tell it’s you making the payment. Don’t share this passcode with anyone else and Tesco Bank will never call to ask you for this.

    If you’re ever unsure about alerts you receive about your accounts, contact us straight away. To protect your account(s), always keep your contact details up to date. You can do this using Online Banking.

        Strong Customer Authentication (SCA)

        We use Strong Customer Authentication (SCA) to increase your protection from fraud when accessing your accounts online or via the Mobile App, paying for things online or using contactless payments.

          • If you have our Mobile Banking App, we may send a push notification to your device asking you to approve the payment.If you have our Mobile Banking App, we may send a push notification to your device asking you to approve the payment.
          • When you pay for something online, we may send a code to your mobile or landline to check it’s really you. Find out more about one-time passcodes.When you pay for something online, we may send a code to your mobile or landline to check it’s really you. Find out more about one-time passcodes.
          • If you make contactless payments, we may ask you to input your PIN from time to time. This doesn’t apply to travel, so this won’t affect your regular contactless payments for the bus, train or tube.If you make contactless payments, we may ask you to input your PIN from time to time. This doesn’t apply to travel, so this won’t affect your regular contactless payments for the bus, train or tube.
          • We may ask you to confirm it’s really you in our Mobile App or Online Banking more often under SCA rules.We may ask you to confirm it’s really you in our Mobile App or Online Banking more often under SCA rules.
          • Some kinds of transactions are exempt from SCA protection, so you won’t always be asked to complete extra security steps.Some kinds of transactions are exempt from SCA protection, so you won’t always be asked to complete extra security steps.

          Remember:

          Banks and other genuine organisations will never contact you out of the blue to ask you for payments or to give your full security details. Read more about when it pays to stop and think at  Take Five to Stop Fraud.

              Using Third Party Providers (TPPs)

              • If you have a Credit Card, Clubcard Pay+, Internet Saver or Instant Access Cash ISA account with us, you may choose to use authorised Third Party Providers (TPPs). With your permission, they can provide account management or payment services.If you have a Credit Card, Clubcard Pay+, Internet Saver or Instant Access Cash ISA account with us, you may choose to use authorised Third Party Providers (TPPs). With your permission, they can provide account management or payment services.
              • If you wish to use these services, you’ll need to give permission for the TPP to access your account. With Open Banking using TPPs, you can use your Online Banking login to give a TPP permission to access one or more of your accounts. You can control exactly what information they can see. Remember, if you don't want to use third party providers, you don’t have to and if you don’t want TPPs to access your account, you don’t need to do anything.If you wish to use these services, you’ll need to give permission for the TPP to access your account. With Open Banking using TPPs, you can use your Online Banking login to give a TPP permission to access one or more of your accounts. You can control exactly what information they can see. Remember, if you don't want to use third-party providers, you don’t have to and if you don’t want TPPs to access your account, you don’t need to do anything.

              Think you might be a victim of a scam or fraud?

              Keep your money and data safe with help from our guides

              How to protect yourself from fraud

                Your online shopping safety checklist

                  How we protect your online purchases

                    How we protect you - APP fraud