NAB Connect Security: Controls That Matter for Business Payments
NAB Connect security is strongest when technical authentication is combined with business-process controls. Tokens and passwords protect access; payment limits, dual control and segregation of duties reduce what one compromised user can do.
NabConn never asks for NAB Connect credentials
Use an official NAB-operated service for account authentication. Do not send NabConn your NAB Connect User ID, password, PIN, token code, one-time passcode, full card details or online-banking credentials.
Payment Limits and Breach Approval
NAB lets eligible administrators or Authorising Users define an overall daily payment limit and, where appropriate, limits for payment types. A payment that breaches the configured limit needs additional approval before normal authorisation.
Digital Signing for High-Value Payments
NAB’s security material states that payments over $500,000 require additional authorisation steps including a digital signature. This should be treated as one layer of control, not a substitute for verifying the beneficiary.
Segregation of Duties and Dual Administration
Segregation of duties can require transactions to be created and approved by different people. Dual administration can reduce the risk of a single administrator making sensitive changes alone.
Security Devices
Eligible Authorising Users and Administrators can use mobile or physical tokens to generate one-time passcodes. Those codes should remain private and should not be disclosed to NabConn or an unsolicited caller.
Primary Sources Used for This Guide
Product terms can change. These sources are included so readers can verify current information directly before making an important financial or security decision.