In short

Bank account defences — a low daily transfer limit, a trusted contact your bank can call, real-time transaction alerts, and Confirmation of Payee checks — contain the damage if a scam gets past your vigilance. Most are free and take minutes to set up in your banking app. Set them up yourself in a calm moment; never raise a limit or add a contact because a caller asked you to.

Most advice about scams is about *spotting* them — the warning signs, the red flags, the too-good-to-be-true offers. That matters, and our other articles cover it. But there's an uncomfortable truth behind all of it: no amount of vigilance catches every scam, because the modern ones are engineered to fool careful, intelligent people. So the people who stay safest don't just rely on spotting the con — they also set up a second line of defence, so that even if something gets through, it can't do much damage. That second line is your bank account itself, and the protections involved are mostly free, take minutes to switch on, and then sit quietly in the background doing their job. Here's how to build it. This article is general information only, not personal advice.

What is the idea — limit how much can move, how fast, and to whom?

Every account-level defence comes back to one principle. You can't guarantee you'll never be fooled — but you can make sure that if you are, the money can't drain out quickly or completely. Limit how much can move, how fast, and to whom, and give your bank a way to reach someone if things look wrong. Do that, and a scam that would have been a catastrophe becomes, at worst, a scare. ASIC's MoneySmart makes the same point in its banking-security guidance: the practical steps you take on your own account are what contain a loss when awareness alone isn't enough (ASIC MoneySmart, https://moneysmart.gov.au/banking).

What settings should you switch on yourself?

Most of these live in your banking app, or can be set up with a quick call or a branch visit. The single most powerful one is your daily transfer limit. Banks let you set the maximum you can transfer online in a day, and most people leave it far higher than they will ever need. Set it low. Then, if a scammer talks you into a payment — or you act in a panicked moment — only a small amount can move before you catch it. When you genuinely need to send more, raise the limit temporarily and put it straight back down afterwards.

The next is a trusted contact. Many banks now let you name a person they can contact if they are worried about unusual activity or your wellbeing — importantly, without giving that person any access to your money. It is simply a phone number the bank can call to say "something looks off." For anyone living alone, it is a quiet and powerful safety net. Alongside it, take payee name-checks seriously. Under the banking industry's Confirmation of Payee service, rolled out across Australian banks from July 2025, your bank checks the account name you are paying against the details you have typed and warns you before the payment goes through if they do not match — returning a "match," "close match" or "no match" result (Australian Banking Association, https://www.ausbanking.org.au/scam-safe-accord/confirmation-of-payee/). It is a strong defence against fake-invoice and impersonation scams, but only if you stop and read the warning instead of clicking past it. Treat a name mismatch as a reason to pause and verify.

A few more take minutes each. Turn on real-time transaction alerts to your phone, so an unauthorised payment is spotted in minutes rather than discovered on next month's statement — and speed, as we will see, is everything. Keep the bulk of your money in an account with no linked card and no quick online transfer, holding only a working balance in your everyday account, so that if the everyday account is ever compromised the damage is contained to what is in it. And use your card controls: your app almost certainly lets you freeze a card instantly and switch off things you do not need, like overseas or online transactions — turn off what you are not using, and switch it on only when you are (ASIC MoneySmart, https://moneysmart.gov.au/banking).

What does your bank now owe you?

The rules have been shifting in customers' favour, and it helps to know it. Under an industry commitment known as the Scam-Safe Accord, Australia's banks — major, regional and customer-owned — have agreed to stronger anti-scam measures, and pooled around $100 million to build the national Confirmation of Payee platform that underpins the payee name-checks described above (Australian Banking Association, https://www.ausbanking.org.au/scam-safe-accord/). Alongside it, the Scams Prevention Framework — passed by Parliament in February 2025 as what the regulator called "world-first scams prevention laws" — places legal obligations on banks, telcos and digital platforms (including social media) to prevent, detect, report, disrupt and respond to scams, with the Australian Securities and Investments Commission (ASIC) as the regulator for the banking code and access to external dispute resolution through the Australian Financial Complaints Authority (ACCC, https://www.accc.gov.au/media-release/accc-welcomes-passage-of-world-first-scams-prevention-laws; Treasury, https://treasury.gov.au/publication/p2025-623966). That is genuine progress — but don't mistake it for a guarantee. There is no automatic right to a refund for every scam loss, and the improving framework is no substitute for the account defences above.

The one thing that consistently makes the biggest difference is speed. If something feels wrong — a payment you are unsure about, a call that has rattled you, a transaction you don't recognise — contact your bank immediately, on its official number or 24/7 scam line, and report it to Scamwatch (Scamwatch, https://www.scamwatch.gov.au/protect-yourself). The sooner a bank knows, the better the chance of stopping or clawing back a transfer. Our companion piece on recovering after a scam walks through the steps in detail.

Is there a bonus — protection against more than criminals?

Here's a quiet benefit worth naming. These same defences protect against ordinary error and against the possibility of cognitive decline later in life, not just against fraudsters. A low transfer limit, a trusted contact, and alerts that reach a family member form a gentle safety net if judgement ever slips — and they sit naturally alongside an enduring power of attorney, which our separate articles cover. Setting them up while you're well is a kindness to your future self.

What do the worked examples show?

These show the defences doing their job — one containing a scam that got through, one refusing to be dismantled. They are illustrative only, not personal advice, and the figures are illustrative.

Consider Margaret, 72, a single retiree living alone, who months ago set her daily online transfer limit to $1,000, turned on phone alerts, and keeps most of her savings in a separate account with no card and no quick transfer. A convincing "bank security" caller panics her into moving money to a "safe account." On these facts the account defences turn a potential catastrophe into a scare: only $1,000 can leave her everyday account that day, her phone alert flags the transfer within minutes so she rings the real bank straight away, and the bulk of her savings — sitting in the account with no quick transfer — never comes into reach at all (ASIC MoneySmart, https://moneysmart.gov.au/banking). On these facts it is generally rational, for anyone in Margaret's position, to keep the everyday limit low, the savings separated, and the alerts on, precisely because they contain the damage on the day awareness fails.

Now consider Robert and Helen, both 70, who get a call from someone claiming to be from their bank's "fraud team," urgently instructing them to raise their transfer limit and add a new trusted contact "so we can protect your account." On these facts the call is the attack, not the protection: a genuine bank never phones to ask you to lower your own defences, and talking you into raising a limit or granting access is exactly how a scammer gets around them. On these facts it is generally rational for Robert and Helen to hang up, ring the bank back on the number printed on their card, and make any real changes themselves in a calm moment through the app or a branch — never at the direction of someone who phoned them (Scamwatch, https://www.scamwatch.gov.au/protect-yourself).

What is the one rule that ties it together?

Finally, the rule that keeps all of this safe: set these protections up yourself, through your official banking app, website, or a branch — and never raise a limit, grant someone access, or add a trusted contact because someone who phoned you asked you to. That reversal is itself a classic scam move: the criminal's whole aim is to get around your defences, and talking you into lowering them is the easiest way to do it. Genuine defences are ones you put up in a calm moment, on your own initiative. Spend twenty minutes doing exactly that, and you'll have turned your bank account from a soft target into a hard one — which, in a world of flawless fakes, is one of the smartest hours of housekeeping a retiree can do.

Sources

Key takeaways

  • No amount of vigilance catches every scam — the second line of defence is your bank account itself, limiting how much can move, how fast, and to whom.
  • Setting a low daily transfer limit means even if a scammer talks you into a payment, only a small amount can move before you catch it.
  • A trusted contact lets your bank call someone if activity looks unusual, without giving that person any access to your money — a quiet safety net, especially for anyone living alone.
  • Confirmation of Payee, rolled out across Australian banks from July 2025, checks the account name against what you've typed and warns you before a payment goes through if they don't match.
  • Set these protections up yourself, in a calm moment, through your official banking app or a branch — never because someone who phoned you asked you to raise a limit or add a contact.

Frequently asked questions

What is a daily transfer limit and how does it protect against scams?

It's the maximum amount you can transfer online in a day, set in your banking app. Most people leave it far higher than they'll ever need. Setting it low means that even if a scammer talks you into a payment, only a small amount can move before you catch it — you can temporarily raise it when you genuinely need to send more.

What is a trusted contact on a bank account?

It's a person your bank can contact if they're worried about unusual activity or your wellbeing — without giving that person any access to your money. It's simply a phone number the bank can call to flag that something looks off, which is a valuable safety net for anyone living alone.

What is Confirmation of Payee?

It's a banking industry service, rolled out across Australian banks from July 2025, that checks the account name you're paying against the details you've typed and warns you before the payment goes through if they don't match — returning a "match," "close match," or "no match" result. It's a strong defence against fake-invoice and impersonation scams, but only works if you stop and read the warning.

Should I change my bank account settings if someone calls asking me to?

No. A genuine bank never phones to ask you to raise your transfer limit, add a trusted contact, or otherwise lower your own defences — that's exactly how a scammer gets around them. Set these protections up yourself, in a calm moment, through your official banking app or a branch, and hang up on anyone who calls asking you to change them.

A note on advice. This article is general information only and doesn't account for your personal circumstances. Everyone's situation is different — before acting, it's worth talking it through with a licensed adviser who knows your full picture.