Living Well at Home UKClear, practical guidance for later life
Online safety

By Does Your Duck Quack

Online banking safely: logins, payments and trusted help

Online banking safely: protect logins, spot fake messages, check payment details, arrange trusted help formally, and act quickly if something goes wrong.

Checked: 5 October 2026 · Next review: 5 April 2027 · Applies to: UK, with nation notes
How this guide was prepared

Purpose: how to guidance · Level: detailed

Checked by: Does Your Duck Quack. Sources are linked below; seek professional advice for individual circumstances.

The short answer

What to do first

Online banking safely: protect logins, spot fake messages, check payment details, arrange trusted help formally, and act quickly if something goes wrong.

Start here: Use the bank’s official app or type its known address. Keep the device updated and screen-locked; avoid a device someone else controls. If you need setup help, contact the bank using a known number or official branch, not an unexpected link or caller.

Visual guides

See the decision at a glance

Strong-password guide
  1. Make it uniqueUse a different password for email, banking and other important accounts.
  2. Make it strongUse three random words or a password manager’s generated password; avoid personal details.
  3. Add protectionTurn on two-step verification where offered and never share verification codes.

Scope of this guide

This guide helps you understand the options and questions to ask. It is not personal medical, legal or financial advice. Check the official sources for your nation and seek qualified help for high-stakes decisions.

Who this guide is for

People starting or using online banking, and relatives who want to support payments without taking over or sharing private logins.

Online banking can make it easier to check balances and pay bills, but criminals may target a banking login or the email account used to reset it. Set up access through the bank’s official app or a typed web address. A helper should not sign in as the account holder or learn security details. Ask the bank how it can record authorised support while protecting the person’s choice and privacy.

Practical steps

1. Set up access on a device you trust

Use the bank’s official app or type its known address. Keep the device updated and screen-locked; avoid a device someone else controls. If you need setup help, contact the bank using a known number or official branch, not an unexpected link or caller.

2. Use strong sign-in security

Use a unique password and enable two-step verification where available. Never share a full password, PIN or one-time code, even with someone claiming to be staff. Refuse remote-access requests or instructions to move money to a “safe account”; stop and verify independently.

3. Check messages and payments carefully

Treat unexpected messages about locked accounts, refunds or suspicious transfers as untrusted. Do not use their links or phone numbers. Check Confirmation of Payee when adding or changing a payee, and pause if names do not match. Recheck the amount and destination before confirming.

4. Arrange help without sharing a login

For help with bills or statements, ask the bank about a third-party mandate, accessible support or power-of-attorney process. The route depends on the person’s wishes and circumstances. Do not share passwords, PINs, codes or a bank card; keep the account holder involved where possible.

5. Act immediately if access or money is at risk

If you shared a code or suspect fraud, contact the bank immediately through a trusted number or 159, which connects callers to most participating banks. Ask it to secure access and investigate payments. Preserve messages. Report suspected fraud through Report Fraud, or Police Scotland in Scotland.

Questions and checks

Common questions

Is 159 a safe number to call about a banking scam?

MoneyHelper says 159 connects callers to most UK banks. If you cannot connect, use the number on your card or a recent statement. Do not use a number given by the person who contacted you, and end a suspicious call before looking up contact details.

Should I let a family member use my online banking password?

No. Sharing a password, PIN or code weakens safeguards and can expose both people to risk. Ask the bank about a third-party mandate, accessible support or power-of-attorney registration. The right option depends on the person’s wishes and authority. Helpers should use only formally approved access.

What is Confirmation of Payee?

Confirmation of Payee compares the payee name you enter with the name linked to the account details and may show a match, close match or no match. Pause if details do not match and verify with the intended recipient independently. It helps reduce errors and some scams but does not prove a payment is safe.

What should I do if I gave a scammer a banking code?

Call the bank immediately using a trusted number or 159, explain what was shared and follow its steps to secure the account. Report unfamiliar or pending payments. Change reused passwords from a safe device, preserve messages and report suspected fraud to the correct police service. Ignore paid recovery offers.

Differences across the UK

The same safety steps apply across the UK, though power-of-attorney and bank access arrangements differ by nation. Ask the bank for formal authority rather than sharing a login. Use Report Fraud in England, Wales and Northern Ireland, and Police Scotland in Scotland. Contact the bank through a trusted number wherever you are.

Primary sources

The publisher checked this guide against the 9 official sources below. This is an editorial source check, not approval by a clinician, lawyer or benefits adviser.

Editorial note: By Does Your Duck Quack.