Suncorp Bank App Terms and Conditions

Notice of Changes to Terms and Conditions

Effective 11 December 2024

We have amended clause 8 (Privacy) of these Suncorp Bank App Terms and Conditions to explain how we help detect and prevent against potential cases of fraud, scams, unauthorised use and criminal activity and to minimise security risks. In summary, the changes are to:

• clarify how we may monitor, collect, use and disclose your information when you use mobile banking on any device (deleted clause 8.8 and amended clause 8.7);
• include that we may disclose your information to, and collect it from, other financial institutions (amended clause 8.7); and 
• clarify that your location information may be shared with our third party contractors (amended clause 8.5).

We have also amended clause 26.1 to replace “EFTPOS” with “eftpos”.

1. Introduction

1.1 The Suncorp Bank App is an application designed for compatible iPhone and Android devices. The App provides access to products and services offered by Suncorp Bank, its Related Entities and Third Parties.

1.2 Your use of the App is subject to these Terms and Conditions. Please do not download or use the App unless you have read and understood these Suncorp Bank App Terms and Conditions.

1.3 References to “you” and “yours” is a reference to a person using the App.

1.4 In these Terms and Conditions a reference to the singular include the plural and vice versa.

1.5 In these Terms and Conditions words that are capitalised have the meanings as defined throughout the Terms, and otherwise have the following meanings:

• “App” means the Suncorp Bank App.
• An “Account” includes any of the following accounts with Suncorp Bank.
  • a savings account
  • term deposit
  • a Card account
  • an account which has a facility limit
  • a loan account
  • another account which we allow you to withdraw and deposit money
  • a lease
  • an equipment finance facility
  • a guarantee facility
  • a buy now pay later account 
• "ADI" has the same meaning as authorised deposit-taking institution in the Banking Act 1959 (Cth) or any successor term adopted by the Australian Prudential Regulation Authority.
• “ANZ” means Australia and New Zealand Banking Group Limited.
• “ANZ Group” means ANZ and its related bodies corporate, including Suncorp Bank and its Subsidiaries unless the context requires (each an “ANZ Group member”).
• “App Content” means the content available in the App including product and services information, advice, advertising, text and graphics.
• "Basic Single Credit Transfer" means a credit payment message, other than an Osko® payment, another type of overlay service payment or an international funds transfer instructions payment, sent by a New Payments Platform participant via the NPP basic infrastructure for the benefit of a payee with another NPP participant.
• "Business Day" means a day which is Monday to Friday excluding national public holidays.
• "Card" means the Card we give you to use with or without your PIN at an electronic terminal and includes any debit or credit Card we give you.
• "Code" means any industry Code of practice that we adopt or subscribe to that applies to us, an Account or a Transaction (for example, this currently includes but is not limited to the ePayments Code and the Banking Code of Practice).
• “Consumer Data Right (Open Banking)” means the government regime which allows bank customers to access and share selected bank data for specific purposes with selected accredited organisations.
• “Customer ID” means the secret number we give you that you are required to enter electronically in order to use Internet Banking.
• "Device" means a device given by us to you that is used to perform an ePayments Transaction. Examples include:
  • ATM or transaction card,
  • debit card or credit card,
  • prepaid card (including gift card),
  • Security Token.
• "ePayments Code" means the ePayments Code issued by Australian Securities & Investments Commission.
• "ePayments Transaction" has the meaning provided for in clause 20.
• "Identifier" means information that you know and must provide to perform an ePayments Transaction but which you are not required to keep secret (for example, an account number or PayID).
• "Internet Banking" means the service provided for our customers to manage their banking online.
• “Internet Banking Password” means the password chosen by you to access your Internet Banking.
• "Legitimate Interests" means:
  • our legitimate funding (including securitisation), business risk management, prudential or security requirements; and/or
  • any other requirements that are reasonably necessary to protect us against a material risk of our own financial detriment.
• “Merchant” means a business that accepts payment for goods and services through electronic banking or use of a card, or with which you have established, or would like to establish, a PayTo Agreement.
• "Mistaken Internet Payment" means a payment using a ‘pay anyone' internet banking facility (for example, an external funds transfer) processed by an ADI, where funds are paid into the account of an Unintended Recipient because the transferor entered or selected a BSB number and/or Identifier that does not belong to the named and/or intended recipient as a result of:
  •  the transferor's error, or
  • the transferor being advised of the wrong BSB number and/or Identifier.
• It does not include payments made using BPAY or the PayTo Service.
• The definition of Mistaken Internet Payment is intended to relate to typographical errors only. It is not intended to cover situations in which the user transfers funds to the recipient as a result of a scam.
• “Mobile Device” means an electronic device in which the Suncorp Bank App can be downloaded, and includes smartphones and tablets.
• “Mobile Device Passcode” means anything required to unlock a Mobile Device including a password, passcode, pattern or biometric identifier (where applicable).
• “NPP” or “New Payments Platform” means the New Payments Platform operated by NPP Australia Limited.
• “NPP Payments” means electronic payments cleared and settled by participating financial institutions via the NPP, including Osko payments and Basic Single Credit Transfers and those types of payments where made through the PayTo Service.
• “Osko ”means the Osko payment service provided by BPAY Pty Ltd using the New Payments Platform, which facilitates clearing and settlement of payments between NPP participants on a 24/7 near real-time basis.
• “PayID” means a unique identifier of an account holder which is linked to an account with a financial institution for the purpose of receiving payments made through the NPP or Osko and making payments through the PayTo Service. For the purpose of making a payment to a PayID the supported PayID identifiers include an account holder’s phone number, email address, Organisation ID, Australian Company Number, and Australian Business Number.  For the purpose of creating a PayID the supported PayID identifiers may be different and are set out in the PayID Terms and Conditions for PayIDs created in connection with a Personal Deposit Account via the App.
• “PayID Name” means the name that reasonably represents and identifies an account holder’s real name that can be used to confirm the PayID of the recipient of a payment through the NPP or Osko.
• "PayID Terms and Conditions" means the terms and conditions in relation to the creation and maintenance of your PayID which are provided to you for acceptance before you create your PayID and as amended from time to time. They are also available online at www.suncorpbank.com.au/help-support/documents-forms, from any Suncorp Bank Branch or by phoning 13 11 75.
• "Payment Initiator" means an approved payment service provider who, whether acting on behalf of you or a Merchant, is authorised by you to initiate payments from your Account. 
• "PayTo Agreement" means an agreement established by you and an approved Merchant or Payment Initiator, by which you authorise us to make payments from your Account. 
• "PayTo or PayTo Service" means the service which enables us to process NPP Payments from your Account in accordance with and on the terms set out in a Payment Agreement you have established with a Merchant or Payment Initiator that subscribes to the service. 
• “PIN” means the personal identification number used to transact at ATMs or using EFTPOS.
• "Receiving ADI" means an ADI which is a subscriber to the ePayments Code and whose customer has received an internet payment which you have reported as being a Mistaken Internet Payment.
• "Related Entity” means each ANZ Group member (other than Suncorp Bank). 
• “Security Code” means Suncorp Bank App Passcode, Suncorp Bank App PIN, Customer ID, Security Token Code, Internet Banking Password, PIN, Security Token Code, Mobile Device Passcode, and any biometrics login information.
• “Security Token” means a mobile application issued by Suncorp Bank or its related entity which generates a Security Token Code, available for download under the name “Suncorp Bank Secured”.
• “Sending ADI” means an ADI which is a subscriber to the ePayments Code and whose customer has made an internet payment which has been reported as being a Mistaken Internet Payment.
• “Subsidiaries” are:
  • Suncorp Equipment Finance (Norfina Advances Corporation Pty Ltd (ABN 89 100 845 127))
  • SME Management Pty Limited (ABN 21 084 490 166).
• “Suncorp Bank App Passcode” means the password chosen by you for the Suncorp Bank App.
• “Suncorp Bank App PIN” means the numeric code chosen by you for the Suncorp Bank App.
• "Suncorp Bank" means Norfina Limited ABN 66 010 831 722 AFSL No 229882 Australian Credit Licence number 229882 and its successors and assigns.
• “Suncorp Group” means Suncorp Group Limited (ABN 66 145 290 124) and its subsidiaries and related bodies corporate.
• “Third Party” refers to an entity which is not an ANZ Group member including as listed under clause 5.2 of these Terms and Conditions.
• “Third Party App” means an app owned and operated by a Third Party.
• “Third Party Site” means a website owned and operated by a Third Party.
• "Transaction" means any fees, charges, deposit, withdrawals, credit or debit instructions or advice made from or added to an Account in any way.
• "Unintended Recipient" means the recipient of funds as a result of a Mistaken Internet Payment.
• “Widget” is an extension of an application that can be added to a Mobile Device's home screen as a quick way to access certain information from the App without having to open the App itself.

2. Who operates the Suncorp Bank App?

2.1 Suncorp Bank operates the Suncorp Bank App.  A reference to "we", "us" or "our" is a reference to Suncorp Bank (unless the context otherwise requires).  

2.2 National Australia Bank Limited (ABN 12 004 044 937, AFSL and Australian Credit Licence 230686) (“NAB”) is the credit provider and issuer of Suncorp Bank Clear Options Credit Cards. Suncorp Bank promotes and distributes Suncorp Bank Clear Options Credit Cards on NAB's behalf under an agreement with NAB. NAB has acquired the business relating to this credit from Citigroup Pty Ltd (ABN 88 004 325 080, AFSL and Australian Credit Licence 238098) (“Citi”) and has appointed Citi to assist to administer the Credit Cards. Suncorp Bank will not guarantee or otherwise support NAB's obligations under the contracts or agreements connected with the Credit Cards (other than those relating to Internet Banking and Suncorp Telephone Banking).

2.3 Suncorp Bank and its Subsidiaries were recently acquired by ANZ. Suncorp Bank is no longer owned by Suncorp Group Limited and is no longer part of the group of companies owned by Suncorp Group Limited.

Suncorp Bank will operate as a separate bank to ANZ. Some business support functions and other services may be performed by its Related Entities for Suncorp Bank. 

3. Liability for products and services

3.1 Suncorp Bank and its Related Entities who provide access to their products and services through the Suncorp Bank App (as applicable) are not responsible or liable in respect of products or services provided by each other and do not guarantee the obligations or liabilities of those other entities. Suncorp Bank and its Related Entities are also not responsible or liable in respect of product and services provided by Third Parties (except to the extent that any loss is caused by the fraud, negligence or wilful misconduct of Suncorp Bank or its Related Entities or their officer, employee, contractor or agent).

3.2 Suncorp Bank does not guarantee any product or service provided by its Related Entities and does not assume any obligation or liability for matters including the benefits payable under a product, the repayment of capital or investment performance of any managed investment scheme, or any investor directed portfolio service. Products and services provided by Related Entities will be subject to the terms on which that Related Entity offers those products or services.  Investments in, or contributions to any managed investment schemes or any investor directed portfolio service are not bank deposits or liabilities of Suncorp Bank and are not issued to you by an ADI. These products are subject to investment risk, including possible delays in repayment and loss of income and principal invested.

4. Advice and disclosure

4.1 Unless specifically stated, the Suncorp Bank App does not provide you with financial product advice, financial advice or investment, legal or taxation advice of any kind.

4.2 You should obtain your own advice on any matters before you make a decision about any product or service available or offered by the Suncorp Bank App. This includes any Third Party products and services that may be available via the Suncorp Bank App.

4.3 Where the Suncorp Bank App provides financial product advice, it is general advice only. Suncorp Bank and any relevant Related Entities have not taken into account any of your personal circumstances, objectives, financial situation or needs. Because of that, you should, before acting on the advice, consider the appropriateness of the advice having regard to your personal circumstances, objectives, financial situation and needs.

4.4 You should obtain and consider the relevant Product Information Document (PID), terms and conditions, as well as any other related material for the products and services that are available via the Suncorp Bank App before you make a decision about whether to acquire or continue to hold that product or service.

4.5 For a particular product or service, the relevant PID, terms and conditions and any Target Market Determination can be obtained from the issuer of the product or service.

5. Third Party Providers

5.1 Suncorp Bank and its Related Entities  have relationships with Third Party product and service providers and some of the products and services may be advertised, viewed or accessed through the Suncorp Bank App including links to websites or apps owned and operated by the Third Party.

5.2 These services and products may either be provided under the Suncorp Bank brand or the brand of a Subsidiary or Third Party. Third Parties include:

• National Australia Bank Limited (ABN 12 004 044 937, AFSL and Australian Credit Licence 230686) (“NAB”) is the credit provider and issuer of Suncorp Bank Clear Options Credit Cards. Suncorp Bank promotes and distributes Suncorp Bank Clear Options Credit Cards on NAB's behalf under an agreement with NAB. NAB has acquired the business relating to this credit from Citigroup Pty Ltd (ABN 88 004 325 080, AFSL and Australian Credit Licence 238098) (“Citi”) and has appointed Citi to assist to administer the Credit Cards.
• Apple Pty Ltd ABN 46 002 510 054 and/or its related bodies corporate and affiliates are the operators of the Apple Wallet app. Additional terms and conditions apply to use of the Apple Wallet app.
• Experian Australia Pty Ltd (ABN 95 082 851 474) is the provider of the merchant details and data used in the transaction enrichment feature displayed on eligible Suncorp Bank Accounts and eligible Suncorp Clear Options Credit Card Accounts within the App.
• Ernst & Young Australia ABN 75 288 172 749 is the provider of the Data Sharing Platform EY Fuse for data sharing pursuant to the Consumer Data Right (Open Banking). 
• Connecting Good Pty Ltd (ABN 42 647 475 107) (‘Cogo’) is the provider of the estimated carbon emission data provided within the App to Carbon Insights Account holders.

5.3 App Content may be displayed within the App, it may link to the Suncorp Bank website, or the website of a Related Entity , or it may link Third Party Sites or Third Party Apps. When you follow a link to content not included in the App a separate browser or app will open for you to view this content. This content could be hosted on a Suncorp Bank site, or website of a Related Entity, a Third Party Site or a Third Party App. External websites or apps that are not operated or controlled by Suncorp Bank or its Subsidiaries are subject to the terms and conditions of the content provider.

You may be asked to consent to specific terms and conditions relevant for some App Content. These App Terms should be read subject to any such specific terms where there is inconsistency.

5.4 Suncorp Bank and its Related Entities accept no liability for any content provided by Third Parties, the provision of Third Party services or products accessed through the Suncorp Bank App or your ability to access third party websites or apps through the Suncorp Bank App (except to the extent that any loss is caused by the fraud, negligence or wilful misconduct of Suncorp Bank or any Related Entity or its officer, employee, contractor or agent). Suncorp Bank does not guarantee the products and services available from Third Parties and accessed through the App.

5.5 Third Parties may also collect your personal information. Please refer to clause 8 on Privacy for more details.

6. Access to the Suncorp Bank App

6.1 Registration

6.1.1 To register for the Suncorp Bank App you must hold an eligible Suncorp Bank product. This can be done before downloading the Suncorp Bank App or during the Suncorp Bank App registration. After you have successfully registered, you will need to validate your registered email via the link sent to the nominated address. You are required to notify us of any changes to your email address. 

6.1.2 To register for the Suncorp Bank App you must select a Suncorp Bank App Passcode or use a biometric login if this functionality is available on your Mobile Device.

6.1.3 If you wish to interact with Suncorp Bank products and services, you must register your products and services within the Suncorp Bank App using existing product identifiers or customer identification numbers previously issued to you by Suncorp Bank for the relevant product or service. Following initial registration of products and services, these products and services can be accessed using the Suncorp Bank App Passcode or biometric log in.

6.1.4 Users can register the Suncorp Bank App on additional Mobile Devices following initial registration however you will be required to set up Suncorp Bank App Passcodes or use a biometric login specific to that Mobile Device.

6.1.5 Joint account holders are not permitted to share login credentials. Each joint account holder must register separately for the Suncorp Bank App and establish their own Suncorp Bank App Passcode or biometrics login. During registration, each joint account holder will be required to enter their own internet banking customer identifiers.

6.2 Your Responsibilities for your Security Codes

6.2.1 Security Codes enable access to your financial products and services  via the Suncorp Bank App and must not be disclosed to anyone, including a family member or friend.

6.2.2 You should protect yourself from unauthorised log ins. When choosing your Suncorp Bank App Passcode, it should be at least 7 characters and contain at least 1 number and 1 letter. You should NOT choose a Suncorp Bank App Passcode which incorporates:

1. your date of birth;
2.  your driver's license number;
3. a series of consecutive or the same numbers;
4. the same number as any Mobile Device Passcode;
5. an alphabetical code that is a recognisable part of your name; or
6. your email address;
7. your mother's maiden name; or
8. your child's name.

6.2.3 You can record your Security Codes to help you remember them but they must be reasonably disguised. You should NOT:

• reverse the order of the Security Code;
• say a disguised number is your Security Code;
• disguise your Security Code as a telephone number;
• replace your Security Code with letters (eg. A=1, B=2, C=3);
• write numbers that contain the same sequence of numbers as your Security Code;
• record it on any Mobile Device where it can easily be retrieved;
• keep a record of it in close proximity to where it can be obtained with the access method (for example next to your Mobile Device) unless you make a reasonable attempt to protect the security of the Security Code; or
• keep a written record of all Security Codes required to perform transactions on one or more articles at risk to be lost or stolen simultaneously, without making a reasonable attempt to protect the security of the Security Code(s).

These are only examples. There are other ways that you should not use to disguise Security Codes so as to make your Security Codes obvious to another person.

6.2.4 If you know or suspect that a Security Code is compromised, you are required to tell us quickly and without delay by telephoning our hotline number which is available 24 hours a day on 13 11 75 to unlock the Suncorp Bank App.

6.2.5 You will have three (3) attempts to successfully enter a Suncorp Bank App Passcode after which time the Suncorp Bank App will lock and no access will be available. If you are locked out please call 13 11 75 to unlock the Suncorp Bank App.

6.2.6 The Suncorp Bank App Passcode can be reset at any time within the App by going to the Suncorp Bank App settings function.

6.3 Your Responsibilities for your Security Codes

6.3.1 If you have chosen to use biometrics login, any of the biometrics stored on the Mobile Device will be used as authentication for your engagement with Suncorp Bank App Content for products and services registered within the App. These biometric details include fingerprints and Face ID.

6.3.2 You must not turn on Face ID access to the App if the Face ID stored on the Mobile Device is not the face of the App user. In addition, identical twins (or triplets, etc.) and Suncorp Bank customers under the age of 13 must NOT use the Face ID function, and must use an App Passcode as authentication, to prevent a ‘false match’ and possible unauthorised access to a Mobile Device and App Content. 

6.3.3 You must not turn on Touch ID access to the Suncorp Bank App if the Touch ID stored on your Mobile Device does not belong to the Suncorp Bank App user.

6.3.4 If you allow anyone else’s Face ID and/or Touch ID to be stored on your Mobile Device and allow Face ID and/or Touch ID access to the App in breach of these App Terms, other people will be able to access the Suncorp Bank App Content and you may be held responsible for any losses you suffer as a result.

6.4 Your Responsibilities for your Device

6.4.1 If you suspect, or become aware, that your Mobile Device has been hacked or accessed without your authorisation you must promptly notify us. You can notify us by calling our hotline number which is available 24 hours a day on 13 11 75.

6.4.2 We recommend you setup a Mobile Device Passcode on your Mobile Device itself, in addition to the Suncorp Bank App Passcode to prevent unauthorised access to your Mobile Device.

6.4.3 Mobile Devices logged into the Suncorp Bank App must not be left unattended and you must ensure that you log out of the Suncorp Bank App when not using it and to lock your Mobile Device when it is not in use.

6.4.4 You must only install authorised and authentic applications on your Mobile Device and must not override the software lockdown on your Mobile Device (for example, by ‘obtaining root access’ on an Android device and ‘jailbreaking’ on an Apple device).

7. Restrictions on use of the Suncorp Bank App

7.1 The Suncorp Bank App is provided solely for bona fide customers of Suncorp Bank and Subsidiaries. You agree that you will not, (either yourself or through any third party):

1. use any robot, spider, screen scraper, data aggregation tool or other automatic device or process ("Automated Process") to process, monitor, copy or extract any web pages on any of our Suncorp Bank App, or any of the information, content or data contained within or accessible through our Suncorp Bank App, without prior written permission;
2. use any Automated Process to aggregate or combine information, content or data contained within or accessible through the App with information, content or data accessible via or sourced from any third party;
3. use any information on or accessed through the App for any commercial purpose (including but not limited to market research, the provision of pricing estimates or 'shadow shopping') or otherwise (either directly or indirectly) for profit or gain;
4. use any device, software, process or routine to interfere or attempt to interfere with the proper working of the Suncorp Bank App or any transaction or process being conducted on or through it;
5. take any action that imposes an unreasonable or disproportionately large load on the infrastructure of or bandwidth connecting to our Suncorp Bank App;
6. reverse engineer, reverse assemble, decompile or otherwise attempt to discover source code or other arithmetical formula or processes in respect of the software underlying the infrastructure and processes associated with our Suncorp Bank App or, act fraudulently or maliciously in relation to the App or software; or  
7. copy, reproduce, alter, modify, create derivative works, or publicly display, any part of any content from any of our Suncorp Bank App without our prior written permission.

8. Privacy

8.1 Any personal information you provide within the Suncorp Bank App to Suncorp Bank or its Subsidiaries will be handled according to the:

• Our Privacy Policy, which applies to the activities of Suncorp Bank and its Subsidiaries; and
• where you transact within the Suncorp Bank App and/or acquire a product or service from us, the relevant Privacy Statement for that product or service will apply.

ANZ's Privacy Policy applies to the activities of the ANZ Group (other than Suncorp Bank and its Subsidiaries), including in relation to the ANZ Group’s handling of personal information received under the Privacy Policy applicable to Suncorp Bank and its Subsidiaries.

8.2 The different Suncorp Bank and Subsidiary privacy statements are available on the Suncorp Bank website here. These privacy statements are not available within the Suncorp Bank App.

8.3 Third Parties may also collect your personal information depending on your interaction with them. Third Parties collect your personal information in accordance with their own Privacy Statement which will be available on our or their website or directly from the relevant Third Party. Suncorp Bank and its Related Entities accept no responsibility for the provision of Third Party privacy statements to you through the Suncorp Bank App.

8.4 Data shared and received by Suncorp Bank pursuant to the Consumer Data Right (Open Banking) will be governed by the Privacy Safeguards which are contained in the Competition and Consumer Act. The Privacy Safeguards set out the privacy rights and obligations for users of Open Banking.

8.5 If you grant the Suncorp Bank App permission to use your Mobile Device’s location information or provide your postcode, we will use and/or log this location information. This information may be shared with our Related Entities and third party contractors to be used for security, audit, fraud and logging purposes as well as personalising some Suncorp Bank App functionality and providing you with useful information relevant to your location for example - where you seek location information for the nearest ATM.

8.6 As a way of delivering relevant direct marketing content to you and curating your experience, the Suncorp Bank App utilises information we have about you, for example your product holdings and what you’ve been looking at. For instance, certain ‘articles’ or ‘rewards’ may be suggested based on your information. If you do not wish to receive marketing content curated in this way, you may opt-out of marketing and manage your preferences at the Marketing page in the Settings menu. You can also access this page by selecting the ‘three dots’ on the top right corner of any personalised marketing content in the Suncorp Bank App and selecting the ‘edit’ option. Please note this will not mean that you will cease receiving marketing material within the Suncorp Bank App, it just means any marketing you do receive will not use your information.

8.7 We have detection capabilities and a dedicated financial crimes team who use advanced forms of technology to help protect your personal information and provide a safe banking environment for you. When you use the Suncorp Bank App, we may monitor, collect, use, and disclose (including to and from our third party contractors and other financial institutions) information about you, your device (including the applications installed on your device and your device settings) and how you access, behave on and interact with the Suncorp Bank App and your device (e.g. your typing, swiping and scrolling style). We do this to help detect and prevent against potential cases of fraud, scams, unauthorised use, and criminal activity and to minimise security risks. If any of this information is personal information it will be treated in accordance with our Privacy Policy and Privacy Statements, which can be found on our website at: https://www.suncorpbank.com.au/about-us/legal/privacy.html.

9. Our Data and Cookie Policy

9.1 The Suncorp Bank App uses "cookies" as a fundamental part of their interaction with your internet browser. Cookies enable us to provide you with a superior, customer-oriented service. A "cookie" is a small text file placed on your computer by our web server. A cookie can later be retrieved by our website servers. Cookies are frequently used on websites and you can choose if and how a cookie will be accepted by configuring your preferences and options in your browser. Cookies do not alter the operation of your computer or Mobile Device in any way.

9.2 Cookies are used on the Suncorp Bank App including any other sites linked within the Suncorp Bank App to enable online purchase processes. Therefore, if you wish to make full use of the Suncorp Bank App, or any of our other online sites, it is recommended that you accept cookies. Cookies may also be used to collect and use information for a range of purposes, including to maintain and improve the operation of internet sites across Suncorp Bank, to track user preferences and product requirements to customise any content displayed within the Suncorp Bank App and improve advertising relevance. We may also have an arrangement with Third Parties who may use our cookies to improve our advertising relevance to you on their sites.

9.3 If you wish to remain anonymous and not tracked through the Suncorp Bank App you must delete the Suncorp Bank App. This will ensure we are no longer collecting any information about you through the Suncorp Bank App.

Your marketing preferences can be edited any time in the ‘marketing preferences’ tab in the Suncorp Bank App menu. This will ensure we do not use your information to serve personalised marketing content to you. Opting out of direct marketing does not make you anonymous. To remain anonymous, you must follow the steps above.

For further information on our Cookie & Data Policy, you can access this information here.

10. Making Transfers via the Pay Someone Feature

10.1 Suncorp Bank App users are able to send money to other Suncorp accounts or accounts at other financial institutions or owned by third parties using the Pay Someone feature.

10.2 Pay Someone payments eligible to be submitted as an Osko payment via the New Payments Platform will generally be received by the payee in near real-time (refer to the Terms and Conditions for Suncorp Bank Accounts and for Continuing Credit Accounts for Osko eligibility requirements). All other Pay Someone payments will be sent to the destination the same day if submitted before 5.30pm (AEST) on a business day (Monday to Friday exclusive of recognised public holidays). Pay Someone payments (other than Osko payments) submitted after this time may not be sent until the following business day. Please allow 1-2 business days for a Pay Someone payment to be received by the recipient if it cannot be sent as an Osko payment through New Payments Platform.

10.3 Pay Someone payments to other Suncorp accounts, other than future dated or recurring payments, will be processed immediately.

10.4 Where a future dated or recurring Pay Someone payment is setup, the Pay Someone transfer will be debited from your account on the evening of the date you have requested the payment to be made.

10.5 If you ask us to send a payment to a BSB and account number we will direct the payment to the intended account using only the BSB and account number you provide. The account name you provide will not be used to check that the payment has been made to the correct account. Funds will be transferred to the BSB and account number you provide regardless of whether the account name you provide matches the account number.

10.6 If you ask us to send a payment to a PayID we will provide you with the corresponding PayID Name and ask you to confirm it. It is your responsibility to ensure you provide us with the correct PayID and ensure the PayID Name matches the person you intend to pay.  If you are unsure whether the PayID Name is who you intend to pay, you should contact the intended recipient of your payment to confirm that the PayID and PayID Name are correct before proceeding with the payment.  

10.7 It is your responsibility to ensure that the details provided by you, such as the BSB and account number or PayID, are correct or your Pay Someone payments may be unsuccessful or may be paid to an unintended account, resulting in the loss of your funds.

Mistaken Internet Payments are treated by us in accordance with clause 22 of these App Terms and the ePayments Code.

10.8 You must only use the PayID search function in the Pay Someone payment process for the purpose of making a genuine bona fide payment to another person.  You must not use the PayID search function or data collected from the PayID search function for any improper or fraudulent purpose.

10.9 We may, acting reasonable, restrict or disable your use of the PayID search function from time to time in any manner we reasonably believe is appropriate or necessary to prevent the PayID search function from being used for a purpose, or in a way, which we believe ould be fraudulent or improper.

10.10 When you make a Pay Someone payment to a PayID connected to a joint account, the other account holders may be able to see the messages and notifications associated with the payment.

10.11 For Pay Someone payments you must not enter any text, emojis or other characters in the payment description that are inappropriate, insulting, defamatory or damaging to the reputation of any person. We will not be liable to you or any other person for such payment descriptions (except to the extent that any loss is caused by our negligence, fraud or wilful misconduct or our officer, employee, contractor or agent).

10.12 Once you authorise transactions to be processed, generally, we will not be able to stop, withdraw, suspend or delete the transfer, change any details or recover the funds except where the payment is due to occur at a future date where you may be able to edit or amend the payment details prior to the payment occurring.

10.13 If a transfer cannot be processed by the receiving financial institution, the funds will be returned to your account. This may take approximately 3 days but can take longer depending on the other financial institution.

11. Paying Bills with BPAY®

11.1 If your instruction to make a bill payment using BPAY is made before 6:00p.m. Australian Eastern Standard Time on a Business Day, it will in most cases be treated as having been made on that same day or on the date in the future that you specify. Where your instructions are received after 6:00p.m. Australian Eastern Standard Time, in most cases the payment will be treated as having been made on the next Business Day or on the date in the future that you specify.

11.2 Where a future date or recurring BPAY is set up, the BPAY payment will be debited from your account on the evening of the date you have requested the payment to be made.

11.3 A payment may take longer to be credited to a biller under the BPAY Scheme if we receive your instruction on a day other than a Business Day or if another participant in the BPAY Scheme does not process a payment as soon as they receive it.

11.4 You need to allow sufficient time for processing of bill payments.

12. Using the Suncorp Bank App

12.1 Suncorp Bank App instructions requiring transfer of funds (including BPAY bill payments) may not be carried out if you do not have enough cleared funds in the relevant account. We will notify you on screen if this occurs while attempting to perform an immediate transaction.

12.2 When a requested Pay Someone future dated or recurring payment is unsuccessful, we will notify you in the Suncorp Bank App and Internet Banking. Notification is deemed to have been received by you when it is received via one of these online platforms.

12.3 When a payment made under a PayTo Agreement has been initiated, we will notify you in the Suncorp Bank App whether it has been successful or unsuccessful. Notification is deemed to have been received by you when it is received via the Suncorp Bank App. If the payment has been unsuccessful, the Merchant or Payment Initiator (as applicable) can retry to debit the payment from your Account up to 5 times in a 24-hour period. We will notify you in the Suncorp Bank App of the first failure only.

12.4 At any time we may restrict the types of accounts that can use the Suncorp Bank App or we may change or restrict your use of or access to the Suncorp Bank App by any Mobile Device. In addition, we may restrict the availability of some Suncorp Bank App functions (eg BPAY, PayTo, Pay Someone Transfers (including Osko payments)) to particular types of accounts or Mobile Device.

12.5 Information provided by the Suncorp Bank App about your Account relates to transactions that we have processed and verified. Your Suncorp Bank App transactions will be processed in the normal course of business or at the times we tell you.

12.6 We are not responsible for delays, errors, inaccuracies, or omissions due to failure in any Mobile Device, the Telephone Banking network, any telephone system, any other electronic system or ancillary equipment or any other circumstances beyond our control, except to the extent that any loss is caused by our fraud, negligence or wilful misconduct or our officer, employee, contractor or agent.

12.7 For bank account Transfers, Pay Someone and/or Edit Scheduled Payments, you must not enter text, and/or special characters in the description and/or reference fields that are inappropriate, insulting, defamatory or damaging to the reputation of any person. If you use such text or characters, you may not be able to proceed with the transaction. We will not be liable to you or any other person for such payment descriptions and/or references except to the extent that any loss is caused by our fraud, negligence or wilful misconduct or our officer, employee, contractor or agent.

13. Withdrawal Limits

13.1 There are two types of withdrawal limits that apply when processing payments in Internet Banking and the Suncorp Bank App:

1) Transaction Limit

When completing certain transactions in Internet Banking and the Suncorp Bank App and the total value of these transactions exceeds $3,000 in any given day we will require you to input a Security Token Code. More information on Security Tokens is available in clause 14. We may vary the Transaction Limit and/or the types of transactions which require a Security Token Code.

The table below details the types of transactions that utilise this daily transaction limit:

~PayTo only available on Suncorp Bank App

2) Daily Limit

Your daily limit is a security measure to limit the amount of money that can be transferred from any of your accounts in Internet Banking and the Suncorp Bank App. Your default daily limit will be $5,000 unless we agree otherwise. Your daily limit will be shared across Internet Banking and the Suncorp Bank App. We may vary the default daily limit at any time and provide at least 30 days’ notice of the change.

The table below details the types of transactions that utilise this daily limit:

~PayTo only available on Suncorp Bank App.

What happens if you exceed your daily limit:

13.2 The total of all transactions (including future dated and recurring payments) which utilise your Daily Limit across Internet Banking and the Suncorp Bank App on any given day from all of your accounts must be less than your daily limit. If you attempt to perform a transaction that exceeds your Daily Limit, it may be rejected.

14. Security Token

14.1 Unless we agree otherwise, a Security Token is required to be active where:

  a. your Daily Limit is over the default Daily Limit;

  b. you wish to process over the Transaction Limit as detailed in clause 13.1

  c. transaction is made from one of your Accounts which we reasonably believe may be fraudulent or suspicious; or

  d. you have an account or personal limit (business customers only)

  e. you have a Solicitor’s Trust Account.

14.2 A Security Token is not required and is optional when:

  a. your daily limit is the default daily limit or less; and

  b. you do not wish to process over the Transaction Limit as detailed in clause 14.1.

14.3 A Security Token Code is required when:

  a. a Security Token is enabled and you are requested by us in the Suncorp Bank App; and

  b. when registering for the Suncorp Bank App

  c. for Solicitor’s Trust Accounts to be able to send money using the Suncorp Bank App to another Suncorp Bank account or a bank account at another financial institution via the Suncorp Bank App.

14.4 Where your Security Token is deactivated, and your daily limit is above the default daily limit, we may reduce your daily limit to the default daily limit until a new Security Token is activated and you request the limit to be increased.

14.5 When the Security Token expires or is deactivated you will be unable to process transactions which require a Security Token Code until a new Security Token is activated.

14.6 If you wish to deactivate your Security Token you can do so via the Suncorp Bank Secured App. Alternatively, you can contact us on 13 11 75 and request to deregister from the Suncorp Bank Secured App. You will be limited to transactions which do not require a Security Token Code (refer to clause 14.2 above).

15. Online Cashback

15.1 You can only access Online Cashback where:

• you have a loan with Suncorp Bank;
• your loan contract provides you can access Cashback; and
• all borrowers under your loan contract have satisfied any additional requirements of Suncorp Bank from time to time, that must be met before Suncorp Bank will allow you access to Online Cashback.

15.2 You can contact Suncorp Bank on 13 11 75 to find out if you can access Cashback and to find out any additional requirements that must be satisfied before you will be allowed access to Online Cashback.

15.3 Suncorp Bank may (on reasonable notice unless it is necessary to manage an immediate or material risk)  refuse to allow you access to Online Cashback, even where Suncorp Bank's requirements have been satisfied, but will only do so in order to protect its Legitimate Interests, and only to the extent reasonably required to do this.

15.4 Online Cashback will generally be available during business hours in Brisbane and may be available during other hours subject to Suncorp Bank's processing requirements. 

15.5 At any time Suncorp Bank (on reasonable notice unless it is necessary to manage an immediate or material risk) can withdraw your access to Online Cashback or limit the functions that can be performed using Online Cashback, without providing a reason, but will only do so in order to protect its Legitimate Interests, and only to the extent reasonably required to do this.

15.6 Access to Online Cashback is subject to:

• the terms and conditions of your loan contract;
• these Terms and Conditions; and
• any particular terms and conditions that you have agreed to before Suncorp Bank will provide you with access to Online Cashback.

15.7 Only immediate transactions can be performed using Online Cashback. Future dated or recurring transactions are not available.

Funds can only be transferred to another Suncorp Bank account and Suncorp Bank may at any time limit the accounts to which funds can be transferred. Pay Someone transfers cannot be performed using Online Cashback.

15.8 The amount of funds that can be accessed through Online Cashback is called Available Cashback and is displayed on the Account Details screen. You cannot access more than this amount through Online Cashback. In addition, there is a maximum limit of $99,999.99 for each Online Cashback Transaction.

15.9 Fees may apply for using Online Cashback for a Small Business Variable Rate and/or Business Essentials Loan product. Full details can be obtained from your loan contract or by contacting us on 13 11 75.

15.10 You can continue to access Cashback in any other way permitted by Suncorp Bank, in accordance with your loan contract. For example, you can go to a branch to access Cashback.

15.11 You or any other borrower under your loan contract can request the cancellation of Online Cashback at any time in writing, by contacting us on 13 11 75 or by going to a branch. If you then wish to access Online Cashback again, you and all other borrowers under your loan contract will need to once more satisfy any additional requirements of Suncorp Bank from time to time, that must be met before Suncorp Bank will allow you access to Online Cashback.

16. Electronic Communication

16.1 You agree to Suncorp Bank contacting you electronically at the email address you have provided regarding transactions you make using the Suncorp Bank App. If you give us permission, you also agree that we can send you push notifications. You also agree that we can provide you with any information required to be given to you by law or any code including the Banking Code of Practice and ePayments Codes; as well as non-marketing communications, by electronic communication, unless any law or code requires otherwise.

16.2 Anytime you make a Pay Someone payment to a new BSB and Account Number that you save to your address book, we will automatically issue an email to you notifying you of the payment. If you don't recognise the payment, you are to promptly notify us on 13 11 75.

16.3 If you authorise a data sharing arrangement with an accredited organisation pursuant to the Consumer Data Right (Open Banking), we will notify you via an email and within the Suncorp Bank App of the arrangement. If you didn’t set up the data sharing arrangement, you are to notify us promptly on 13 11 75.  

17. Signatories - Any Two to Sign

17.1 Accounts with signing instructions of "any two signatories to sign" to authorise a Transaction can access the mobile site of Internet Banking from the App in order for the Transaction to be processed. The Transaction requiring any two signatories to sign can also be processed directly in Internet Banking.

17.2 Once a Transaction requiring two signatories has been set up by one signatory in the App it will await approval in Internet Banking from the second account signatory. The Transaction can be approved from the mobile site or desktop site of Internet Banking. The Transaction will not be successfully processed until it has been authorised by two signatories.

17.3 If a future dated or recurring Transaction is still awaiting approval on the next payment date requested, it will expire and not be processed.

17.4 Where there are multiple signatories on an account, the authorisation of any (2) two will be accepted and the Transaction processed as set out in clause 17.2 above.

17.5 Appropriate signatories will be notified in Internet Banking of any Transactions awaiting approval.

17.6 For the purposes of the Consumer Data Right (Open Banking) any owner of an account held jointly is able to authorise data sharing for that account, notwithstanding that the signing instructions are “any two signatories to sign” to authorise a Transaction.  Any account owner is able to view, withdraw or amend this approval at any time in the Suncorp Bank App, notwithstanding any signing instructions to authorise a Transaction on the account.

17.7 The PayTo Service is not available for Accounts which require 2 or more persons to sign to withdraw from the Account or with signing instructions of "any two signatories to sign".

17.8 Persons with a “Signatory” relationship are automatically opted into receive eStatements on nominated accounts in the Suncorp Bank App and do not have the option to opt-out from eStatements in the Suncorp Bank App.

18. View Only Access

18.1 If you ask us and we agree, we can provide Suncorp Bank App access to various accounts limited to "view only" access.

18.2 View Only access (for Account Information Only relationships) means you can authorise a person to view transactional information, customer information, eStatements (if auto opted in – see below) and make statement requests only. This does not allow the person to perform any type of debit Transaction, open or close the account, or make any changes to information on the account other than their own information.

When we agree to provide View Only access you also authorise that person to view transactional information, customer information and eStatements.

Persons with View Only access are automatically opted in to receive eStatements on nominated accounts in the Suncorp Bank App and do not have the option to opt-out from eStatements in the Suncorp Bank App. 

18.3 You will not be able to view details of PayTo Agreements in the App if you have “view only” access or you have been granted “Authorised Officer” or “Account Information Only” authority for an Account.

19. Problems with Suncorp Bank App

19.1 If you think there has been a mistake or a transaction you did not authorise, you must promptly phone us on 13 11 75 or notify us via the Suncorp Bank App. Your concerns or any problems will be investigated in the manner outlined in these Terms and Conditions.

To assist in obtaining a prompt resolution to the problem, please give us clear instructions as to the account number and biller codes of any person or biller involved in the problem and provide any supporting documentation which will assist in our investigation.

20. Our requirements of you to protect your account against unauthorised transactions

20.1 In addition to your obligations under clause 6.4 of these App Terms and Conditions, you must:

• never voluntarily disclose or give your Security Codes or any other access method or Security Code to anyone, including a family member or friend; or
• where the access method uses a Mobile Device, not indicate one or more of the Security Codes on the outside of the Mobile Device, or keep a record of one or more of the Security Codes (without making any reasonable attempt to protect the security of the Security Code records) on the one article, or on several articles, carried with the Mobile Device or vulnerable to loss or theft simultaneously with the Mobile Device; or
• where we permit you to select or change a Security Code (and, immediately before your selection or change of the Security Code, we specifically instruct you not to select a numeric Security Code which represents your birth date or an alphabetical Security Code which is a recognisable part of your name and we warn you of the consequences of such a selection) not select such a numeric or alphabetical Security Code; or
• not act with extreme carelessness in failing to protect the security of all the Security Codes.

For the purposes of this clause, a reasonable attempt to protect the security of a Security Code record includes either or both of:

• making any reasonable attempt to disguise the Security Codes within the record;
• taking reasonable steps to prevent unauthorised access to the Security Code record.

20.2 Notwithstanding the App Terms, for the purposes of determining your liability for any losses resulting from unauthorised transactions using an electronic device and an access method we will comply with the requirements of the ePayments Code (except where the ePayments Code does not apply).

21. ePayments Code

21.1 Where you are an individual, the ePayments Code applies to the following transactions provided by us, each of which is an ePayments Transaction:

• electronic card transactions, including ATM, EFTPOS, credit card and debit card transactions that are not intended to be authenticated by comparing a manual signature with a specimen signature,
• Telephone Banking and bill payment transactions,
• Suncorp Bank App transactions, including by way of Pay Someone,
• online transactions performed using a card number and expiry date,
• online bill payments (including BPAY®),
• transactions using facilities with contactless features and prepaid cards, not intended to be authenticated by comparing a manual signature with a specimen signature,
• direct debits,
• transactions made under a PayTo Agreement,
• transactions using mobile devices,
• mail order transactions not intended to be authenticated by comparing a manual signature with a specimen signature, and
• any other transaction specified by the Australian Securities & Investments Commission.

21.2 We will comply with the ePayments Code where it applies.

21.3 We agree to follow the rules of the ePayments Code for ePayments Transactions made in Australia and we give you a warranty that we will do so.

This does not apply to:

• an Account that is designed primarily for use by a business, and established primarily for business purposes, or
• a facility where you and Suncorp Bank do not have a contractual relationship. 

22. When You are Not Liable for Any Losses

22.1 An unauthorised transaction, that is a transaction you do not authorise, does not include any transaction carried out by you or by anyone performing a transaction with your knowledge and consent. You will not be liable for losses resulting from unauthorised transactions where it is clear that you have not contributed to the loss.

22.2 Where you do not authorise a transaction, you will not be responsible for losses which:

• are caused by fraud, negligence or wilful misconduct of us or our officers, contractors, staff or agents of ours or third parties involved in networking arrangements or merchants or their agents or employees;
• are losses relating to an Identifier, Device or Security Code which is forged, faulty, expired, or cancelled;
• arise from a transaction which required the use of any Device and / or Security Code that occurred before you received any Device and / or Security Code or reissued Device and / or Security Code;
• are caused by the same transaction being incorrectly debited more than once to the same Account;
• arise from unauthorised transactions performed after we have been informed that the Device has been misused, lost or stolen or the security of the Security Code has been breached;
• arise from unauthorised transactions that can be made using an Identifier without a Security Code or Device or can be made using a Device, or a Device and an Identifier, but does not require a Security Code, if you do not unreasonably delay reporting the loss or theft of the Device; and / or

are losses which occur while our processes are unavailable, provided that a report is made within a reasonable time of the process again becoming generally available

23. When You are Liable for Losses

23.1 You will be liable for losses resulting from transactions which are carried out by you or by another person with your knowledge and consent.

23.2 Where we can prove on the balance of probability that you have contributed to a loss through fraud, or breaching the Security Code security requirements in clause 6 and / or clause 20:

You are liable in full for the actual losses that occur before the loss, theft or misuse of a Device or breach of Security Code security is reported to us, but

You are not liable for the portion of losses:

• incurred on any one day that exceeds any applicable daily transaction limit,
• incurred in any period that exceeds any applicable periodic transaction limit,
• that exceeds the balance on the Account, including any pre-arranged credit, or
• incurred on any Account that we and you had not agreed could be accessed using the Device or Identifier and/or Security Code used to perform the transaction.

Where:

• more than one Security Code is required to perform a transaction, and
• we prove that you breached the Security Code security requirements in clause 6 for one or more of the required Security Codes, but not all of the required Security Codes,

you are liable as outlined above only if we prove on the balance of probability that the breach of the Security Code security requirements under clause 6 and / or clause 20 was more than 50% responsible for the losses, when assessed together with all the contributing causes.

23.3 You are liable for losses arising from unauthorised transactions that occur because you contributed to losses by leaving a Card in an ATM, as long as the ATM incorporates reasonable safety standards that mitigate the risk of a card being left in the ATM.

23.4 Where we can prove, on the balance of probability, that you contributed to losses resulting from an unauthorised transaction by unreasonably delaying reporting the misuse, loss or theft of a Device, or that the security of all Security Codes has been breached, you:

• are liable for the actual losses that occur between:
  • when you became aware of the security compromise, or should reasonably have become aware in the case of a lost or stolen Device, and
  • when the security compromise was reported to us, but
• are not liable for any portion of the losses:
  • incurred on any one day that exceeds any applicable daily transaction limit,
  • incurred in any period that exceeds any applicable periodic transaction limit,
  • that exceeds the balance on the Account, including any pre-arranged credit, or
  • incurred on any Account that we and you had not agreed could be accessed using the Device and/or Security Code used to perform the transaction.

23.5 Where a Security Code was required to perform the unauthorised transactions, and the other circumstances outlined in this clause above do not apply, you are liable for the least of:

• $150.00, or a lower figure determined by us;
• the balance of the Account or Accounts which we and you have agreed may be accessed using the Device and / or Security Code, including any prearranged credit; or
• the actual loss at the time the misuse, loss or theft of a Device or breach of the Security Code security is reported to us, excluding that portion of the losses incurred on any one day which exceeds any relevant daily transaction limit or any other periodic transaction limit.

23.6 We, or our external dispute resolution body, have a discretion to reduce your liability in the circumstances set out in the ePayments Code.

23.7 If you report an unauthorised transaction on a debit card Account:

• we must not hold you liable for losses under this clause for an amount greater than the liability of you if we exercised any rights we had under the rules of the card scheme at the time the report was made, against other parties to the scheme (for example, charge-back rights), and
• this clause does not require us to exercise any rights we may have under the rules of the card scheme. However, we cannot hold you liable under this clause for a greater amount than would apply if we had exercised those rights.

24. Mistaken Internet Payments

24.1 When the ePayments Code applies to a transaction made through an Internet Banking facility we will follow the rules of the ePayments Code in relation to Mistaken Internet Payments. Other ADIs who have subscribed to the ePayments Code are required to follow the same processes set out in this clause 24 in relation to Mistaken Internet Payments. These processes do not apply to transactions where the ‘Pay Someone' Suncorp Bank App service used is a service designed primarily for use by a business and established primarily for business purposes.

This clause sets out how we will deal with Mistaken Internet Payments made by you and Mistaken Internet Payments received into your Account. You agree to us dealing with Mistaken Internet Payments in this way.

Reporting a Mistaken Payment

This clause sets out how we will deal with Mistaken Internet Payments made by you and Mistaken Internet Payments received into your Account. You agree to us dealing with Mistaken Internet Payments in this way.

24.2 You must report a Mistaken Internet Payment as soon as possible. You can report a Mistaken Internet Payment by:

• contacting us on 13 11 75 within Australia;
• contacting us on 617 3362 2222, if overseas; or
• visiting our branches.

24.3 You must give us full details of the transaction you are querying. We may require further information from you to investigate.

24.4 When you report a Mistaken Internet Payment, we will give you a notification number or some other form of acknowledgment which you should retain as evidence of the date and time of your report.

When You Have Made a Mistaken Internet Payment

24.5 When you report a Mistaken Internet Payment to us, we as the Sending ADI, will investigate whether a Mistaken Internet Payment has occurred. We will require certain information to enable us to undertake that investigation, such as the PayID and / or BSB and Account number into which the Mistaken Internet Payment was made, the name of the party or the intended recipient and any further information you may have evidencing the mistake. We will contact you if we require further information.

24.6 If we are not satisfied that a Mistaken Internet Payment has occurred, we will not take any further action.

24.7 If we are satisfied that a Mistaken Internet Payment has occurred, we will send the Receiving ADI a request for the return of the funds. The Receiving ADI is required to acknowledge this request within 5 Business Days and advise us whether there are sufficient funds in the Account of the Unintended Recipient to cover the Mistaken Internet Payment.

24.8 The Receiving ADI will also investigate. If the Receiving ADI is not satisfied that a Mistaken Internet Payment has occurred, they will not return the funds.

24.9 We must inform you of the outcome of the reported Mistaken Internet Payment in writing and within 30 Business Days of the day on which you reported the Mistaken Internet Payment to us.

24.10 If the Receiving ADI returns the funds to us, we will return the funds to you as soon as practicable. Usually, we will return funds to you by crediting the Account from which the Mistaken Internet Payment was made. If you no longer have an Account with us, or if it is not practicable to credit the returned funds to that Account, we will return funds to you by some other means.

24.11 Where we and the Receiving ADI are satisfied that a Mistaken Internet Payment has occurred, but there are not sufficient credit funds available in the Account of the Unintended Recipient to the full value of the Mistaken Internet Payment, the Receiving ADI must use reasonable endeavours to retrieve the funds from the Unintended Recipient for return to you (for example, by facilitating repayment of the funds by the Unintended Recipient by instalments).

When a Mistaken Internet Payment Is Made Into Your Account

24.12 When a Sending ADI sends a request to us, as Receiving ADI, of a Mistaken Internet Payment having been made into your Account, we will within 5 Business Days acknowledge that request and advise the Sending ADI whether there are sufficient funds in your Account to cover the Mistaken Internet Payment.

24.13 We will investigate whether a Mistaken Internet Payment has occurred.

24.14 If we are not satisfied that a Mistaken Internet Payment has occurred, we are not required to take any further action but we may seek your consent to return the funds.

24.15 If we are satisfied that a Mistaken Internet Payment has occurred, we will take action as follows:

  (a) Process where funds are available and report is made within 10 Business Days

If a Mistaken Internet Payment is reported within 10 Business Days after the payment is made, we are satisfied that a Mistaken Internet Payment has occurred, and there are sufficient funds in your Account, we will withdraw the funds from your Account and arrange for the return of the funds to the Sending ADI within 10 Business Days.

  (b) Process where funds are available and report is made within 10 Business Days and 7 months

If a Mistaken Internet Payment is reported between 10 Business Days and 7 months after the payment is made, we are satisfied that a Mistaken Internet Payment has occurred, and there are sufficient funds in your Account, we will complete our investigation into the reported Mistaken Internet Payment within 10 Business Days of receiving the request.  If we are satisfied that a Mistaken Internet Payment has occurred, we will place a hold on your Account to prevent you from withdrawing the amount of the funds for a further 10 Business Days and notify you that we will withdraw the funds if you do not establish that you are entitled to the funds within that 10 Business Day period. If you fail to establish your entitlement within 10 Business Days, we will return the funds to the Sending ADI within 2 Business Days of the end of that period.

  (c) Process where funds are available and report is made after 7 months

If a Mistaken Internet Payment is reported more than 7 months after the payment is made, there are sufficient funds in your Account and we are satisfied that a Mistaken Internet Payment has occurred, we will ask you if you agree to the return of the funds to the sender. If you consent to the return of the funds, we must return the funds to the sender.

  (d) Process where funds are not available in Your Account

Where we and the Sending ADI are satisfied that a Mistaken Internet Payment has occurred, but there are not sufficient credit funds available in your Account to the full value of the Mistaken Internet Payment, then we may decide to:

• recover the full payment;
• recover a partial payment; or
• not to recover any funds.

If we decide to recover the full payment, then we must use reasonable endeavours to retrieve the funds from you for return to the sender (for example, by facilitating repayment of the funds by you by instalments).

In each case, if we are not satisfied that a Mistaken Internet Payment has occurred, we may (but are not obliged to) seek your consent to return the funds.

24.16 We can prevent you from withdrawing funds the subject of a Mistaken Internet Payment where we are required to do so to meet our obligations under the ePayments Code.

Centrelink Direct Credit Payments

24.17 Where the Unintended Recipient of a Mistaken Internet Payment is receiving income support payments from Centrelink, we will recover the funds from the Unintended Recipient in accordance with the Code of Operation for Centrelink Direct Credit Payments.

Complaints about Mistaken Internet Payments

24.18 If you report a Mistaken Internet Payment to us as Sending ADI and you are unhappy with our handling of the matter, you can make a complaint to us. Please refer to clause 1.7 of the Terms and Conditions for Suncorp Bank Accounts and for Continuing Credit Accounts in relation to making complaints. If a complaint is made to another ADI where we are the Receiving ADI, we must cooperate with the other ADI's dispute resolution scheme.

25. Managing your Visa Debit card

25.1 Temporarily lock card

This functionality is available for Visa Debit cards only, and is designed to be used if you have misplaced your card or wish to restrict unauthorised use. All card payments will be declined while a card is locked. If a card is temporarily locked, any recurring card payments such as, online subscriptions and direct debits will also be declined. If a locked card is inserted into an ATM, it will be retained. Your card will remain locked until you unlock it. Temporarily locking your card does not report your card as lost or stolen. If your card has been lost or stolen, or if there has been any unauthorised transactions, you must report this to Suncorp Bank as soon as possible in accordance with the terms and conditions that apply to your card. If you report a locked card as lost or stolen, or order a replacement card, the locked card will be cancelled.

25.2 Unlocking your card

If you temporarily lock your Visa Debit card using the Suncorp Bank App, and have not reported your card lost or stolen to Suncorp Bank, you can unlock it anytime using the app. When you unlock your card, it will be active immediately.

25.3 Card Security preferences

The Suncorp Bank App allows you to optionally control (turn off/on) the following transaction types for Visa Debit cards (Card Controls):

• Report a Lost or Stolen Card - use this control to report a card as lost or stolen and order a replacement.
• Visa payWave payments – use this control to disable contactless payments. If it’s turned off, you’ll always need to insert or swipe your card and enter your PIN when making purchases. This includes contactless purchases using your mobile device where you have included the card in a mobile wallet service.
• Internet transactions (card not present transactions) – use this control to disable purchases via the internet or telephone from this card. If it’s turned off, any recurring transactions, such as online subscriptions, from this card will not be processed.
• Overseas in-store payments – use this control to disable overseas in-store payments. If it’s turned off, physical in-store card purchases outside Australia will be declined. This does not include online payments from international companies.
• Gambling lock – use this control to automatically prevent most gambling transactions. If it’s turned on, your card will not be able to be used for most gambling transactions, both physical in-venue card transactions and transactions via the internet or telephone (other than transactions conducted through the eftpos network – refer to further information below).

Things you should know about card controls:

• Only the card selected for the control will be impacted.
• Only the card owner can set controls.
• You can set more than one control for a card at any point in time.
• The controls relate to the selected card, not the account.
• The default position for all Card Controls, including the Gambling lock, is ‘off’. To apply any Card Control, it must be turned ‘on’ in the Suncorp Bank App.
• The control applies only to the 'credit' option available with your card and not any ‘cheque’ or ‘savings’ option.
• In order to complete your request to report your card as lost or stolen and order your new card you will need to complete the process and click "Confirm" on the “Cancel Card?” popover.
• If you have added your card to your digital wallet, when you report the card as lost or stolen and order a replacement, we will remove your old card from the digital wallet and replace it with a new card. You will be able to use the new card in your digital wallet as soon as it appears – you do not need to wait for the new physical card to be sent to you.
• If you believe that there has been unauthorised access or use of your digital wallet, or that the security of your digital wallet has been compromised, please call us to review, and if needed, remove the compromised digital tokens associated with your digital wallet.

If you have a Card Control on your card and the card is replaced, the Card Controls applied to your previous card will not apply to your new card. You will need to go into the Suncorp Bank App and turn ‘on’ the Card Controls for your new card if you want the controls to apply.

Circumstances where the card controls may not apply:

• Transactions that are made when a merchant's systems are offline.
• Quasi cash transactions which is when your Visa Debit card is used for the purchase of items e.g. money orders, traveller’s cheques foreign currency and online gambling (unless you have turned ‘on’ the gambling lock).
• Suncorp Bank relies on the transaction information provided by the merchant. If the authorisation request we receive doesn't match the exact criteria used to define the control you have set, the transaction may not be declined.

Circumstances where the Report Lost or Stolen Card control will not apply:

• For eftpos cards;
• For all Suncorp Credit Cards;
• Where a card has been replaced in the previous 90 days;
• Where there is a restriction against the account that is linked to the card;
• Where your delivery address is outside of Australia; or
• Where your delivery preference is “collect from branch”.

Additional circumstances where the gambling lock Card Control may not apply:

• Eftpos transactions – including: 
  • gambling transactions when you are in a gambling outlet and using the merchant’s point of sale terminal; 
  • iOS customers who have selected to use the eftpos network when using their card in a digital wallet;
• Purchases which we are unable to identify as gambling transactions (eg where the merchant isn’t classified as a gambling merchant, or has been incorrectly classified);
• Gambling transaction refunds;
• BPAY transactions, even if they are being made to a gambling merchant.

We identify transactions as gambling-related when the merchant is set up and classified as a gambling operator. This is done by the merchant's bank and is not something Suncorp Bank is able to control.

How to remove a gambling lock

You can remove a gambling lock on your card by turning off the gambling lock within the Suncorp Bank App. The gambling lock will not be removed immediately – it will only be removed 48 hours after you change the gambling lock control. The cooling off period is fixed and the gambling lock on your card is not able to be removed prior to the expiry of this 48-hour period.

What Suncorp Bank will do when you apply a control:

• We will make all reasonable efforts to decline a transaction when we receive an authorisation request for a transaction which matches one of the controls you have set.

Suspension and cancellation of the service:

• Suncorp Bank may cancel or suspend the service or your use of the service or any controls at any time and without prior notice if there is a systems breakdown, or Suncorp Bank suspects a security breach such as suspect or fraudulent activity on your account.
• You can stop using the service at any time. If you ask Suncorp Bank to cancel the service we will set all the control indicators to the default setting for the control subject to any restrictions referred to above.

26. Your Card PIN Security Requirements

26.1 Your card PIN provides access to your Visa/Debit, eftpos and credit cards, and must not be disclosed to anyone, including a family member or friend.

To protect yourself from unauthorised use, you should NOT choose a PIN that includes:

a. your date of birth;
b. your driver’s license number;
c. a series of consecutive or the same numbers; or
d. the same number as any Mobile Device Passcode.

26.2 You can reset your card PIN at any time within the Suncorp Bank App by selecting the Manage button in the Accounts section of the Banking Tab.

26.3 You can record your card PIN(s) to help you remember them, but they must be reasonably disguised. You should NOT:

• put any PIN on your card even if you disguise it;
• reverse the order of the PIN;
• say a disguised number is your PIN;
• disguise your PIN as a telephone number;
• replace your PIN with letters (e.g. A=1, B=2, C=3);
• write numbers that contain the same sequence of numbers as your PIN;
• record it on any Mobile Device where it can easily be retrieved;
• keep a record of it near the access method (for example next to your Mobile Device), unless you make a reasonable attempt to protect the security of the PIN; or
• keep a written record of all PIN(s) required to perform transactions on one or more items at risk of being simultaneously lost or stolen, without making a reasonable attempt to protect the security of the PIN(s).

These are only examples, and not a conclusive list of things you should avoid when disguising your card PIN(s).

26.4 If a card PIN is compromised, you are required to tell us promptly by telephoning our 24-hour hotline number on 1800 775 020.

26.5 Your liability for losses arising from an unauthorised transaction will be determined under the ePayments Code (refer to clause 12 of these Terms and Conditions).

A ‘’PIN’’ refers to your Personal Identification Number used to transact at Automatic Teller Machines, or for EFTPOS.

27. PayID

27.1 You may create a PayID in connection with a PayID eligible Personal Deposit Account by using the App if you accept the PayID Terms and Conditions and you are able to satisfy the requirements set out in those PayID Terms and Conditions.

27.2 The PayID Terms and Conditions are provided to you for acceptance prior to creation of a PayID and apply in addition to these Terms and Conditions.  If there is an inconsistency between a provision in these Terms and Conditions and a provision in the PayID Terms and Conditions, the provision in the PayID Terms and Conditions will prevail to the extent of the inconsistency.

28. Quick Balance

28.1 The App allows you to nominate one of your Accounts as a Quick Balance Account. Certain information about your nominated Account is accessible from your Mobile Device's home screen without you logging into the App.

28.2 Quick Balance information includes the Account’s name (the product name, or if applicable, the name you have designated for the Account) and the current and available balances.

28.3 The App’s Quick Balance feature is also available to view as a Widget on your Mobile Device’s home screen. The Quick Balance Widget is only available for use with Apple iOS version 14 plus and higher, or Android operating system.

28.4 To enable the Quick Balance Widget, the Quick Balance feature must be set up in the App.

28.5 The risk of nominating a Quick Balance Account or setting up Quick Balance Widget is that a third party could access and view your Quick Balance Account information without your consent or knowledge without logging into the App on your Mobile Device. There is an additional risk in using the Quick Balance Widget as a third party can view your Quick Balance Account information from your Mobile Device without your consent or knowledge. By using the Quick Balance or the Quick Balance Widget, you accept this risk and hold Suncorp Bank harmless and indemnify it from any claim, costs, damages or losses you suffer whatsoever as a result of you setting up a Quick Balance Account in the App or using the Quick Balance Widget, except to the extent that any loss is caused by Suncorp Bank's fraud, negligence or wilful misconduct or that of its officer, employee, contractor or agent.

28.6 The Quick Balance Account feature and the Quick Balance Widget can be cancelled at any time via the App.

29. Banking Notifications

29.1. The App allows you to nominate eligible accounts to receive notifications of incoming and outgoing transactions. Information on transactions on your nominated accounts is provided on your Mobile Devices’ home screen without you logging into the App.

29.2. Banking notifications will include the transaction type (Incoming Payment, Outgoing Payment, ATM Withdrawal), the transaction amount, the merchant name (if applicable) and the account nickname. If there is no account nickname setup then the notification will include the last 4 digits of the account number instead.

29.3. To enable the Banking Notifications feature, the feature must be set up in the App and push notifications must be enabled.

29.4. The Banking Notifications feature is not available on all accounts.

29.5. The notifications will also be available in the ‘Notifications’ section of the App for a period of 7 days after the transaction has occurred.

29.6. There may be certain circumstances where notifications won’t be provided (e.g. due to a technical platform failure) and accept no liability in this regard.

30. Suncorp Bank PayLater

30.1. You can apply to open a Suncorp Bank PayLater account (“PayLater”) by using the App if you accept the PayLater Terms and Conditions and you are able to satisfy the requirements set out in the PayLater Terms and Conditions and any requirements which we may have from time to time.

30.2. The PayLater Terms and Conditions are provided to you for acceptance prior to the creation of a PayLater account and apply in addition to these Terms and Conditions.  If there is any inconsistency between a provision in these Terms and Conditions and a provision in the PayLater Terms and Conditions, the provision in the PayLater Terms and Conditions will prevail to the extent of the inconsistency.

31. PayTo

31.1. In the App you may:

(a) authorise or decline a new or updated PayTo Agreement presented to you for approval by a Merchant or Payment Initiator;

(b) instruct us to amend your linked PayID or Account details in a PayTo Agreement by replacing them with another PayTo eligible Account or PayID you hold with us;

(c) pause, resume and cancel a PayTo Agreement;

(d) view details of your PayTo Agreements while they are active or paused or cancelled PayTo Agreements for a period as determined by us from time to time.

in each case in accordance with clause 25 of the Terms and Conditions for Suncorp Accounts and Continuing Credit Accounts or clause 4.9 of the Carbon Insights Account Product Information Document and Terms and Conditions (as applicable).

31.2. Payment instructions may be submitted to us for processing promptly after you have authorised a new or updated PayTo Agreement so you must take care to ensure the details of the PayTo Agreement are correct before you authorise them.

31.3.   We recommend that you allow notifications from the App to your smartphone to ensure that you’re able to receive and respond to PayTo Agreement creation requests, amendment requests and other notifications in a timely way. These notifications will be available in the App and on your Mobile Devices’ home screen without you logging into the App.

31.4. Information contained in PayTo notifications may include the status of PayTo payments, status of PayTo Agreements, the PayTo payment amount, the Merchant name, the last 4 digits of your linked Account and your linked PayID.

32. Consumer Data Right (Open Banking)

32.1 Consumer Data Right (Open Banking) allows you and any eligible third party to authorise the secure sharing of selected Suncorp Bank data with accredited organisations. 

32.2 You can view your Data Sharing Arrangements in the Suncorp Bank App, and where a Data Sharing Arrangement is active, ask us to stop sharing your data via the Suncorp Bank App.  The functionality to view and stop data sharing arrangements is only available in the Suncorp Bank App. You can visit  https://www.suncorpbank.com.au/help-support/open-banking.html for more information.

32.3. The supporting platform in the Suncorp Bank App to share bank data pursuant to the Consumer Data Right (Open Banking) is provided and maintained by Suncorp Bank’s third party service provider, Ernst & Young (EY). EY does not have direct access to your data.

33. General

33.1 Unless otherwise expressly stated, we only offer our products and services within Australia. Some products or services may only be offered for sale or serviced in specific states or territories. The information provided in the Suncorp Bank App has been provided in accordance with Australian laws only.

33.2 The law applicable to the Suncorp Bank App, and to any complaints arising from the Suncorp Bank App is the law in force in the State of Queensland, Australia. By using the Suncorp Bank App, you irrevocably submit to the jurisdiction of the courts of the State of Queensland, Australia and any courts which have jurisdiction to hear appeals from such courts\.

33.3 Should any term or part of these Suncorp Bank App Terms and Conditions be found to be void, unenforceable or invalid, then it is severed from these Suncorp Bank App Terms and Conditions, leaving the remainder in full force and effect, provided that the severance has not altered the basic nature of the App Terms and Conditions.

33.4 You may not rely on our words or conduct as a waiver of any right unless the waiver is in writing. Conduct includes delay in the exercise of any right. Right means any of our rights arising under or in connection with these Suncorp Bank App Terms or otherwise, and includes the right to rely on this term. Waiver includes an election between rights and remedies, and conduct which might otherwise give rise to an estoppel.

33.5 Any fees and charges that apply to your products or services accessible via the Suncorp Bank App will continue to apply through your use of the Suncorp Bank App. You may incur charges from your mobile service provider for downloading and using the Suncorp Bank App. We are not liable in respect of these charges and we recommend you check with your service provider prior to using the Suncorp Bank App.
Fees and charges may be varied at any time without notice except where notice is required under any law or code in which case we will give you the required notice. Government charges, taxes and duties may also apply.

33.6 Whilst reasonable steps have been undertaken to ensure that App Content is free from error, subject to any applicable law which cannot be excluded (including warranties under the Australian Consumer Law and Australian Securities and Investment Commission Act 2001 (Cth)), we do not warrant the accuracy, adequacy or completeness of Suncorp Bank App Content. All information is subject to change without notice. We do not guarantee that any Suncorp Bank App Content, linked external websites or any Third Party Site or any Third Party App will be free from viruses, or that access to any Suncorp Bank App Content, linked Online Suncorp Sites or any Third Party Site or any Third Party App will function as intended or be uninterrupted.

33.7 Since electronic services are subject to interruption or breakdown, access to Suncorp Bank App Content is offered on an "as is" and "as available" basis only. We may impose limits or restrictions and/or vary or withdraw any Suncorp Bank App Content, features or functionality (or part thereof) at any time and without notice for security, technical, maintenance, legal or regulatory reasons, or due to any material breach of these Suncorp Bank App Terms. 

33.8 You indemnify Suncorp Bank all Suncorp Group Entities in respect of any liability incurred by us for any loss, cost, damage or expense, howsoever caused, suffered by us as a result of your breach of these Suncorp Bank App Terms and Conditions except to the extent that the loss, cost, damage or expense is caused by Suncorp Bank or a Suncorp Group Entity's fraud, negligence or wilful misconduct or that of its officer, employee, contractor or agent.

33.9 Subject to any responsibilities implied by law and which cannot be excluded, Suncorp Bank and all Suncorp Group Entities and our directors, employees, agents, contractors are not liable to you for any losses, damages, liabilities, claims and expenses (including but not limited to legal costs and defence or settlement costs) whatsoever, whether direct, indirect or consequential, arising out of or referable to any Suncorp Bank App Content, Site Content, User Content, Third Party Site content, Third Party App content, Third Party products or services, or access (or lack of access) to any website operated by Suncorp Bank or any Suncorp Group Entity by you, howsoever caused, whether in contract, tort including negligence, statute or otherwise except to the extent that the loss is caused by Suncorp Bank or a Suncorp Group Entities' fraud, negligence or wilful misconduct (including that of it's officers, employees, contractors or agents).

33.10 Unless otherwise stated, these Suncorp Bank App Terms and/or your access to the Suncorp Bank App may be terminated (including upon decommissioning of the Suncorp Bank App). if:

• you breach the Suncorp Bank App Terms and we believe immediate termination is necessary for us to manage an immediate and material risk to our Legitimate Interests; 
• we have reasonable grounds to believe that your Suncorp Bank App is being used is in connection with fraud, misuse or for any other inappropriate use; 
• we have reasonable grounds to believe that there is an immediate and material risk of loss to you or us;  
• for security reasons; 
• we need to by law or to meet our prudential requirements; 
• you have given us materially false or misleading information; or 
• you act in a manner that in our reasonable opinion threatens the security of our staff or property. 

However, unless there are exceptional circumstances (e.g. fraud or criminal activity), we will give you at least 14 days advance notice before we terminate these Suncorp Bank App Terms and/or your access to the Suncorp Bank App.

You may terminate your use of our Suncorp Bank App at any time. However, all restrictions, and all disclaimers and exclusions of and limitations on our liability, will survive any termination.

33.11 Upon termination of these Suncorp Bank App Terms and your right to access to our Suncorp Bank App, you must not directly or indirectly access or use any part of our Suncorp Bank App.

33.12 Suncorp Bank App Content is either owned or licensed by us and is protected by copyright laws in Australia and overseas.

33.13 Except where necessary for and incidental to viewing or using the Suncorp Bank App Content via Mobile Device or App Content via your web-enabled browser or as permitted under the Copyright Act 1968 or other applicable laws, no App Content may be reproduced, published, stored (for any period of time) in an electronic or other retrieval system, adapted, uploaded to a third-party location, framed, performed in public or transmitted in any form by any process whatsoever without our specific written consent (which will not be unreasonably withheld).  

33.14 The Suncorp Bank App includes trademarks which are protected by law. Suncorp Bank and all Suncorp Group Entities reserve all copyright and other legal rights with respect to our respective trademarks, whether registered or otherwise.

33.15 We reserve the right at any time to vary these Suncorp Bank App Terms for one or more of the following reasons:

a) to comply with any change or anticipated change in any relevant law, code of practice, guidance or general banking practice;

b) to reflect any decision of a court, ombudsman or regulator;

c) to reflect a change in our systems or procedures, including for security reasons;

d) to respond to changes in the cost of providing the Accounts or Suncorp Bank App; or

e) to make these Suncorp Bank App Terms clearer or to add features,  

but will only do so in order to protect our Legitimate Interests, and only to the extent reasonably required to do this. Where we make changes, we will notify you by written or electronic notice (for example, through the Suncorp Bank App) no later than the day it takes effect, or such longer period as may be required by law.  Where the change is adverse to you, we will notify you at least 30 days before the effective date of the change (unless we believe doing so is, in our reasonable opinion, necessary for us to manage an immediate and material risk to our Legitimate Interests or the change relates to a government charge).

33.16 By your use of the Suncorp Bank App, you are taken to have accepted the Suncorp Bank App Terms. By your use of the Suncorp Bank App after any variation, you are taken to have accepted the varied Suncorp Bank App Terms.

33.17 No automatic update of personal information

Please be aware that personal information such as your name, address and vehicle's details, which you enter into the Suncorp Bank App will not automatically update on the records of your policy or registered banking accounts. If you would like to update your details, please call us on 13 11 75.