Keeping your personal and financial information private and secure is vitally important to Wizard. We employ a number of measures to ensure your information remains secure. We have also provided some tips for you to protect yourself.

What you can do

Your password

• Do not divulge your Loan Service Net (LSN) Access Number, LSN Password, or Loan Application Password to anyone, and never in response to an email.

• Do not write your LSN Access Number, LSN Password, or Loan Application Password down anywhere.

• Ensure that no one watches you while you enter your LSN Access Number, LSN Password, or Loan Application Password. This is particularly important in a work environment.

• Do not use a password that is simple and easy to connect to you, such as your birth date. Try to use a password that isn’t obvious, and would be hard to guess.

• Don't use the same password in more than one place. Eg don’t use your bank PIN number as your LSN Password.

• Regularly change your LSN Password - by logging on to LSN, and clicking on “Password” in the top menu.

• If you believe your password has become known or used by someone else, contact Wizard immediately on 1300 650 921.

Web browsing

• Ensure you log in to LSN the correct way – via Wizard.com.au.

• Check the Security Server Certificate before you log in to LSN. The certificate informs your browser that you are connecting to the bona fide LSN site, and not a fake. The certificate looks like this , and is at the bottom right of your browser.

• Logout of LSN / your Wizard mortgage application and close your browser window when you have finished. This is to ensure that others cannot access your personal information if you are using a computer than other people can access.

• When leaving your computer unattended, either shut it down or physically disconnect it from the Internet. This reduces the chance that someone will be able to hack into your computer.

• When viewing or using your personal information on a public computer, take care to prevent others from viewing your personal information.

• When you have logged in to LSN, check your last login date at the top right.

• Review your transaction history and statements to make sure you're being charged only for transactions you made. If you see any irregularities, contact Wizard immediately on 1300 650 921.

• Do not install or run programs from people or organisations that you do not know or trust.

Email

• Delete any emails you think are suspicious. Ensure the email is deleted from your deleted items.

• Do not click on a link or an attachment in an email, obtained from a source you don't know or trust.

• Never click on a link in an email to go to the LSN login page. Genuine emails from Wizard do not contain links to our login page.

• Do not provide your personal or security details, such as loan number, access code, or password, in response to an email. Wizard will never ask you for your password.

• Always scan any new programs or files for viruses before you open, install or use them.

• If you believe that you have received a hoax email, contact Wizard immediately on 1300 650 921.

Software

• We strongly recommend you have protection software installed on your computer. This should include anti-virus, anti-spam, and firewall features.

• For more details of protection software, visit www.symantec.com, www.mcafee.com, or www.trendmicro.com.au

• Regularly install the latest updates for your protection software. If your software is out of date, it will quickly become ineffective at detecting viruses. Updates will be available on your software vendor’s website, or as an automatic patch for some software.

• Scan your computer with your anti-virus software daily. Most software can be set up to do this automatically.

• Regularly install the latest security patches for your browser. These should be updated every few months. For Microsoft windows users browsers, visit http://windowsupdate.microsoft.com. For users of other operating system, visit the web page of the company whose operating system you are using.

What we do

• Encryption
  

  Encryption scrambles data so unauthorised users cannot read or modify it. You can only decrypt and use the data if you have the correct access code and password.

• Secure Socket Layers
  

  Any data transferred between browser and our server is encrypted using a technology called Secure Socket Layers (SSL). This is the industry standard for encryption.

  
  

  Your browser must support SSL for you to be able to access LSN. Generally, the higher the browser version, the more secure it is. We recommend you use the following browsers as a minimum:
  

  	Windows	Mac
  Internet Explorer	5.0 and above	5.0 and above
  Netscape	4.5 and above	6.0 and above

• VeriSign
  

  Wizard’s SSL technology is provided by VeriSign. They offer the world's best practice 128-bit encryption. According to RSA Data Security it would take a hacker a trillion x trillion years to break 128-bit encryption using current technology.

• Identifying encryption
  

  An encrypted site has in the address bar, and/or a padlock in the bottom right corner of the browser window.

• Firewalls
  

  Wizard uses a firewall to prevent unauthorised access to and from the network.

  
  

  A firewall is like a shield between the Wizard network and the Internet. It allows only specific kinds of messages from the Internet to flow in and out of the Wizard network. This protects the internal network from unauthorised users, such as hackers.

• Automatic log out
  

  If your LSN session remains unattended for more than ten minutes, you are automatically logged out. This helps to stop others from accessing your personal information if you have left your computer unattended.

• Unsuccessful logins
  

  If you are unable to login to LSN after three attempts, your account will be locked. To unlock your account you will have to contact Wizard on 1300 650 921. We will verify your identity before unlocking the account.

• Password protection
  

  Your personal information is password-protected so that only you have access to it. It is therefore vital that you to protect your password. As information sent between your browser and the Bank is encrypted, it is very difficult for anyone to get your password in transit from the Internet.