Tips for protecting your information
What we're doing
To keep your personal information safe and secure, here’s a quick look at what we’ll do and what we won’t do with your data.
| What we will do | What we don't do |
| There may be times where we need to contact you about account or financial information. If you have any concerns, please call us on 1800 005 166. | We'll never request your passwords or login information via email, phone, text message, live chat or social media. |
| Your information can only be accessed by authorised staff and service providers performing specific functions. | We won’t use your personal information for any other purpose or share it with anyone else without your permission, unless we’re required or authorised to do so under any applicable law. |
| We use measures to protect your personal information against unauthorised access, use or disclosure including secure passwords, user logins and other security procedures. | |
| Send you verification codes via SMS from ‘CareSuper’ which you should enter into the CareSuper website or mobile phone application only. | We will never ask you to repeat a verification code via email, phone, text message, live chat or social media. SMS verification codes will always come from ‘CareSuper’. |
For more information about how we keep your information safe, see our Privacy Policy.
How you can keep your information safe
| Do | Don't |
| Be cautious when answering calls or responding to texts from unfamiliar numbers – don’t follow any instructions from someone you don’t know. | Never open attachments or click on links in emails or social media messages from unknown senders. |
| Change your passwords regularly. Make sure your passwords are long and complex. The safest way to save passwords is to use a reputable password manager that offers strong encryption and multi-factor authentication. This helps protect your passwords even if the password manager itself is compromised. | Don't use the same password across multiple accounts or use easily guessable passwords like personal information. Don't store your passwords in your email account, or in online documents. Never share your passwords with any other person. Don’t enable ‘Remember Me’ options. This feature can save passwords in browser cookies, making them vulnerable to cybercriminals. |
| Enable multi-factor authentication for your online accounts, including email accounts, wherever possible. | Don't share any personal information until you are certain about who you are sharing it with. |
| Ensure you have up-to-date anti-virus software installed on any device used to access online accounts, financial services, personal or other sensitive information. | Don’t delay operating system and software updates—updates contain security content that help protect you from the latest threats. |
| Ensure that emails and web links are safe before interacting with them. Do this by checking the sender’s identity, verify the link’s destination, and use security tools to analyse potential threats. |
5 tips to verify emails and web links
- Check the sender: Verify the sender’s email address against known legitimate senders or organisations.
- Hover over links: Without clicking, hover your mouse over links to see the destination URL. If the displayed URL differs from the one in the text, it’s a red flag.
- Look for HTTPS: Ensure the website uses HTTPS (Secure Hypertext Transfer Protocol) which indicates a secure connection and encryption.
- Think before you click: Always double-check the sender and link before interacting with the email, especially if it seems suspicious.
- Verify the URL: Before clicking, carefully inspect the URL to ensure it matches the expected website and that it’s not disguised with similar looking domains.
By following these tips, you can reduce the risk of falling victim to phishing scams and other online threats.
Spreading of misinformation
The ATO has alerted the Financial Services Committee to a recent surge in false information circulating on unofficial websites and social media. These sources incorrectly claim that changes to superannuation preservation and withdrawal rules will take effect from 1 June 2025.
This is not true. The ATO has confirmed there are no changes to these rules. With this in mind, we thought it would be timely to remind you of a few things:
- No change to preservation age: The preservation age—the age at which you can access your super on retirement—remains 60 for anyone born on or after 1 July 1964.
- Use trusted sources: Always rely on reputable sources such as the ATO website, our website, registered tax agents, or licensed financial advisers. To verify a tax agent’s registration, visit the Tax Practitioners Board website.
- Watch for phishing scams: Be cautious of websites attempting to collect personal information like your tax file number (TFN), identity details, or myGov login credentials.
Has your identity been compromised?
If you identify unusual activity on your account or believe your identity may have been compromised, please contact us immediately on 1800 005 166 to discuss options available to you.
Support resources
IDCARE is Australia’s national identity and cyber support service. They can connect you with a specialist identity and cyber security counsellor.
Other resources
- Visit the Australian Competition and Consumer Commission’s ScamWatch page and consider subscribing to their alerts.
- Read ScamWatch’s The Little Book of Scams to help spot and avoid scams.
- Visit Cyber.gov.au, to learn more about the Australian Government’s efforts to improve cyber security and how to improve your personal cyber security.
- Visit the MoneySmart website for information on how to protect your personal information in the event of identity theft.
- Report cybercrime securely to the Australian Cyber Security Centre at ReportCyber.
This is general information only and doesn’t take into account your objectives, financial situation or needs. Before making a decision about CareSuper, you should consider if this information is right for you.
We're giving you this information in good faith. It comes from sources we think are reliable and helpful. However, we can't guarantee its accuracy and take no responsibility for this content, including any errors or omissions.
Information correct as at 5 May 2025.