Information securityand privacy

The safety of your personal information is our highest priority. That’s why we have mandatory multi-factor authentication to secure your log in to the My Membership app and online member services.

When logging in to your membership account, you’ll now be sent a unique, one-time code by text or email, which you’ll need to enter.

This new security feature is one of the simplest, most effective ways to help prevent unauthorised access to your personal information.

Read our frequently asked questions

We’re committed to protecting your privacy and managing your personal information in accordance with the HCF Privacy Policy, as well as our obligations under relevant state legislation dealing with privacy and health records.

The HCF Privacy Policy includes information on:

• the nature of the personal information we may collect
• how we collect and use your personal information
• who we disclose your personal information to
• what happens if you don’t provide this information or don’t want us to use or disclose the information
• storage and security of your personal information
• your privacy rights
• contacts if you have a concern or query in relation to privacy.

Health insurance fraud is wide-ranging and can include identity fraud, when someone uses your personal details without your permission to gain a financial benefit. We monitor member accounts continuously for unusual activity to protect you and your personal information.

To help protect yourself and HCF against fraud:

• never leave your HCF membership card with anyone, even a provider
• always check the details on your receipt and your claims history
• use a strong password to log in to online member services and update it regularly 
• be aware of phishing and spoofing scams
• know that we’ll never ask for your password or personal information (without verifying your identity first)
• report any suspicious behaviour or irregularities. 

What’s changed to the log in experience for the My Membership mobile app and online member services?
To help keep your personal information and data safe, we’ve introduced mandatory multi-factor authentication when logging in to the My Membership mobile app and online member services. This means you’ll need to add a unique one-time code that will be sent to you by text or email when you log in to your membership account.

What is multi-factor authentication?
Multi-factor authentication is a security measure that requires two or more proofs to confirm your identity when you log in to the HCF My Membership mobile app or online member services. It's one of the most effective ways to protect your valuable information and account against unauthorised access.

Why is it important?
Many organisations have adopted multi-factor authentication, an essential protection measure in today’s cyber security and safety landscape. Multi-factor authentication makes it harder for cyber criminals to access your personal information by adding another layer of verification to the log in experience.

Why has HCF made these changes?
Multi-factor authentication is common across many financial services and telecommunication providers, helping to protect sensitive customer information and data and reduce unauthorised access to their systems and networks. The introduction of mandatory multi-factor authentication to the My Membership mobile app and online member services is another way we’re continually improving security measures to help protect you and your family from cyber-attacks and fraud.

Why has multi-factor authentication been mandated, and do I have to use it every time I log in?
We take the protection of your personal information seriously and want to make sure it’s always safe and secure. To help prevent unauthorised access to your account and add another layer of security to your HCF membership, we’ve added mandatory multi-factor authentication to our online log in experience.

This means, you'll now need to add a unique, one-time code when you log in to the My Membership mobile app and online member services. This code will be active for 5 minutes before expiring. If your code expires before you use it, you’ll be prompted to request another code on the log in screen.

What if my email or mobile number is wrong?
We have a dedicated team in place to support and guide members through multi-factor authentication. If the email or mobile number listed in your membership account is incorrect, contact our team by calling 13 13 34 or by visiting a branch.

Can anyone on my cover update and use multi-factor authentication?
Currently only the policyholder can register to have an online account linked to their cover, so you’ll need to make sure their email and mobile number are up to date.

I don’t have a smartphone or mobile phone – can I still use multi-factor authentication?
Yes, you can still use multi-factor authentication if you don’t have a smartphone or mobile device. If you don’t have a mobile device, it’s important to make sure the email linked to your membership is correct, as this is where we’ll send your unique one-time code. If the email is incorrect, get in touch with our team by calling 13 13 34 or by visiting a branch.

Where will the code be sent if both my email and mobile are linked to my account?
Mobile is the automatic preference setting used for multi-factor authentication, meaning you’ll receive your unique, one-time code by text.

How do I turn on multi-factor authentication?
To make sure your personal information is always secure, mandatory multi-factor authentication is automatically turned on for your membership account.

Can I opt out of multi-factor authentication?
No. Multi-factor authentication is a mandatory security measure we've added to our log in experience to help keep your personal information safe.

I’ve entered my password incorrectly and am now locked out, what can I do?
If you’ve locked yourself out of your account after too many failed password attempts, you’ll be able to retry again in 5 minutes. Once your account has reactivated, you’ll be prompted to enter a new unique, one-time code that will be sent to by text or email following re-setting or entering the correct password.

How long does it take for the code to come through by text or email?
The code should arrive instantly, though there are many factors that might impact how long it takes to receive your code, like where you’re located, your mobile or service provider and your signal strength.

Can I still use biometrics to log in to My Membership mobile account?
Yes, you can still use biometrics to log in to your membership account. Once your biometrics have been accepted, you’ll be prompted to enter a unique, one-time code.

Who do I reach out to for support?
If you need help logging in to your account or want more information about multi-factor authentication, get in touch with our team by calling 13 13 34 or visiting our Contact Us page.