​Making payments to your account: You can find details on how to make payments to your account here. Your new BPAY reference number is in your MyCard statement, but payments using your previous BPAY details will still be applied to your account.​

Getting copies of your statements: You can download statements from November 2023 onward via the MyCard app or MyCard Online. For earlier statements, you can request them through chat with us in MyCard Online. Only the accountholder can view or request statements.​​

Accessing MyCard Online: refer to our FAQs on how to retrieve your MyCard user ID and log in for the first time.​

What is Open Banking?

Open Banking is a service that gives you greater access to and control of your banking data.

You can opt into the service to share banking information between accredited third parties. This makes it easier for you to manage, compare and switch banking products and services.

Open Banking is governed by legislation passed by the Australian Government in 2019 called Consumer Data Right (CDR), opens in new window which aims to increase competition between major banks, other financial institutions and accredited third parties.

To find out who is accredited by the Australian Competition and Consumer Commission (ACCC) to receive data through Open Banking, take a look at the ACCC, opens in new window website.

Is Open Banking safe to use?

Yes, there are strict rules and security protocols in place to protect your information.

Strict accreditation criteria

To request access to your data through Open Banking, third parties must be accredited by the Australian Competition and Consumer Commission (ACCC). They have set strict accreditation criteria, as well as privacy and information security standards. Your data will only be shared to Accredited Data Recipients (ADRs) with your permission and authority. To find out who is accredited by the ACCC to receive data through Open Banking, visit the CDR’s full list of ADRs, opens in new window.

You will also be able to view the data you share or request for your data sharing consent to be stopped at any time. For more information, read our CDR Policy (PDF, 143KB), opens in new window.

One-time password verification

You’ll never need to give your password to a third party. If you choose to share your banking data with an accredited Open Banking participant, a one-time password will be sent to you via SMS to your security-registered phone number to help identify you.

Secure transmission process

Once you have been identified, your data will be transmitted to the third party through a secure connection. This connection is governed by strict terms and conditions defined by the ACCC on how your data must be secured.

How to share your data

Open Banking is an opt-in process. Here is how it works:

Agree to share information with a third party

To provide you with a new or improved service, an accredited third party may ask you to share your applicable information with them.

They’ll tell you what data they need, and how long they want you to share it for. This may be once-off, or ongoing data sharing for up to 12 months.

Choose which information to share

You choose which data to share with the accredited third party and for how long.

To share this data, you’ll be redirected from your accredited third party website to MyCard Online. Follow the prompts that appear on the screen.

  1. Enter your MyCard user ID.
  2. A one-time password will be sent to your SMS security registered phone number.
  3. Enter this one-time password and follow the prompts to confirm what data you’d like to share.
  4. We’ll share your data with that third party using a secure connection.

To find out how it works in more detail, please visit the official Consumer Data Right website, opens in new window.

Who can share data?

Data sharing will be made available to MyCard customers who meet the following criteria:

  • Are over the age of 18
  • Have an open account with us
  • Registered to use MyCard Online or the MyCard App

Accounts eligibility

Once you have provided your consent to share data, you will be able to securely share your customer data, account data, transaction data, payee data, direct debits and scheduled payments held by us.

Please note: For closed accounts, the data shared will only relate to the last 12 months of transactions on the account prior to closure.

Manage data sharing

Once your data sharing has been set up, you can view and revoke your data sharing consent preferences at any time using the MyCard App or MyCard Online data sharing dashboard.

Instructions for mobile devices

  1. Log in to the MyCard App
  2. Tap Profile and Settings
  3. Tap Data sharing under Privacy and Disclaimers
  4. Tap Active sharing consents to view active consents. You can search or sort by alphabetical or recent consents.

Instructions for web browsers

  1. Log in to your MyCard Online account.
  2. Tap My Profile from the Services menu tab.
  3. Tap Personal Information and then tap Data Sharing Dashboard.
  4. Tap the Active data sharing contents tab to view active consents. You can search or sort by alphabetical or recent consents.

Manage Secondary Users

A secondary user can refer to various entities or individuals who have been granted access to another person’s data or account. However, for MyCard, only additional cardholders are considered eligible secondary users. This means they have been given permission by the primary cardholder (the main account owner) to access and use their MyCard account information. These additional cardholders can also agree to share the account data with accredited data recipients on behalf of the primary cardholder.

To add or remove a secondary user follow these steps:

Instructions for web browsers and mobile devices

  1. Log in to the MyCard App or MyCard Online.
  2. Select Profile and Settings.
  3. Select Data Sharing.
  4. Select Accounts with secondary users.
  5. Select the relevant account.
  6. For the relevant user, select on or off.
  7. Select Allow or Remove.

How to stop sharing your data

You can view or withdraw your consent at any time by logging on to the MyCard App or MyCard Online. Here you will be able to view all active, expired and withdrawn data sharing arrangements that you have set up. You’ll have full control of this data sharing. Your data can’t be shared without your consent and you can stop sharing at any time.

Follow these steps to access your data sharing dashboard:

Instructions for web browsers

  1. Log in to your MyCard Online account
  2. From the home screen, click the Profile icon at the top right 
  3. Select Data Sharing Permissions.

Instructions for mobile devices

  1. Log in to the MyCard App
  2. On the home screen, tap More
  3. Tap Data Sharing Permissions
  4. Tap Data Sharing Consents.

To stop sharing your data, follow these steps within your data sharing dashboard:

Instructions for web browsers and mobile devices

  1. Select the relevant organisation, then select Stop Sharing.
  2. If the “Are you sure?” window displays, select Stop Sharing again.
  3. A confirmation message then displays.

Alternatively, to withdraw your request in writing or over the phone, please call us on 13 24 84 or contact us. 

Deleting your data

If you decide to stop sharing your data, the accredited third party will give you the option to delete your data from their records. If you don’t choose to have it deleted, or in cases where it can’t be deleted, the accredited third party will delete any identifiable data.

FAQs

You can ask for your data to be shared to other financial institutions and accredited third parties to assist you with making the right choice when deciding on the products and services that will suit your needs.

To be able to make a request to us for consumer data, financial institutions must adhere to the Australian Competition and Consumer Commission (ACCC) accreditation guidelines on how consumer data is collected and used, before submitting an application to the ACCC for accreditation.

As part of each data sharing request, we will perform a check of the ACCC registry to ensure the financial institution is an accredited data recipient and will also verify that you have provided consent for your data to be shared.

Yes, you will be able to share data using Open Banking from any NAB-branded account (and MyCard products) you have. For more information, visit NAB Open Banking, opens in new window.

Visit the Consumer Data Right website, opens in new window to find out more information about the CDR legislation.