National Australia Bank (NAB) is implementing a major expansion of its biometric security capabilities throughout 2024-2025, moving from traditional password authentication to a passwordless system that uses facial recognition, fingerprints, and FIDO2-compliant passkeys.
The initiative aims to reduce fraud and operational costs by 40-60 percent through passwordless login methods that combine biometric technologies and FIDO-compliant passkeys. Since beginning the phased rollout in 2023, NAB has already observed a 70 percent reduction in password-related support cases, joining other major Australian financial institutions like ANZ Plus in moving toward passwordless authentication.
As part of the bank’s comprehensive scam prevention strategy, which supports the industry’s Scam Safe Accord of 2023, NAB employs facial biometrics for login verification and behavioral biometrics to identify suspicious transactions. The multi-layered security approach specifically targets synthetic identity fraud and phishing attacks, which have seen a significant increase across the financial sector in recent years.
New customer onboarding now requires a “selfie” for identity verification during online account opening, following a growing trend in financial services toward biometric authentication. NAB worked with Accessibility Australia to ensure the system remains inclusive, while maintaining alternative verification options through branch visits or phone calls for customers unable or unwilling to use digital verification.
“Stopping scams takes a whole-of-ecosystem response. We’re helping Australians understand the red flags they need to look out for and working closely with other Banks, telcos, digital platforms, government to stop the crime in the first place,” said NAB Executive Group Investigations Chris Sheehan.
The bank has implemented additional anti-scam measures, including the removal of links from text messages, payment alerts, blocking transactions to high-risk cryptocurrency platforms, and Confirmation of Payee technology for account detail verification. These measures come as SMS phishing attacks continue to rise globally, threatening mobile banking security.
“This sort of technology is already used for other services, including things like passport applications and we’ve designed the experience to be simple for customers to follow,” said NAB spokesperson Mr. Matheson.
The bank plans to achieve full passwordless banking by 2030. Early deployments of in-branch biometric systems are scheduled within the next 12 months, reflecting a broader industry trend among major Australian banks. By the end of 2024, all major Australian banks, including NAB, will require biometric verification for new online accounts, while maintaining branch alternatives for those who prefer traditional verification methods.
Sources: AInvest, MarketScreener, MarketScreener, Your Life Choices, Seniors Discount Club