Regulatory status
Unitus Bank is a financial technology company. It is not itself an Authorised Deposit-taking Institution (ADI). Deposit-taking and card issuance require an ADI licence from the Australian Prudential Regulation Authority (APRA). The name and licence details of the licensed partner institution supporting our banking services will be published on this page. Unitus Bank does not hold a banking licence of its own.
Complaints and external dispute resolution
If you have a complaint, contact us through our Support page and we will respond. Financial firms in Australia are expected to be members of the Australian Financial Complaints Authority (AFCA), which provides free and independent dispute resolution. Our AFCA membership details will be published here once they are confirmed.
How we protect your data
- All traffic between your device and Unitus Bank is encrypted using HTTPS (TLS).
- Account data is stored with Google Cloud (Firebase), which encrypts stored data at rest.
- Passwords are handled by Firebase Authentication and are never stored in plain text.
- Identity documents are reviewed by authorised staff and deleted after verification.
- Access rules ensure customers can only see their own records, and only authorised staff can open the admin portal.
Account security
- Two-factor authentication. Turn on authenticator-app codes (the same standard used by Google Authenticator) from your dashboard. Once enabled, a fresh six-digit code is required every time you log in.
- Login history. Every sign-in is recorded with its device, time and approximate location, and you can review it at any time.
- Staff audit trail. Every administrative action, including approvals, declines, card freezes and balance changes, is recorded in a log that cannot be edited or erased.
- Manual approval. Deposits, transfers, bill payments, card requests and loans are each reviewed and approved by our team before they take effect.
Identity verification and financial crime controls
We apply Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) checks. Transfers of US$10,000 or more, and all international transfers, are reviewed manually before they are processed.
Your part
Keep your password and authentication codes confidential, use a unique password, and tell us immediately if you suspect unauthorised activity. We will never ask for your password or full card security code by email, phone or message.
Read our Privacy Policy and Terms and Conditions for more.
