Protecting your ALDI Mobile account

We take your account security seriously because your mobile number is more than just a way to keep in contact - it's often the key that unlocks access to your emails, banking, social media and work accounts.

Keep reading to understand how we keep your account safe and what you can do to help keep it that way.

How do we keep your account safe?

Everything at ALDI Mobile starts with identification.

  • When you login to My ALDI Mobile, you will be required to provide your mobile number or ALDI Mobile account number and your password.
  • If you contact us on the phone, you will be required to answer some identification questions before we assist you with your ALDI Mobile account.
  • If you contact us through online form or email, we will also ask you identification questions to ensure you are authorised to access the ALDI Mobile account.
  • If you have a security question listed on your account, we will also ask you for the correct answer before allowing access to your account.
    • If you want a security question added to your account, please contact us.

High risk transactions

After logging in or successfully identifying yourself, there are some things that you may ask us to do that we consider "high risk". 

A high risk transaction is any transaction that may cause you to lose access to your service. 

Transactions that cause you to lose access to your service are considered "high risk" because we know that your phone number may be used to verify access to other online accounts you have, like banking or social media. Examples include:

  • Requests to swap a mobile number to a new SIM card
  • Requests to suspend access to a mobile number
  • Requests to change your existing mobile number to a new number 
  • Requests to terminate a mobile number

Any request to change the personal, contact or security information on an account is considered a high risk transaction. 

Transactions that result in these kinds of changes are considered "high risk" because they potentially change how you interact with your online account, how we identify you and who we allow to access your account and account information. Examples include:

  • Online password change requests 
  • Account contact number change requests 
  • Account contact email address change requests 
  • Change requests related to your name, date of birth or address
  • Adding, editing or removing any authorised contacts listed on the account 

Increased security for high risk transactions

Before a high risk transaction is processed on your account, you will need to verify a unique code that we will send to the primary contact mobile number on your account. 

After you receive the code, you will need to verify that code with us.

If you're in your online My ALDI Mobile account, you will need to type the code in. If you're speaking with us over the phone you will need to provide it to the ALDI Mobile team member.

Online password resets

When you request the password to your to My ALDI Mobile account to be changed, the process is slightly different.

You will first need to provide us with an ALDI Mobile phone number attached to the account. After you enter your phone number, a reset link will be sent via SMS to the primary mobile number on the account.

When you click the reset link in your SMS, you will need to enter your new password twice and provide the date of birth listed on the account.

If you input the wrong date of birth, the password reset will not proceed. If the date of birth matches, the password to your My ALDI Mobile account will be reset.

Protecting yourself from unauthorised online password resets

An unauthorised online password reset is a request to reset your My ALDI Mobile account password that was not made by you.

Unauthorised access to an ALDI Mobile account often starts with an unauthorised online password reset. 

For a successful online password reset to occur, the person performing the reset must:

  1. Know at least one active mobile number on the ALDI Mobile account to trigger the password reset SMS

  2. Have access to the primary mobile number on the account to receive the reset link

  3. Know the date of birth attached to that ALDI Mobile account to verify the change of password

An unauthorised person may already have access to your primary mobile number and the information they need to answer our identification questions before they attempt an unauthorised password reset.

What could happen if someone gets access to my ALDI Mobile account?

When someone gets access to your ALDI Mobile account, there are many ways you could be impacted:

Any mobile service on the account could be swapped to a different SIM card

This means that the number will be disconnected from the current SIM card and it will be moved to a new SIM card. 

Whoever has the new SIM card will now start receiving phone calls and messages sent to that number.

The contact, personal and security information on that account could be changed

If someone gains access to your My ALDI Mobile account, they could also change key information on the account that may make it harder or impossible for you to gain access again.

This includes changes to the name on the account, the date of birth, the contact email or mobile number and the names of any authorised contacts on the account.

Your usage information could be exposed

Someone with access to your My ALDI Mobile account will also be able to see the usage of each mobile service on the account. That means they could see the mobile numbers you've been interacting with and the times and dates you interacted with them.

Protecting your ALDI Mobile account using Multi-Factor Authentication (MFA) 

A key way to protect your ALDI Mobile account is to secure your email account with Multi-Factor Authentication (MFA).

Multi-Factor Authentication adds an extra layer of security to your email login process. Instead of just entering a password, MFA requires a second form of verification, like a code sent to your phone, a fingerprint scan, or an authentication app.

This means even if someone steals the password to your email account, they still can’t access it without that second factor.

5 reasons your email needs MFA

Here's five reasons to enable MFA on your personal email address:

1) Your email is the master key

Your bank account and many other online services use your email address for password resets.

If someone gains access to your email inbox, they can potentially reset the password to any online account that your email address is linked to.

2) Passwords aren't enough

Having strong password isn't enough anymore. Passwords can be compromised through phishing scams, data breaches and other types of cyber attacks.

MFA significantly reduces the risk of unauthorised access to your email inbox.

3) Scams and hacks are on the rise

Cybercrime is on the rise and the cybercriminals are getting smarter.

MFA helps protect you even if you accidently click on a malicious link or enter your details into a fake website.

4) Peace of mind

Knowing that your email address is protected with MFA gives you confidence that your personal information is safer, even if your password is leaked.

5) It's quick and easy to do

Most major email providers offer simple, easy MFA setup options. It usually takes just a few minutes and the security benefits are long-lasting.

How to setup MFA on your email account

Here are some MFA how-to guides for popular email providers: 

If your email provider isn't listed above, reach out to them directly to see how to enable MFA.

Why do we care?

At ALDI Mobile, we believe MFA is good practice for any online account. While your ALDI Mobile account now uses SMS verification to protect against high risk transactions, your email is still the master key to many other services - including your bank. Keeping it secure keeps you safer everywhere.

Links and resources

  • Click here to see the ACMA's tips on dealing with phone scams.
  • Click here to read Scamwatch's advice on protecting yourself from scams
  • If your identity has been compromised or stolen, IDCARE can help. Call 1800 595 160 or visit www.idcare.org.