Security of my holdings & InvestSMART website

Yes. Under the Professionally Managed Account (PMA), all investors are the registered and beneficial owners of the investments held in a CHESS sponsored account.

InvestSMART is pleased to announce that its two-factor authentication (2FA) - or two-step verification security system is now live across all its portfolio platforms, plus its Intelligent Investor and Eureka Report sites.

What is 2FA?

Two-factor authentication (2FA) - or two-step verification - is a security feature that adds an extra layer of protection to your account. Instead of using a single factor to authenticate your identity, like a password, you can use a second, one-time code sent to you via SMS or generated in an authenticator mobile application like Google Authenticator, Microsoft Authenticator or Authy

How do I enable 2FA?

The 2FA system is opt-in. To activate it, please read the following steps.

You can click here to go directly to this feature or click on the ‘My Account’ button in the top right corner and then on the My Account Tab. You will see the third option down the list is Two-Factor Authentication.

There are two different 2FA methods to choose from:

1. Get a code via SMS/text or

2. Generate a code via an Authenticator Application like Google Authenticator, Microsoft Authenticator or Authy.

You can choose both methods. If you enable both, the authenticator app will be used as the primary method.

Method for turning on the SMS/Text Message.

1. Turn on the SMS/Text Message toggle.

2. An SMS/text is sent to your mobile device with a code

3. Enter the code and click the “Verify & Save Setting” button.

4. An ‘All Done’ message will appear confirming your SMS authentication is set up

Method for turning on the Authenticator Application

1. Turn on the Authenticator Application toggle

2. Download the Authenticator of choice and then use the generated QR code

3. Enter the code and click the “Verify Code” button.

4. An ‘All Done’ message will appear confirming your Authenticator App is set up

Once you have activated your two-factor authentication (2FA), you will now have an extra step at login. As usual, your first step will be entering your email and password combination. The second step will require you to enter a valid 2FA code from either the SMS you receive or generate the code via your authenticator app of choice.

Please be aware that you can:

• Select the “Don’t ask again on this device for 30 days” option.

  • Choosing this means a 2FA code won’t be required for 30 days.

  • Your login process will be as usual on that particular device/browser.

• With 2FA enabled, you should be able to bypass the Google reCAPTCHA process.

If you have any questions or need further assistance, please click on the salmon-coloured help button in the bottom right-hand corner of the page.

This help button will begin a live chat with a team member during office hours. If your query is outside office hours, we will get back to you as soon as possible.

Under the Professionally Managed Account (PMA), all investors are the registered and beneficial owners of the investments held in a CHESS sponsored account.

If anything occurred to see InvestSMART cease operations, your investments would still remain in the name of the investor and/or entity listed as the Professionally Managed Account (PMA) holder.

You would then be able to facilitate the transfer of your investments to another CHESS sponsored account that you have access to and control over to continue to manage your investments.

Your privacy and security are our top priority.

Our bank-level web security keeps your information safe and secure (for the geeks out there, that’s our 256-bit SSL/TLS certificate).

Your investments are held safely in your own name under your own individual Holder Identification Number (HIN).

We never share your personal information with unrelated third parties or advertisers.

You can change your bank account details online here.

Or login and go to My Account > My Investments > Portfolio Actions > Investment Preferences.

You can also check your current bank account details.

Please note: We have an enhanced level of security when changing bank details.

To change these bank details:

1. Enter the last four (4) digits of your current bank account number.

2. Add the name of who holds this bank account in New Account Name

3. Enter the BSB

4. Enter the new account number

5. Scroll to the bottom of the page and click Save Preferences

6. You will be asked to verify using a code sent to either your mobile phone or email address.

Security Process for Changing Bank Details

After you have completed the steps above, please follow this additional security process to ensure the safety of your account:

1. Send a copy of your bank statement showing the account holders name(s) and the BSB/ account number.

2. Email the statement to invest@investsmart.com.au, making sure that the name of the bank account holders matches the PMA holders.

3. We'll give you a call on your registered phone number to confirm that you're the one requesting the change.

By completing these additional steps, we can further ensure the security of your account when changing bank details.