Incident

OFX continues to progress its investigation of the cybersecurity incident involving unauthorised access to data.

The investigation confirmed the databases supporting OFX’s client platforms were not accessed.

OFX Security and IT teams took immediate steps to contain the incident and OFX has increased monitoring of client accounts. OFX has not identified any unauthorised access to client accounts or funds. The affected files did not contain copies of identity documents. None of the accessed data can be used to make a payment on the OFX platform.

Services have continued to operate normally and the client platform has remained fully available.

OFX has been directly contacting affected clients and individuals.

Last updated: 4 October 2026 11am AEDT

OFX is investigating a cybersecurity incident involving unauthorised access to data, including data relating to some clients. There also appears to be data relating to individuals who have interacted with OFX in non-client capacities, such as job applicants.

At this stage, OFX has not identified any unauthorised access to client accounts or funds. It does not appear that any copies of identity documents have been accessed. It also appears that none of the data accessed can be used to make a payment in the OFX platform.

OFX’s services and systems continue to operate normally and remain fully available.

The security of our clients’ accounts and information is our highest priority. OFX’s IT and Security teams responded immediately when they became aware of the incident and have implemented containment actions.

All clients and individuals affected will be contacted directly by OFX if their data has been accessed.

What should you do ?

OFX has begun directly contacting clients and individuals if their data has been accessed.

How will I know if I have been impacted?

OFX has been directly contacting affected clients and individuals.

Is my OFX account secure?

The investigation confirmed the databases supporting OFX’s client platforms were not accessed.

OFX Security and IT teams took immediate steps to contain the incident and OFX has increased monitoring of client accounts. OFX has not identified any unauthorised access to client accounts or funds. The affected files did not contain copies of identity documents. None of the accessed data can be used to make a payment on the OFX platform.

Are we still operating as normal?

Yes. OFX’s services and systems continue to operate normally and remain fully available. You can continue to use your OFX account.

We can confirm the databases supporting OFX’s client platforms were not accessed.

How will you keep clients updated?

We will continue to update this webpage regularly with the latest updates. OFX has begun contacting clients directly if their data has been accessed.

Why didn’t you tell me sooner?

Thank you for your patience while we worked through our investigation. We contacted impacted clients as soon as we had identified their information may have been accessed. We felt it was important to be transparent and wanted to ensure those impacted could stay alert and take steps to protect themselves online.

We’re now moving into the phase of communications. Impacted clients and individuals will start to receive updates that confirm what information relating to them was accessed.

How can I get in touch?

We’ve set up a dedicated phone line to support general questions the incident. Please refer the numbers below for your region.

For account related enquiries, you can email us at [email protected] .

Australia : 1800 524 924

New Zealand : 0800 482 922

United Kingdom : 020 3996 1739

Singapore : Personal: +65 6817 8747 , Business: +65 6817 8748

Hong Kong : Personal: +852 3460 4569, Business: +852 3460 4582

Ireland : +353 1 270 8804

Canada : (844) 301-0359

United States : (844) 301-0359

What should I do if I am worried my OFX account has been compromised?

If you believe your account has been compromised, the OFX team straight away.

What can you do to stay safe online?

If you have been impacted we will you directly. In the meantime, here are some general steps you can take to help stay safe online:

Check your account regularly . If you see anything you don’t recognise, us straight away.

Never your one-time password , password, or security details with anyone. OFX staff will never ask you for this information.

Set up passkeys for the best possible security on your OFX account.

Turn on two-step authentication. Use it for your email and other online accounts, wherever it’s available.

Remain alert , especially through email, text message or telephone calls, particularly where the sender or caller purports to be from OFX. Don’t click links or open attachments you weren’t expecting even if the message looks like it’s from us.

Visit our security support page for tips on how to stay safe online, such as password hygiene and scam awareness.