Welcome to CAF Bank

The bank dedicated to supporting charities and social purpose enterprises. So we understand what you need.

Current account Savings Loans Security centre Help About us

How we protect you

From dual authentication to encryption, we're serious about your security.

Online threats grow more sophisticated every day. That’s why we’re doing everything we can to make sure our security processes stay one step ahead, so you can bank with confidence. Here’s what you can expect.

Verifying your identity

We need to know it’s you trying to access your account. That includes making sure that your login details and password haven’t been compromised. We do this in a few ways.


1. Two-factor authentication

We provide two-factor authentication to verify your identity. So as well as entering your username and password, we’ll issue a One Time Passcode (OTP) by text message or you can authenticate by using the HID Approve app. If you have a smartphone, selecting the HID Approve app is a secure and flexible way to log in and authorise payments. The app works even if you don't have internet access or a strong mobile signal. Once installed, you can choose to receive one-time passcodes directly in the app - or by text message if you prefer.

Never share your OTP with anyone, not even a CAF Bank employee.


2. Keeping your account secure

To keep your account secure, you’ll need to generate a One Time Passcode each time you:

  • Log in to online banking
  • Authorise a payment
  • View or change your online banking details
  • Manage your online users

3. Limiting account access

We’ll also disable access to your account after a number of failed login attempts. If this happens, please fill out this form.

Text notifications

To help you stay informed when changes are made to your account, you will receive a text message when: 

  • You create a payee
  • You create a bulk payment template
  • You amend a bulk payment template
  • You add a new beneficiary
  • You amend a beneficiary

These notifications are sent only to you.

All approvers and administrators in your organisation will receive a text message when:

  • The Approval Matrix is edited
  • A payment is awaiting approval

 

Secure encryption

Our websites use industry standard web encryption. In the URL bar, you should only see the following website addresses beginning https://www.cafonline.org/ and https://secure.cafbank.org/. If you see any other address, do not continue and report it to us immediately using the suspicious email address below.

We have additional firewalls on all our systems to prevent unauthorised access, and we encrypt all data before sending it over the internet.

We get our systems regularly tested and audited by independent security experts to make sure they are safe.

 

Working together to stay secure

Our systems are designed to be as secure as possible. But we can only protect your account if we have the right details.

Let us know immediately if any of the following change:

  • Account contact details
  • Your organisation's address
  • Trustees
  • Authorised signatories or business cardholders leave your organisation

You can find the relevant forms to complete here.

Inactivity timeouts

Online banking will automatically log users out after 5 minutes of inactivity. This helps to make sure nobody else can access your account. 

Confirmation of Payee

Confirmation of Payee (CoP) is a bank account name-checking service to combat fraud and misdirected payments. CoP helps protect you from Authorised Push Payment (APP) fraud. APP fraud is when a fraudster tricks you into making a payment to an account controlled by them. This is different from other kinds of scams, for example, when a fraudster steals money from your account without you knowing. With APP fraud, you authorise the payment under false pretences.

Please see the section on Confirmation of Payee page for more details.

 

Contact us

CAF Bank customers

03000 123 456

(9am - 5pm Monday to Friday, except public holidays)


Log in to CAF Bank Online

Lost or stolen card?

Call our 24-hour lost and stolen number on 03000 123 606.

 

Seen a suspicious CAF or CAF Bank email?

Forward it to us:

scamreporting@cafonline.org

CAF Bank Limited is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority (Financial Services Register number: 204451).

CAF Bank Limited Registered office is 25 Kings Hill Avenue, Kings Hill, West Malling, Kent ME19 4JQ. Registered in England and Wales under number 1837656.