Astonishingly dodgy
Astonishingly our small business was told by the South Australian Government's Department Of Education that we had to sign up to EFTSURE in order to be paid (and we were told this AFTER we'd already provided our services, so really this is blackmail).
In following the subsequent online link EFTSURE sent us (which presented as a scam, containing as it did the official logo of the SA Government and Department Of Education) to Verify ourselves we were asked to choose our bank, and then provide our Commonwealth Bank Client Number and Password (which we foolishly did) at which point our screen broadcast (not just our relevant Business Account but) ALL our personal and business bank accounts, and their balances.
Subsequent research by us shows that EFTSURE don't even do this bank contact themselves - they use a fourth-party plugin called "Yodlee" which smells dodgy in every way.
Upon seeing Yodlee sign into ALL our bank accounts we immediately phoned Commonwealth Bank Security who stated that "Nobody should ever reveal (the information Yodlee demanded) to anyone including their own Partners" - and that "In our provision of such information to Yodlee/EFTSURE we had assumed TOTAL LIABILITY for any subsequent losses we may ever incur due to malicious activity by EFTSURE, Yodlee or anyone who ever hacks them."
CBA at this point suggested (and we immediately did) reset ALL our banking ID's and passwords as provided to EFTSURE/Yodlee which is a major inconvenience.
We have immediately raised all these concerns to our local MP, and the SA Minister For Education, and along the SA Dept. Education payment chain we use - all of whom have replied (we don't know anything about EFTSURE other than we need all our suppliers to sign up for it, and give that instruction to them freely).
When we then had EFTSURE phone us to supposedly finally "Verify" us so that Dept. Education could begin paying us - we spent about 10 minutes talking through all these details again with the EFTSURE phone operator (who had a near total lack of English skills) before the operator told us "Wait I'm putting you on hold" - at which point we waited for about 15 seconds before she came back on the line to say "Our apologies you're already Verified and we don't need to make this phonecall, Goodbye"?!
Worth also noting that when we missed EFTSURE's first phonecall to "Verify" us their phone operator's messages (2 of them, they rang both our phones) clearly stated that "I'm from the Department Of Education" which is a total lie (the phone operator works for private third party EFTSURE, not the SA Government).
Just click through this company's social media and online content - a lot of it presents visually like a gamers scam, the Instagram video of their "PR head" presents like a rank amateur holding his lapel microphone to his mouth (not what we'd expect from the world's leading online security experts). We're not saying it is - but clearly nobody should be involving this nonsense entity when they're not really doing anything more than checking out supplier details that anyone can check themselves (like our ABN, our GST registration)?
We also believe that EFTSURE use fifth-party external plugins to provide their own website's security.
We also note that once our EFTSURE Account went live it bizarrely stated to us that the "last access' to our EFTSURE Account was from "Country Code ZA" which is South Africa?
* Our final question remains - what is (for example SA Department Of Education) paying EFTSURE for this service? No fee is charged on the payment of our Invoice so it must be a silent and additional fee being paid to EFTSURE by the SA Government, or whoever else is using EFTSURE to "secure" their payments?
Not sure what any of us can do - but along with seemingly MANY others we're just raising the red flag here.
18. februar 2026
Anmeldelse skrevet uten oppfordring