Website Security & Fraud Prevention

Overview

AAD Logistics PTY takes practical steps to protect the website, your information and your payments. This page describes those measures in plain terms and, just as importantly, explains how to protect yourself from fraud that targets customers of businesses like ours. For customers paying by bank transfer, the biggest risk is a fake email telling you to pay the wrong account. Please read the fraud section carefully.

How we secure the website

• HTTPS everywhere. Every page, form and upload on https://aadlogisitcsau.com is served over an encrypted connection. Look for the padlock in your browser and check the address begins with https.
• Secure hosting. The website runs on managed hosting with server-level protections, monitoring and regular backups.
• Software updates. WordPress, WooCommerce and installed components are kept current to close known vulnerabilities.
• Least-privilege access. Administrator access is limited to the people who need it, each with their own account and strong authentication. Staff see only the data their role requires.
• Protected upload handling. Files you upload, such as site photos, plans and remittance advices, are checked for type and size, stored outside public web paths, and are accessible only to authorised staff.
• Spam and bot protection. Quote, contact and checkout forms use bot detection and rate limiting to block automated abuse.
• Logging and monitoring. Access and error logs are reviewed for unusual activity, such as repeated failed logins.

No card data stored

We do not store card numbers, and no card details are entered at our website checkout. If you choose to pay by card, we email a tax invoice with a secure card payment link after reviewing your order, and your card details are entered only on the secure payment page reached from that link. Our staff will never ask for card numbers by phone or email. If any message claiming to be from AAD Logistics asks you to send card details, it is not from us. Both payment methods are explained in our Payment Policy.

How we protect your information

Personal information is handled in line with our Privacy Policy. Order and customer data is stored in the WooCommerce system on secure hosting, with access restricted to staff who need it. Backups are encrypted and retained for a limited period. Information shared with carriers is limited to what the delivery requires. We retain transaction records for 7 years as required for tax purposes, then delete or de-identify them.

Recognising fraudulent payment-instruction emails

Criminals sometimes intercept or imitate business email to send customers fake invoices or “updated” bank details. The email may look like it comes from us, quote your real order number and copy our layout. Paying the account in that email sends your money to the criminal, and it is rarely recovered.

Our rules, which never change

• Our banking details appear only in the order confirmation and are confirmed by our sales team. They are never published on public pages.
• Our banking details do not change. We will never email you to say our account has changed.
• We never ask you to pay a different company, a personal account, an overseas account or a payment app.
• We never pressure you to pay within hours, threaten cancellation by email without a phone call, or ask you to keep a payment confidential.

Warning signs

• A sender address that is not exactly @aadlogisitcsau.com. Check for extra letters, swapped characters, a different ending or a free webmail domain.
• A message announcing new bank details, a new account name or a new bank.
• An invoice with a different total, a different entity name or a different ABN from your order confirmation.
• Urgency, secrecy or unusual language.
• Links that ask you to log in or “confirm” details, or attachments you were not expecting.

What to do

1. Always verify bank details by phone on +61 2 8310 8053 before transferring funds. Use the number on this website, not a number in the email.
2. Compare the details with your original order confirmation. If anything differs, do not pay.
3. Forward suspicious emails to sales@aadlogisitcsau.com so we can warn other customers.
4. If you have already paid a suspicious account, call your bank immediately and ask for a recall, then call us.
5. Report the incident to the Australian Cyber Security Centre through ReportCyber and to Scamwatch.

Protecting your own account

If you create an account on the website, use a unique password that you do not use elsewhere, and keep your email account secure with two-factor authentication where your provider offers it. Most invoice fraud starts with a compromised email account. Log out on shared devices. Contact us if you think your account has been accessed by someone else.

Reporting a security issue

If you discover a security vulnerability on our website, please tell us at sales@aadlogisitcsau.com with the subject “Security report”. Include enough detail for us to reproduce the issue. Please do not access, change or download data that is not yours, do not disrupt the service, and give us reasonable time to fix the issue before disclosing it. We appreciate responsible reports and will acknowledge them.

Incidents

If a security incident affects your personal information in a way likely to cause serious harm, we notify affected customers and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme. We tell you what happened, what information was involved and what you can do to protect yourself.

Related pages

Payment Policy, Privacy Policy, Cookies & Tracking Technologies and Acceptable Website Use.

Contact

AAD Logistics PTY, 4 Milton Cct, Port Macquarie NSW 2444, Australia. Email sales@aadlogisitcsau.com. Phone +61 2 8310 8053, Monday to Friday 8:00 AM to 5:00 PM and Saturday 9:00 AM to 3:00 PM, Brisbane time.