These scams attempt to steal personal information or gain access to financial accounts.
How Phishing Emails and SMS Messages Work
Description
Phishing scams are designed to trick individuals into revealing sensitive information such as passwords, account numbers or verification codes. These scams commonly appear as emails or SMS messages that look like they come from trusted organisations including banks, superannuation funds or government services.
A phishing message usually contains a link to a fake website designed to look almost identical to the legitimate organisation's login page. When someone enters their username and password, the scammer captures these details and may attempt to access the real account.
Phishing attacks are often sent to thousands of people at once and rely on urgency or fear to encourage quick responses. Regulators such as the Australian Competition and Consumer Commission and the Australian Securities and Investments Commission regularly warn consumers about phishing scams targeting financial accounts.
What to watch out for
- Messages asking you to confirm or update account details
- Links directing you to login pages or verification forms
- Unexpected alerts claiming there is a problem with your account
- Emails that contain spelling errors or unusual formatting
- Requests for passwords, PINs or security verification codes
How to stay safe
- Do not click on links in unexpected emails or text messages
- Access your accounts by typing the official website address directly into your browser
- Never share passwords, security codes or login details
- Enable multi-factor authentication (MFA) where available
Contact the organisation directly if you are unsure whether a message is genuine
Remote Access Scams and Fake Technical Support
Description
Remote access scams occur when criminals convince individuals to install software that allows the scammer to control their computer remotely. Fraudsters may claim to be from a technology company, internet provider or security service and warn that there is a problem with the computer.
Once remote access software is installed, scammers may be able to view personal information, access online banking or investment accounts, and even transfer funds without the user realising.
Remote desktop tools such as AnyDesk or TeamViewer are legitimate programs often used by IT professionals. However, scammers may misuse these tools to gain unauthorised access to computers and financial information.
What to watch out for
- Unexpected phone calls claiming your computer has a virus or security issue
- Requests to download or install remote access software
- Instructions to log into your bank or investment accounts while connected
- Requests to transfer money to fix a supposed problem
- Callers who create urgency or pressure you to act quickly
How to stay safe
- Never install software at the request of an unsolicited caller
- Hang up if someone claims to represent technical support unexpectedly
- Only allow remote access from trusted IT providers you have contacted yourself
- Keep your computer operating system and security software updated
- If you suspect your device has been compromised, disconnect from the internet and seek professional assistance
Government Impersonation Scams (ATO or MyGov)
Description
Government impersonation scams occur when criminals pretend to represent official agencies to obtain personal information or payments. These scams may involve phone calls, emails or text messages claiming to be from government organisations.
Common examples include scammers pretending to represent the tax office or government services, claiming there is an outstanding debt, refund or investigation. Victims may be threatened with legal action, fines or arrest if payment is not made immediately.
Government agencies such as the Australian Taxation Office and services connected to myGov warn that scammers often attempt to imitate official communications.
What to watch out for
- Messages claiming you owe money and must pay immediately
- Threats of legal action, fines or arrest
- Requests to make payments using gift cards, cryptocurrency or unusual payment methods
- Links directing you to fake government login pages
- Unexpected calls requesting personal or financial details
How to stay safe
- Government agencies generally do not demand immediate payment over the phone
- Access government services only through official websites
- Do not provide personal information in response to unsolicited messages
- Contact the agency directly if you are unsure whether a message is legitimate
- Report suspected scams to Scamwatch