What is phishing?

Phishing is when scammers impersonate trusted entities like banks, telcos or even official government agencies like the ATO, targeting individuals through emails, phone calls, or text messages. The emails and websites they use are designed to look legitimate, often mirroring the branding and logos of the companies or institutions they're imitating.

Tactics they use may include the ‘technical error’; they might claim there has been a system glitch that erased customer data, urging you to re-enter your details; the ‘customer survey’ trick might involve offering a prize to get you to complete a survey that captures your information; the ‘security update’; asking you to update your details for security reasons and the ‘unauthorized activity’ alert: They might even raise alarms about suspicious transactions on your account, then offer to investigate if you just provide your details.

How to spot phishing attempts

Phishing scams are designed to obtain your personal information or getting you to click on malicious links. If you're unsure, contact the company directly using their official website, phone number or mobile app to verify the request. Never use the contact given in the site, text or call you receive.

Here are some red flags to look out for:

• Suspicious sender: The message or email may appear to be from a known company, but the number or email address is unfamiliar or does not match the official contact details.
• Urgent language: Scammers often use urgent language (‘Your account is locked!’, ‘Payment overdue’ or ‘Immediate action required!’) to pressure you into acting quickly without thinking.
• Suspicious links: Never click on links in unsolicited text messages or emails. If you are unsure, go directly to the company's website, app, or phone them directly.
• Requests for personal information: Legitimate companies don’t ask for personal information like passwords or credit card numbers via text or phone calls.

• Suspicious attachments: Don't open attachments from unknown senders. They may contain malware.

What to do you if spot a phishing scam

Even if you've managed to avoid losing money to a phishing scam, reporting it is still crucial. By sharing your story, you contribute to protecting others and stopping these criminals. Report the scam to National Anti-Scam Centre - Scamwatch.