Scam check

Worried it’s a scam? Use our quick check tool to see the warning signs and what to do.

Identify a possible scam:

Text message

  1. Is the sender familiar to you?

    Scam messages often come from a number you won’t recognise. They can claim they’re from a trustworthy business or organisation. But scammers send them from a random or private phone number.

  2. Is the message asking you to take action?

    Scammers often pressure you to act quickly ‐ encouraging you to make a payment immediately, or verify your private info by logging in. They may threaten you with fake fines or disabling services and account access.

  3. Is there a link in the message?

    Scam messages sometimes include a link to a fake website that can look very convincing. Scammers like to use fake websites for banks, Centrelink and social media. Know that many reputable organisations, such as government services and Australia Post, do not include links in their SMS notifications.

Did you answer yes to any of these questions?

  • It’s likely a scam

    It sounds like you have been sent a text message scam.

  • If you’ve paid any money or given the login details for your bank account to someone

    Call your bank immediately, let them know what’s happened, and ask for help. Make sure you’re using their public number found on their official website or official app.

    Then report what’s happened to ReportCyber online or using the official app or by calling 1300 292 371. They’ll send your report to the relevant law enforcement agency.

  • If you’ve given away the passwords

    If you’ve given away the login details to any of your online accounts, log in and change your passwords immediately.

    If multi-factor authentication (MFA) is available for your accounts, turn it on to add an extra layer of security.

  • If you haven’t sent money or given away personal details

    Report a suspected scam to Scamwatch. They’ll look into it and add it to their list of current text scams. This’ll help protect others in the future.

  • It’s probably not a scam

    It doesn’t sound like a scam. However, the type of scams we see are changing all the time, so it’s good to be cautious.

  • If you’re still unsure if it’s a scam

    Never use the contact details provided in the text you received.

  • For texts from a person who claims you know them

    Call the original number you have saved for this person or try a different contact method you have for them (for example, their email) to ask if they sent that text to you.

  • For texts that claim to be from an organisation

    Search for the organisation's public number on their official website or using their official app, and give them a call to confirm if the text was real.

Email

  1. Is the sender familiar to you?

    Check:

    • the email address of the sender ‐ does it look strange, or different to the one used previously?
    • how the email greets you ‐ does it use a generic greeting like ‘Dear customer’ instead of your real name?
  2. Is the email asking you to take action?

    Scam emails often pressure you to act quickly ‐ encouraging you to make a payment immediately, or verify your private info by logging in. They may threaten you with fake fines or disabling services and account access.

  3. Is there a link or attachment?

    Scam emails are often unexpected and encourage you to click on a link or open an attachment. Be wary, especially if you weren’t expecting the email.

Did you answer yes to any of these questions?

  • It’s likely a scam

    It sounds like you have been sent a scam email.

  • If you’ve paid any money or given the login details for your bank account to someone

    Call your bank immediately, let them know what’s happened, and ask for help. Make sure you’re using their public number found on their official website or official app.

    Then report what’s happened to ReportCyber online or using the official app or by calling 1300 292 371. They’ll send your report to the relevant law enforcement agency.

  • If you’ve given away the passwords

    If you’ve given away the login details to any of your online accounts, log in and change your passwords immediately.

    If multi-factor authentication (MFA) is available for your accounts, turn it on to add an extra layer of security.

  • If you haven’t sent money or given away personal details

    Report a suspected scam to Scamwatch. They’ll look into it and add it to their list of current text scams. This’ll help protect others in the future.

  • It’s probably not a scam

    It doesn’t sound like a scam. However, the type of scams we see are changing all the time, so it’s good to be cautious.

  • If you’re still unsure if it’s a scam

    Don’t click on the links, or use the contact details provided in the email you received.

    Search for the organisation’s public number on their official website or using their official app, and give them a call to confirm whether or not they sent the email to you.

Social media

  1. Is someone asking you for money or private info on social media?

    Scammers create fake profiles of people or organisations on social media. These scammers try to gain your trust and trick you into giving money or personal information.

  2. Is the ad on social media selling something for an unbelievable price?

    Scammers create fake accounts imitating real businesses, and post ads promoting goods or services that don’t really exist. Be wary if the price is too good to be true or that the offer is for “a limited time only”.

  3. Is someone you know reaching out to you to say they received a suspicious message from you on social media?

    If your account gets hacked, a scammer might use it to scam your friends and family. If someone you trust tells you they got a suspicious message from you that you didn’t send, change your password immediately.

Did you answer yes to any of these questions?

  • It’s likely a scam

    It sounds like you’ve been scammed on social media.

  • If you’ve paid any money or given the login details for your bank account to someone

    Call your bank immediately, let them know what’s happened, and ask for help. Make sure you’re using their public number found on their official website or official app.

    Then report what’s happened to ReportCyber online or using the official app or by calling 1300 292 371. They’ll send your report to the relevant law enforcement agency.

  • If a scammer has got the password

    If you suspect a scammer has accessed your social media accounts, log in and change your passwords immediately. You should also turn on multi-factor authentication (MFA) to add extra security to your accounts.

  • Report it to the social media provider

    If you think someone's got access to your social media accounts or you’re being scammed on social media, report it to the provider. You can also report fake ads on social media, and block the ad you saw from appearing in your reel/feed.

  • Report it to Scamwatch

    Report a suspected scam to Scamwatch. They’ll look into it and add it to their list of current text scams. This’ll help protect others in the future.

Phone

  1. Has this phone call come out of the blue?

    Scam phone calls are often unexpected, or they'll be from a company you don’t normally deal with. A scammer might call you and claim there’s a problem with your account or a service you use ‐ or you might see an ad on a website saying you've got a virus or there's an exclusive investment opportunity for you, and to call them to sort it out.

  2. Is the caller asking for access to your computer, or personal info?

    They may tell you to install software, let them have remote access to your computer, or ask you to share the login details for your accounts so they can ‘fix’ the problem for you.

  3. Does it seem urgent?

    Scam callers will often make the fake problem seem extremely important and risky to ignore. They often use scare tactics to make you panic, and prevent you from questioning them.

Did you answer yes to any of these questions?

  • It’s likely a scam

    It sounds like you’ve received a scam phone call. It’s okay to hang up immediately.

  • If you gave them access to your computer

    If someone has remote access to your computer, turn off power to the device, and take it to a trusted repair service.

  • If you’ve paid any money or given the login details for your bank account to someone

    Call your bank immediately, let them know what’s happened, and ask for help. Make sure you’re using their public number found on their official website or official app.

    Then report what’s happened to ReportCyber online or using the official app or by calling 1300 292 371. They’ll send your report to the relevant law enforcement agency.

  • If you’ve given away the passwords

    If you suspect a scammer has accessed your social media accounts, log in and change your passwords immediately. You should also turn on multi-factor authentication (MFA) to add extra security to your accounts.

  • Report it to Scamwatch

    Report a suspected scam to Scamwatch. They’ll look into it and add it to their list of current text scams. This’ll help protect others in the future.

  • It’s probably not a scam

    It doesn’t sound like a scam call. However, the type of scams we see are changing all the time, so it’s good to be cautious.

  • If someone rings and asks for access to your devices, or for your login details and passwords ‐ don’t give it to them.

    Know that reputable organisations will never ring you out of the blue and ask for this information over the phone.

    If you want to check a caller is legitimate, ask them for a reference number for the call, and hang up. Then look up the company’s public number found on their official website or using the official app, and call them directly to confirm if the call was legitimate.

Website

  1. Do the prices or products on the website look too good to be true?

    Scam sites often sell goods at a much lower price than you've seen elsewhere. They might also have loads of 5 star reviews that seem old or generic, or images that look like they’ve been taken from elsewhere.

  2. Does the website content or the web address seem wrong somehow?

    Scam websites are often poorly written and created quickly. The clues may be misspelling of words, broken links, images that don’t load, or links to social media pages with very few followers.

    Or the web address (the URL) may not seem quite right. Scammers use web addresses that look very close to an official URL, but might have one word or letter different.

  3. Do the contact details for the company look out of date or dodgy?

    The contact details given on a scam site ‐ like their physical address, email address or phone number ‐ will often not work, or be missing altogether.

Did you answer yes to any of these questions?

  • It’s likely a scam

    It sounds like you’ve received a scam phone call. It’s okay to hang up immediately.

  • If you’ve bought something from the site

    If someone has remote access to your computer, turn off power to the device, and take it to a trusted repair service.

  • If you’ve paid any money or given the login details for your bank account to someone

    Call your bank immediately, let them know what’s happened, and ask for help. Make sure you’re using their public number found on their official website or official app.

    Then report what’s happened to ReportCyber online or using the official app or by calling 1300 292 371. They’ll send your report to the relevant law enforcement agency.

  • Report it to Scamwatch

    Report a suspected scam to Scamwatch. They’ll look into it and add it to their list of current text scams. This’ll help protect others in the future.

  • It’s probably not a scam

    It doesn’t sound like a scam website. However, the type of scams we see are changing all the time, so it’s good to be cautious.

  • If you’re shopping online, buy from stores you already know and trust, or stores that have been given genuine good reviews by previous customers. Don’t risk buying from a website if you're not sure about it. Try to buy the item from a physical shop rather than online if you’re unsure.

Disclaimer: Please note the purpose of this check is purely educational. The aim of Service Victoria is to increase general awareness of cyber safety. Following the recommendations in this check does not protect you in all situations. For the most up-to-date and reliable information, you should consult with a qualified cyber safety expert.

Service Victoria accepts no liability for errors, does not guarantee protection of your accounts across the web, nor do we offer any kind of warranty or guarantee from using this check. Service Victoria does not commit to the information included in this check being the most up-to-date and accurate. The standards and recommendations for cyber safety change rapidly, and it is your responsibility to ensure that your practices are the best they can be in all situations now and in the future.

By using the content and tools included in this check, all users acknowledge and release the creators and operators of this check from any associated risks. Service Victoria does not authorise the copy or disclosure of any information included in this check.

Read more and improve your skills

Protect your passwords

Having a strong password helps keep your accounts safe and secure. Check the strength of a password.

Cyber Safety Check

Answer a few questions to get a customised action plan to help you become safer online.

How to spot a scam

Stay safe from scams, learn how to spot a scam and avoid getting scammed online.

Think you’ve found a scam?

Report it to provide evidence to law enforcement, help track trends and stop others from being scammed.

ReportCyber: (External link) Report lost personal info or money from a scam at 1300 292 371. Your report will be forwarded to the right law enforcement agency.

ScamWatch: (External link)Also report suspected scams to ScamWatch so they can take down scam websites, ads, or contact info.