Latest scams, fraud and security alerts

• Be cautious of unexpected emails or SMS messages, or phone calls,
• Do not click on any links, or open any attachments that are unfamiliar or appear suspicious.
• Never enter credit/debit card information on any unknown, suspicious or untrustworthy websites.
• Never provide your passwords, account numbers, PINs, or OTP to anyone.
• Regularly check your transactions. If you notice anything unusual, contact us right away.
• Contact your provider/bank immediately on a trusted number if you’re contacted by someone saying your account is at risk, under review, or locked, or if you enter personal details on a website that you suspect is suspicious.
• Only use trusted app stores and avoid third-party app downloads.

If you suspect fraud on your account or have shared financial information or transferred money as a result of this scam, please contact us straightaway. Our Customer Protection Team is available 24/7 to help you.

You can also report scams to the Australian Government’s Scamwatch and the Australian Cyber Security Centre’s ReportCyber.

Impersonation scams imitate not only banks, but government agencies, organisations and even friends or family members. Here are some tips to help you protect yourself:

• Be cautious of unexpected emails or SMS messages, or phone calls, and do not click on any links, or open any attachments.
• Contact your provider/bank immediately on a listed number if you receive a message from someone saying your account is at risk, under review, or locked or if you enter personal details into a link that you suspect is a scam.
• Do not share personal or financial details, and never provide your passwords, account numbers, or one-time passcodes to anyone.
• Always pause and reassess the situation. Scammers often create a sense of urgency, pressuring you to act quickly.

For more information about bank impersonation scams, visit ANZ Security Hub – types of scams – bank impersonation scams.

If you suspect fraud on your account or have shared financial information or transferred money as a result of this scam, please contact us straightaway. Our Customer Protection Team is available 24/7 to help you.

You can also report scams to the Australian Government’s Scamwatch and the Australian Cyber Security Centre’s ReportCyber.

• Understand the difference between ‘Funds’ and ‘Balances’ in your ANZ account. ‘Funds’ indicate the amount of money you may be able to use, whereas, ‘Balance’ is reflective of the amount in your account, including transactions that are not yet processed (e.g. cheque deposits). Learn more about your ‘funds’ versus your ‘balance’.
• Do not release any goods to the buyer until you are certain the cheque payment has cleared.
• Use PayID when performing transactions. Transactions through PayID can be fast and allow you to cross-check the person buying is who they say they are.

If you suspect fraud on your account or have shared financial information or transferred money as a result of this scam, please contact us straightaway. Our Customer Protection Team is available 24/7 to help you.

You can also report scams to the Australian Government’s Scamwatch and the Australian Cyber Security Centre’s ReportCyber.

• Do your research: Look up the company or platform independently. Check for reviews, complaints, or warnings from official sources.
• Verify endorsements: Just because a public figure appears in an ad doesn’t mean they support it. Scammers often use fake or stolen images.
• Be cautious with high returns: Legitimate investments rarely offer guaranteed or unusually high profits.
• Don’t rush: Scammers often pressure you to act quickly. Take your time to think and consult someone you trust.
• Use secure channels: Never share sensitive information or transfer money through unofficial or unverified platforms.

For more information visit, What is an investment scam, and how can you protect yourself?

If you suspect fraud on your account or have shared financial information or transferred money as a result of this scam, please contact us straightaway. Our Customer Protection Team is available 24/7 to help you.

You can also report scams to the Australian Government’s Scamwatch and the Australian Signals Directorate’s ReportCyber portal.

Screenshot from a social media platform showing a scam message promoting unrealistic investment returns.
 

Screenshot from a social media platform advertising a false investment scheme.
 

Screenshot from US Securities and Exchange Commission showing a message of a sign up page of an investment platform.

Businesses are encouraged to stay vigilant against suspicious communications across email, phone, messaging apps, and social media. Here are some practical ways to help safeguard your business:

• Verify the Source: Always confirm the sender’s email address or phone number. If someone claims to be from a trusted organisation, validate their identity through a separate, known channel.
• Avoid Clicking Links or Downloading Attachments: Only interact with links or files if you're confident about the sender’s legitimacy. Visit websites directly rather than clicking embedded links.
• Limit Personal Information Sharing: Be cautious about what you post online. Cyber criminals may use publicly available details to craft convincing scams.
• Pause and Assess: Scammers often create urgency to pressure quick decisions. Take a moment to evaluate the situation calmly before responding.
• Report Suspicious Activity: If you receive a questionable message, avoid engaging with it. Report it to your IT team, service provider, or relevant authority.

If you suspect fraud on your account, have shared financial information or transferred money as a result of this scam, please contact us straightaway.

You can also report scams to the Australian Government’s Scamwatch and the Australian Cyber Security Centre’s ReportCyber.

ASD’s ACSC encourages Australian organisations to:

• Review their networks for use of vulnerable instances of the Microsoft Office SharePoint Server products
• Consult Microsoft’s customer advisory (CVE-2025-53770) for mitigation advice.

For more information, please read the Australian Cyber Security Centre’s alert, Vulnerability in Microsoft Office SharePoint Server products.

ASD’s ACSC encourages Australian businesses, organisations and government entities to:

• Review their networks for use of vulnerable instances of the NetScaler ADC and NetScaler Gateway products
• Follow Citrix Security Advisory for mitigation advice.
• Ensure affected products are updated to versions that address this vulnerability.

For more information, please read the Australian Cyber Security Centre’s alert, Critical vulnerabilities in Citrix Netscaler ADC and NetScaler Gateway Products.

Australian organisations should review their networks for use of vulnerable instances of the NetScaler ADC and NetScaler Gateway products and consult Citrix's customer advisory Citrix Security Advisory for mitigation advice.

For more information, please read the Australian Cyber Security Centre’s alert: Critical vulnerabilities in Citrix Netscaler ADC and NetScaler Gateway Products