Estimated reading time
6 min
Key points
- Suspicious messages are designed to deceive you into acting fast or sharing information.
- Watch for key red flags: unexpected contact, urgency, links and attachments, requests for details, or anything that feels off.
- Stop, check, and protect to stay safe. Report to protect yourself, others, and help stop scams faster.
What is a suspicious message?
A suspicious message is one that may be unexpected, unusual or tries to pressure you into acting quickly or sharing information.
These are often part of a scam, including phishing - where someone pretends to be a trusted organisation or person to obtain information or get you to click a link.
How to identify a suspicious message
Next time you receive a message, look for these common warning signs:
- Unexpected – You weren’t expecting the message
- Urgent or threatening – Pressures you to act quickly
- Requests personal or financial information – E.g. passwords, codes, bank details
- Includes links or attachments – Especially to “log in” or fix an issue
- Feels off – Unusual sender, poor wording, or “too good to be true”
What could happen if you respond?
Interacting with a suspicious message can expose you to risks, including:
- Malware being installed on your device
- Theft of personal or banking information
- Financial loss or unauthorised transactions
Why it’s important to call out and report scam messages
Calling out and reporting suspicious messages helps to:
- Protect you from further scams or contact
- Warn others in Australia about new scam types
- Help banks and authorities detect and stop scams faster
video
How to stay safe: Stop. Check. Protect.
STOP
Before you click, reply, or download anything, pause and ask:
- Is the message urgent, emotional or threatening?
- Is it asking for personal or financial information?
- Does it seem out of the blue or too good to be true?
Scammers want you to act fast. Don’t rush.
CHECK
Look closer before you act.
- Is the email address familiar?
- Are there spelling mistakes, odd phrasing or unusual requests?
- Are there suspicious links or attachments?
- How is your heart rate?
Go directly to the official website instead of clicking links. Contact the organisation using their official contact number and don’t trust contact details provided in the message or by the caller.
Cybercriminals appeal to our emotions to influence us into doing something they want us to do. Take a moment to assess the situation before you respond.
PROTECT
Take action to keep yourself safe.
- Don’t click on unknown links and attachments.
- Don’t share passwords, codes or sensitive information.
- Don’t give an unknown caller remote access to your device.
- Report the message to your bank, provider, through ReportCyber and/or Scamwatch.
Where to report fraud and scams
- If you suspect fraud on your account or have shared financial information or transferred money as a result of a scam, please contact your bank. If you bank with ANZ, please contact us straightaway. Our Customer Protection Team is available 24/7 to help you.
- You can also report scams to the Australian Cyber Security Centre’s ReportCyber and Australian Government’s Scamwatch.
- Have you come across an ANZ-branded email, message, post, website or video that looks like it’s pretending to be us? Please report it to hoax@cybersecurity.anz.com.
- For additional support with identity or cyber security concerns, you can reach out to IDCare, a not-for-profit organisation offering expert support and frontline insights into scams, identity theft and cybercrime.
Be cyber safe and smart
There are other ways you can help protect yourself online:
- Pause before you share personal information. Ask yourself if you really need to give out your personal information with that website or person.
- Activate multiple layers of security for ultimate protection for your devices and accounts.
- Turn on automatic software updates to simplify the process of keeping your devices safe and secure.
