Spotting phishing and scams
Don't take the bait
Phishing is when scammers send fake emails, texts or messages pretending to be someone you trust — a bank, delivery company, the government, or even your boss — to trick you into clicking a link, sharing details or paying money.
Warning signs
| Red flag | Example |
|---|---|
| Urgency or threats | "Your account will be closed in 24 hours!" |
| Too good to be true | "You've won a $500 gift card!" |
| Odd sender address | support@auspost-delivery-help.net |
| Links that don't match | Hover over (or long-press) a link — does it go where it says? |
| Requests for codes, passwords or payment | "Reply with the code we just sent you" |
| Unusual requests from "the boss" | "I'm in a meeting — buy 5 gift cards and send me the codes" |
| Unexpected attachments | "Invoice_8834.zip" you weren't expecting |
Scams targeting job seekers
- "Jobs" that ask you to pay for training, a starter kit or equipment
- Offers to "receive money and transfer it on" — this can be money laundering
- Interviews only over text chat, with an instant job offer
- Requests for your TFN, bank details or ID before any real interview
What to do
- Stop. Don't click, reply or open attachments.
- Check. Contact the organisation directly using a phone number or website you find yourself — not the one in the message.
- Report. At work, tell your manager or IT. Report scams to Scamwatch (scamwatch.gov.au) and cyber crime to cyber.gov.au.
- Act fast if you clicked. Change your password, contact your bank if you shared financial details, and tell your manager or IT straight away. There's no shame — scammers are professionals.
Try it
Look through your email or text messages for one suspicious message (most people have one). List the red flags you can spot. Don't click anything in it!