Estimated reading time
5 min
Key points
- Phishing attacks use trusted brands and convincing messages to steal personal or financial information.
- Unexpected messages, urgent requests, and unusual links can be signs of a phishing attempt.
- Help protect yourself by verifying requests independently and enabling multi-factor authentication where available.
Phishing messages are designed to look convincing and can be difficult to spot.
Cybercriminals use a range of tactics to make their messages appear genuine and influence people to act quickly.
We’re going to take you through what phishing is, how it works, and ways to help you protect your personal and financial information online.
What is phishing?
Phishing is a common technique used in scams where criminals impersonate trusted organisations to steal your personal or financial information.
These attempts can happen via email, text messages (also known as, smishing) and social media. They often appear legitimate and may include links to fake websites designed to capture your details or install malware. Scammers may also call you directly, (also known as, vishing) pretending to be from a reputable company to collect your information.
It only takes one quick decision to compromise your information.
How phishing works
Most phishing attacks follow a simple pattern:
- A message appears to come from a trusted brand or service
- It creates urgency (e.g. unpaid toll, account issue, missed delivery)
- A link takes you to a fake website that steals your information; and/or
- A file may be attached that contains malicious software that can harm your device
Common phishing examples
- Toll or payment alerts: Messages asking you to pay an overdue fee
- Parcel delivery scams: Claims you need to update details to receive a package
- Government or bank messages: Requests to confirm or update your information
How to spot phishing
- Unexpected contact
- Urgent or threatening language
- Unexpected requests for personal or financial details
- Links that don’t match the organisation’s official website
- Unknown files attached to a message or email
- Messages from unknown senders
How to protect yourself from phishing
STOP.
Don’t click on unexpected links or attachments; and take a moment to pause before responding to a request.
CHECK.
Verify the request by contacting the organisation using an official contact number.
PROTECT.
Never share sensitive information, such as your password, one-time passcodes, or other personal information. Keep your devices and apps updated.
What to do if you’ve been targeted by a scam
- Stop all contact with the scammer
- Report the scam to your bank and other relevant authorities immediately
- Secure your accounts and devices (for example, by changing passwords and enabling multi-factor authentication)
Where to report fraud and scams
If you suspect fraud on your account or have shared financial information or transferred money as a result of a scam, please contact your bank.
If you bank with ANZ, please contact us straightaway. Our Customer Protection Team is available 24/7 to help you.
You can also report scams to:
- ReportCyber (Australian Cyber Security Centre)
- Scamwatch (Australian Government)
Have you come across something claiming to be from ANZ that doesn’t look right - like a call, email, message, website or video? Report it to hoax@cybersecurity.anz.com.
For additional support, IDCare provides guidance on identity theft and cyber security concerns.
