Phishing Scams in Australia: How to Spot and Avoid Them

• phishing
• cybersecurity
• scam-awareness

Learn how to recognise and protect yourself from phishing scams targeting Australians, including tips and real-life examples.

What is Phishing and Why Should You Care?

In today's digital age, where so much of our lives are managed online—from banking to booking holidays—it’s more important than ever to stay vigilant against scams. One of the most prevalent and dangerous forms of cybercrime is phishing. Despite sounding like a lazy day of fishing in Corio Bay, phishing is a sinister trick cybercriminals use to steal your personal data.

Phishing occurs when scammers impersonate a trusted entity such as a bank, government agency like MyGov, or even someone you know, in order to deceive you into providing personal information, passwords, or access to your finances.

How to Recognise a Phishing Scam

Phishing scams can take many forms, but they often share common warning signs. Here’s what to look out for:

• Urgent Calls to Action: Messages that create a false sense of urgency, like “Your account will be suspended unless you act now!”, are designed to make you panic and act without thinking.
• Suspicious Email Addresses or Numbers: Scammers often use email addresses that mimic legitimate domains, e.g., “support@commbank-alerts.com” instead of “support@commbank.com.au”. Always double-check the sender’s details.
• Deceptive Links: Hover over any link (but don’t click!) to see if it leads somewhere unexpected. Real organisations don’t send you to obscure URLs.
• Requests for Personal Information: No trustworthy business will ever ask for sensitive details like your Medicare number or banking credentials via email or SMS.
• Too Good to Be True Offers: “You’ve won a $500 Coles gift card!”—if it sounds too good to be true, it probably is.
• Claims of Account Issues: Messages warning of a locked MyGov or bank account and urging immediate action are common tricks.

Real-Life Phishing Tactics in Australia

Scammers are increasingly sophisticated, often impersonating:

• Banks (Commonwealth Bank, ANZ, etc.)
• Government agencies like MyGov and the ATO
• Public figures and celebrities
• Family members or friends via hacked accounts

How to Stay Protected from Phishing Scams

Use these tips to shield yourself from phishing attacks:

• Pause and evaluate – does something feel off or too good to be true?
• Independently verify the legitimacy of investment or contact requests. Don’t trust unsolicited emails—search for the company online and contact them directly.
• Never click on suspicious links or download unexpected attachments.
• Use strong, unique passwords for different accounts.
• Enable two-factor authentication (2FA) wherever possible to add an extra layer of security.

By staying alert and informed, you can avoid falling prey to phishing scams and keep your information safe online.