Fraud and scams

Find out how to protect yourself from scams

Received a text or call that seemed too good to be true? It usually is. Legitimate companies will never ask you to reveal passwords or financial information. 

Beware of scams and stay updated on national scams by reviewing current scams at

Always remember

Hand halt


Don’t act straight away. Stop and think about what you’re being asked to do. 

Tip: real companies or government agencies won’t pressure you to make payments.

Look up


Have a quick look on Google to see if the company or person is real and whether it's the right phone number.

Check to see if anyone else has had similar experiences.

Person with a question


If you’re still unsure, show a family member or friend and ask for their opinion before taking any action. 


Want to report a scam?

If you want to report a scam you can contact us on 1300 654 822 (within Australia) between 8am and 6pm Monday to Friday or +61 3 4053 5555 (overseas).

You can also contact us by email at if you believe you have received a scam email.

Need to stop a card?

Have you had suspicious activity on your accounts or credit card? You can stop or lock your card through the Bank First app.

You can also call us on 1300 654 822 (within Australia) or +61 3 4053 5555 (overseas) 24/7 and select option 1 to cancel your card. If you’ve put a stop on your card due to fraudulent activity, call us during business hours to let us know, so that we can investigate this for you.


Latest scams

Since August 2021, Australians have been targeted by the Flubot Scam. Don’t click any links in text messages.

Visit to learn more about this scam.

Latest scams  

What is phishing?

Phishing is the most common cyber-attack used today. They can be sent to you via email, text message, and sometimes via social media from what can appear to be a reputable source. 

Phishing attacks are used to trick the recipient into revealing sensitive information or data in order to steal from you. 

Remember to pause, review and ask a friend or family member when you receive such messages.

Learn more about protecting yourself from specific scams below.

SMS and email scams

SMS and email scams are popular with scammers. Scam SMS’ or emails will sometimes look like they come from a reputable source, and other times they won’t. 

Keep an eye out for spelling mistakes or incorrect grammar, email addresses that mimic a real organisation but have letters missing, and links in emails that request you to provide personal details. These are just some of the ways you can fall victim to a scam.

Make sure you:

use spam filters in your email software to block spam and phishing emails
delete suspicious emails straight away
don’t provide personal information like bank details via email
use two-factor authentication for any website you need to login to.

Learn how to protect yourself from SMS and email scams

Phone scams

Scam phone calls include calls where scammers will impersonate a government agency such as the Australian Taxation Office (ATO), the police or other well-known businesses such as your energy provider or telecommunications provider. These calls sometimes start as a pre-recorded message.

Scammers will pressure you to provide your personal information over the phone claiming it will clear an unpaid bill, fine or similar. 

Tip: Never give out your financial information over the phone. Check if it is real by hanging up and calling the official phone number of that organisation that is available on their website.

Learn more about phone scams

Online shopping scams

As online shopping increases, scammers try to take advantage of those who shop online. These can be anywhere on the internet but are especially found on classified sites, social media, online marketplaces, emails and more. 

If it looks too good to be true, it usually is. Protect yourself by checking out the seller’s profile. You can also Google search the topic or seller name to see if there are any negative reviews. 

As always, you should pause, review and ask a friend or family member if you’re unsure whether the sale is real. 

Tip: If you believe the seller is real, use a payment method like PayPal that has inbuilt buyer protection for online sales.

Remote access scams

Remote access scams happen when scammers contact you by phone, email or text claiming to be from a familiar company. They will usually give you a fake story that may lead you to believe you need to give them remote access to your computer or device to remove some form of virus or malware. 

These scams are dangerous as they can give the scammer full access to your device and personal information including files, financial details, photos and more. 

Tip: You’ll never receive an unsolicited call of this type from a reputable organisation. You should also never give your login details to your computer, internet banking or any other service you login to.

Learn more remote access scams

Investment scams

Investment scams usually occur when someone pretends to be a financial advisor or similar. A popular investment scam is where scammers try to get people to invest in cryptocurrency.

Any investment scam will promise you quick money with little time and effort. If it sounds too good to be true, it usually is. 

Tip: Only ever deal with registered financial advisors. You can also view a list of unlicensed companies that have been identified as scammers to help you identify a scam.

Learn more about investment scams

Fake websites

Scammers can create fake websites that look almost identical to a reputable organisation that you deal with. These websites are also designed to steal your personal information. 

searching for the website on Google and comparing the URLs
checking if the URL begins with https:// instead of http:// (s stands for secure)
checking if there is a padlock icon next to the URL indicating a valid security certificate.

If you believe you have found a fake Bank First website, please email us immediately with the URL and screenshot on

Remember, we’ll never call you out of the blue and request financial information. Reputable companies will not do this either. 

Never share your passwords and always check who is contacting you before acting. Remember to pause, review and ask if you’re ever unsure.