A text arrives saying a parcel is waiting, a toll is overdue, or there's a problem with your myGov account. There's a link, and a deadline. These "smishing" messages are some of the most common scams reaching Australians, and they work because they look ordinary and arrive when you're busy.
Five signs a text is a scam
- It creates urgency. "Pay within 24 hours", "your account will be suspended", "final notice". Real organisations give you time.
- It asks you to tap a link. Genuine companies increasingly avoid sending links in texts for exactly this reason. Even a link that looks right can lead to a copy of the real site.
- It comes from an unknown number or a strange sender name. Scammers can also send texts that appear in the same conversation thread as genuine messages from your bank or a delivery company, so a familiar-looking thread isn't proof.
- It mentions a parcel, toll or fine you don't remember. If you aren't expecting a delivery or haven't driven on that road, treat it with suspicion.
- It asks for personal or banking details, a password, or a code you've just been sent.
The usual disguises
- Parcel delivery — "your package couldn't be delivered, pay a small redelivery fee".
- Toll road — an unpaid toll with a link to pay a "late fee".
- myGov or the ATO — a "refund" or a problem with your account.
- Your bank — "unusual activity" with a link to "verify" your login.
- "Hi Mum" — a message from an unknown number claiming to be your child with a new phone and an urgent bill.
What to do with a suspicious text
- Don't tap the link and don't reply, not even "STOP".
- Check directly. Open the official app or type the organisation's address yourself, or call the number on your card, bill or their website.
- Report it. Forward it to 7226 (SCAM) if you'd like to report it to your phone provider, and report it at scamwatch.gov.au.
- Delete it and block the number.
If you already tapped the link
Stay calm and move quickly.
- If you entered banking details or a card number, call your bank straight away and ask them to secure your accounts and cards.
- If you entered a password, change it from a different, trusted device, and change it anywhere else you use the same one.
- If you installed something, or the website asked you to download a file, disconnect the device from the internet and have it checked.
- Report it at scamwatch.gov.au, and to IDCARE (idcare.org) if you're worried about your identity.
If the message came to a phone or computer that now behaves strangely, we can check it for malware and walk you through securing your accounts. See virus and malware removal, call 1800 851 816 or book a visit.
Protect someone you care about
Scams aimed at older relatives are especially cruel. Print our one-page scam checklist and put it by their phone, and talk through the signs above.
Related guides
Rather someone just fixed it?
Call us and describe what is happening. We will tell you what it is likely to be and what it would involve — before you commit to anything.
1800 851 816 Our servicesWritten by the technicians at Afford IT, Indooroopilly. We service homes and small businesses across Greater Brisbane.