If something seems too good to be true or feels a bit suspicious, it probably is.
Scammers are constantly coming up with new ways to trick people, and they're doing it more and more often. But their goal never changes: they want your money, your personal information, or both.
Here's the thing: lots of people believe banks can get your money back if a scammer steals it. Unfortunately, that's not always true, especially if you authorised the transaction yourself. This is why it's so important to be super careful online and to always be aware of scams.
To help you understand what banking scams are and be better prepared to protect yourself against them, we've put together some useful information and things to look out for. Let's keep your money safe!
Remote access scams
Watch out for calls, emails, texts, or even pop-ups on your computer claiming to be from a trusted or well-known company (such as your bank, internet provider, or the government). These could be sneaky attempts at a remote access scam!
Scammers pretend to work for these companies to trick you into giving them control of your device. They might tell you a fake-yet-credible story to convince you to give them remote access – such as claiming your account has been hacked or that your security has been compromised. If they manage to gain access, it may give them direct access to your internet banking, passwords, bank card details, or other personal information. Yikes!
Be super careful if someone claiming to be from a large company asks you to download software or apps. It's highly unlikely that a legitimate company would call you out of the blue or ask you for remote access to your device. Treat any unsolicited calls with caution, and if you're unsure, hang up and call the company back using their official contact number.
Bank impersonation scams
Be on the lookout for scammers pretending to be from your bank. A common bank impersonation scam is where a scammer calls and claims to be from your bank or the Fraud Detection team. They may ask for personal or banking details or ask you to make a transfer to send funds back.
BCU Bank will never call you out of the blue asking for sensitive information like account numbers, passwords, or current balances. We also won't ever request you transfer money to correct an error.
We will occasionally get in touch with you to let you know about any of our products or services that we think may be of interest to you. If we do contact you, we may be required to identify you to ensure that we do not disclose any personal information to anyone but yourself. If you're concerned about the legitimacy of a phone call you have received claiming to be from BCU Bank, please ask the consultant for their name and advise you will call back via our contact centre on 1300 228 228. This way, you can be sure you're speaking with BCU Bank and not an individual attempting to gain access to your accounts.
Police, tax, and government scams
These types of scams occur when someone contacts you claiming to be from a government organisation, like the police force or the Australian Tax Office (ATO). They might claim the reason they're contacting you is because you have an overdue fine or tax bill, demanding immediate payment with gift cards or by providing your bank details (a huge red flag!). Don't be fooled!
These imposters might also attempt to lure you in with a fake tax refund, trying to trick you into sharing personal information or giving them access to download malware. They might impersonate police, saying they need your help (and bank details!) to "catch a criminal" or "get your money back" if you've fallen victim to a scam in the past. It's always important to remember that real government agencies don't operate this way.
If you receive a suspicious call, hang up immediately. Don't trust the number they called from either – look up the official number yourself and call the organisation back. They’ll be able to confirm if the call was genuine and if any further action is required.
Phishing emails are another common scam. Even if they look like they're from the Australian Government (myGov), with logos and all, and have a subject line like "Important information regarding your account", never give out your personal or financial information without verifying if it's legitimate.
To ensure you stay safe, protect your personal and account details and stay updated on your tax situation (debts, refunds, etc.) to avoid falling for fake claims. The Australian Cyber Security Centre website has resources to help you stay safe online and avoid these government impersonation scams.
Investment scams
An investment scam is when someone gets in touch with you out of nowhere and promises high returns, quick money, or guaranteed profits.
Scammers might call, email, or send you a message on social media pretending to be a stockbroker or portfolio manager, offering you an easy way to make money. Regardless of what their spiel is, their aim is to convince you to invest your money. The scammer will seem knowledgeable and provide you with information and figures to seem legitimate, but don't be fooled!
Another part of this scam is the recovery scam. If you've lost money in the past to a scam, you have a high chance of being contacted again with the promise of being able to recover those lost funds. These scammers are generally the same ones who took your money in the first place (that’s how they know what you lost!) and will charge you a 'fee' to recover your funds.
Always do your own research and perform sufficient checks before investing. ASIC, the Australian Securities and Investments Commission, has a wealth of resources to help you. Their website can help you check if someone is a registered financial advisor and even has a list of companies you should not deal with. If the company that’s contacted you is on this list – do not invest with them. And just because a company isn't on the "do not deal with" list doesn't necessarily mean it's safe either.
For independent information on investment choices, ASIC's Moneysmart website is a great resource. By being careful and informed, you can protect yourself from investment scams.
Relationship scams
Relationship scams may start as as something simple – a friend request on social media, a match on a dating site, and even other online platforms. And while it may seem innocent at first, it could be a scammer with a fake identity, intending to build a connection with you and ultimately take advantage of you.
The scammer might pretend to be a potential romantic partner or even strike up a seemingly platonic friendship. Their goal is to gain your trust and affection, making you more likely to give them something valuable – like your money or personal information.
To help protect yourself from relationship scams, be extremely cautious of anyone who asks for money or personal details. Never send money to someone you haven't met in person or are unsure of, and always consider the possibility that their motive is ingenuine. Common reasons scammers claim to need money could be for medical emergencies, unexpected bills, travel costs, family problems, or because they'll be in danger without it.
Some scammers might even try to trick you into receiving money into your account, then convince you to forward it elsewhere. These scenarios are very likely to be forms of money laundering, which is a serious crime. Never agree to transfer money for someone else.
If you want to learn more about how to avoid romance scams, visit the Scamwatch website.
Other types of scams
SIM swap fraud is where scammers try to steal your mobile phone number and take control of it. They do this to gain access to the secure two-factor authentication codes sent to your phone, which are often used to verify your identity for things like online banking.
These scammers might surprise you – sometimes all they need is your name, phone number, and date of birth – which can be surprisingly easy to find on social media or obtained through a phishing scam. With this information, they could try and convince your phone provider to switch your number to a new SIM card they control (known as a "SIM swap").
To protect yourself against SIM swap fraud, keep an eye out for your phone going into 'SOS only' mode unexpectedly, or any unexpected messages from your telephone provider saying that you have requested for your mobile number to be transferred.
If you suspect you may have fallen victim to one of these scams, contact your telco provider immediately, and contact your bank and any other important providers to ensure nothing suspicious has taken place.
Unfortunately, elder financial abuse is a very real concern. It can happen when someone, whether a stranger, a caregiver, or even a trusted family member or friend, takes advantage of an older person for financial gain. This abuse can involve stealing money or possessions, like their home or savings, and often uses tactics like forgery, lies, misrepresentation or manipulation to trick the victim.
If you're concerned about elder financial abuse, the Australian Banking Association has a helpful resource called "Safe & Savvy: A guide to help older people avoid abuse, scams and fraud". We encourage you to read it to learn more about protecting yourself or your loved ones.
Phishing scams are intended to look like legitimate communications from well-known companies such as your bank, phone company, or even one of your Facebook friends. They can come through email, text, and social media posts or messages.
The scammers try to trick you into giving up personal information by making the message seem urgent or important. They might say there's a problem with your account and ask you to click a link to "verify" your details. Sometimes they're simpler, like a message about a fake package delivery, but clicking the link could install malware on your device.
Here's some ways to identify a phishing scam:
- Check the sender's email address closely. Real companies almost always use their own domain name in their email address (like "@bcu.com.au" for BCU Bank). Free email addresses like "@gmail.com" are a big red flag.
- Beware of urgency. Phishing scams often create a sense of urgency to pressure you into acting quickly without thinking.
- Don't click suspicious links. Never click on links in messages you weren't expecting, even if it seems to come from a friend.
- Look for typos and grammatical errors. These are common in phishing scams, so a poorly written message is a warning sign.
If you're unsure if a message is real, contact the company directly using a phone number or website you know is legitimate (don't trust the contact information in the message itself).
Remember, BCU Bank will never ask you to supply your personal information or login details via an unsecure email attachment, and we will never send a link via text directing you to login to internet banking.
Watch out for phone scams! Scammers often pretend to be from your bank, the tax office, phone company, or other trusted organizations. They might try to trick you into giving up personal or banking information, or even request a money transfer or immediate payment.
Please be aware that BCU Bank will never ask you to transfer money over the phone to fix an error.
If you receive a call from someone claiming to be a BCU employee and you're unsure if it's legitimate, don't share any banking or personal information. Instead, ask for the caller's name and write down the phone number they called from. Then, hang up and call our contact centre on 1300 228 228.
Would you like more information?
The Australian Government's Cyber Security Centre website has tips and information to help you stay safe online.
The Australian Government’s Scamwatch website also has a range of information and support.