One of the downsides of the silly season is the rise in scam activity from fraudsters trying to steal your cash, personal info or property. Anyone can be targeted by a scammer, and scammers can claim to be from any company or organisation (such as telcos, banks, utility providers, or even charities) in an effort to dupe you out of money or information.
We've recently received word that scammers have even impersonated WhistleOut employees in an effort to hoodwink unsuspecting Aussies. We'll never call you unless you request our assistance, and never ask you for your personal financial details (although we may ask you to confirm contact info, in order to refer you to your choice of telco).
Unfortunately, this is just one of many, many scam attempts that both local and international criminals are using to try and steal information and money. Here's our tips on avoiding several other Christmas-time scams, but for a full list of things to watch for, head over the the ACCC's excellent ScamWatch page.
NBN and telco scams
Back in August, the ACCC released info on scammers impersonating NBN employees in an attempt to gain remote access to computers, steal personal information (also known as 'phishing'), and defraud consumers out of money. Most victims were targeted via phone, with the perpetrators often asking for payment through iTunes gift cards - a huge red flag (legit businesses will never ask you to pay with a gift card).
If you are contacted by someone claiming to be from NBN Co., know that it's pretty much guaranteed to be a scam. NBN will never contact customers directly for any reason, as it doesn't sell directly to the public; if you're on an NBN plan, or signing up to one, you'll only ever deal with an internet service provider (such as Optus, TPG, Telstra, or iiNet).
When it comes to mobile and internet services, it's highly unlikely your provider will contact you out of the blue - either over the phone or through email - to demand personal information or unexpected payments. Even if your account is in arrears, customer service representatives do not ask for you to provide financial information to them directly: instead, they'll ask you to make any necessary payments in store, or through the company's official phone and online channels.
Also, even if there is an issue with your computer or internet connection, no reputable company will call you to ask for remote access to your PC or Mac. If you do receive a phone call requesting access to your system, hang up immediately.
Banking and credit card scams
The same goes for banks and financial institutions, who - again - will rarely contact you directly with a request for information, and never via email. The exception is for urgent cases such as potential card or account fraud: you may receive a call from your institution, but any information provided by a caller can be easily verified by calling your bank's official telephone help lines.
For situations such as minor account changes or missed payments, you will generally receive a written letter of notice before being contacted by phone, and if you have a personal or business banker handling your accounts, they'll usually be the one to contact you personally.
Again, banks won't ask you to provide personal or account information over email, and we advise against clicking any hyperlinks, or opening attachments, found in emails claiming to be from a financial institution. If you need to visit your bank's website, enter the confirmed and official web address into your browser, and make sure the site is secure by checking for a small padlock symbol in the address bar, and/or the letters 'https://' at the beginning of the web address once you're connected.
Fake websites
Some signs that a website may be fake or unsafe? Apart from the above, you may notice inconsistencies in logos and branding, spelling and grammar errors, and invasive pop-up ads or banners. If the site's address is spelled strangely (such as 'appel.com' rather than' apple.com', or the presence of unusual characters or numbers), or anything else seems off, it's better to be safe than sorry; to double check, you can run a site's address through Google's Transparency Report page for an assessment (we swear it's safe!).
If you're buying or selling online, look out for fake versions of real online stores, or stores that seem to offer goods at ridiculously reduced prices. You can identify fakes by some of the tips listed above, but also look for a lack of verified reviews or customer feedback, or anything else that just doesn't seem quite right. Googling the business or site in question can also provide info as to whether the company is legitimate.
We also recommend investing in a good security product for your PC or Mac. If you're installing anti-virus software - such as Norton, McAfee, or Kaspersky - you should also ensure it includes security features such as anti-spam, privacy protection, and defences against ransomware, malware, and spyware (all of which you definitely don't want on your device).
Text message scams
Scams through SMS are similar to those conducted by email: usually, you'll receive a text from a random number informing you that you've won a prize, and asking you to follow a link to claim. Again, if it seems suspicious, or claims to be from a company or organisation you've had no previous dealings with, simply delete and ignore.
Any message that asks you to send money, personal info, or banking details is also likely to be fake, and as with emails, watch out for that dodgy spelling and grammar.
Mobile premium services/scams
It's not as common now, but 'premium' text message services and scams which charge you exorbitant rates to receive and reply to SMS are, unfortunately, still a thing. We've already written a great and in-depth guide to spotting and stopping scam and spam text messages, but again, if it looks suspicious or seems too good to be true, it probably is.
How to report a scam
If you think you've encountered a scam attempt, we recommend reporting it to the ACCC's ScamWatch page. The ACCC will document the scam and make efforts to warn the public, but it can't help you recover lost funds; if you believe you have given money or info to a scammer, your first move is to contact your bank or financial institution, especially if you've unwittingly given someone your card or account details.
In the case of identity theft or personal information, you can contact IDCare for support and help, and no matter what kind of scam took place, you should always report it to your local police. We also advise changing any potentially compromised passwords, and informing any relevant consumer protection services (such as Fair Trading or Consumer Affairs in your state).
Overall, you should always be vigilant about protecting your personal info - both online and over-the-phone. For more information on common scam attempts - including fake charities, dating scams, and fake job opportunities - head over to the ACCC.
Related Articles
