Coles shopping scam message examples
Example scam messages
flybuys: Great news! Coles is topping up member balances today. Confirm your flybuys card number at flybuys-bonus-points[.]example to activate your bonus points.
What gives it away:
- Coles warns about messages asking customers to click a link and log in to claim 'Coles Rewards points'; a balance can be checked by logging in to flybuys.com.au or the Coles app yourself
- It asks for your flybuys card number, which is the whole point of the message
- The domain is a lookalike rather than flybuys.com.au; a link, like a sender name, isn't proof either way, so check your points in the app
COLES: Final notice. Your flybuys points expire tonight. Redeem immediately at coles-points-rescue[.]example or lose your full balance.
What gives it away:
- Coles warns about 'Coles Rewards points' about to expire texts that ask you to click a link and log in; an urgent points-expiry SMS with a link is a pattern to check, not to click
- 'Final notice' and 'tonight' are pressure tactics aimed at loyal shoppers who value their balance
- Your true balance is one login away at flybuys.com.au or in the Coles app, so there is no need to use the link
How to check a message you've received
Never tap a link in an unexpected message. Instead, paste the text into the free message checker for an instant verdict, or check a suspicious link with the link & website checker. To verify directly, contact Coles through its official app or the number on its real website — never the details in the message itself.
Understand the scam and the brand
Not sure about a message?
Paste it in and get an instant scam verdict with the exact red flags highlighted — free, no signup.
Frequently asked questions
Is this Coles message real or a scam?
The messages on this page are defanged examples of Coles impersonation scams — illustrations modelled on common scam patterns, not genuine Coles messages. To judge a specific message you've received, paste it into the free Scam Scanner checker for an instant verdict, or verify it directly through Coles's official app or website.
How can I tell a fake Coles message from a genuine one?
A real points balance or order also shows when you log in to flybuys.com.au or open the Coles app yourself, so check there instead of trusting the sender name, number or link. The examples below break down the tells that give a fake away — unexpected links, urgency, and requests for payment or details. If anything asks you to click a link or hand over information, treat it as suspicious until you've verified it independently.
What should I do if I already clicked a link or paid?
Act quickly: contact your bank, then follow the step-by-step recovery guide at /what-to-do. It walks you through who to contact — your bank, IDCARE and the right reporting channel — in the order that matters most.