Commonwealth Bank scam message examples
Example scam messages
CommBank Alert: A payment of $1,847.00 to 'EBAY AU PTY' is pending on your account. If this was NOT you, verify your identity immediately at netbank-secure-verify[.]example or your account will be suspended.
What gives it away:
- The link is not commbank.com.au or netbank.com.au; real CommBank fraud alerts ask you to confirm or deny the payment inside the CommBank app, not through a login link
- It manufactures urgency with an account-suspension threat, the classic pressure play
- It invents a specific dollar figure and merchant to make you panic before you think
A caller says they are 'the CommBank fraud team', your account has been compromised, and you must move your savings to a 'safe account' right now. To 'confirm your identity' they ask you to read out the NetCode SMS that has just arrived on your phone.
What gives it away:
- No Australian bank asks you to move money to a 'safe account'; your money is already in your account, and the request itself is the scam
- The NetCode they ask you to read out is the code authorising THEIR transfer out of your account
- A familiar caller ID proves nothing; scammers can spoof the bank's real number. Hang up and call back on 13 2221 or the number on the back of your card
Subject: Your NetBank statement is ready. Dear Customer, your latest statement could not be delivered. Sign in at commbank-statements[.]example within 24 hours to restore access to your account documents.
What gives it away:
- Generic 'Dear Customer' greeting where a real bank email uses your name
- The link leads to a lookalike domain, not commbank.com.au; a statement notice never needs a deadline
- Statements live inside NetBank and the CommBank app; nothing is lost by ignoring the email and checking there yourself
How to check a message you've received
Never tap a link in an unexpected message. Instead, paste the text into the free message checker for an instant verdict, or check a suspicious link with the link & website checker. To verify directly, contact Commonwealth Bank through its official app or the number on its real website — never the details in the message itself.
Understand the scam and the brand
Not sure about a message?
Paste it in and get an instant scam verdict with the exact red flags highlighted — free, no signup.
Frequently asked questions
Is this Commonwealth Bank message real or a scam?
The messages on this page are defanged examples of Commonwealth Bank impersonation scams — real reported patterns, not genuine Commonwealth Bank messages. To judge a specific message you've received, paste it into the free Scam Scanner checker for an instant verdict, or verify it directly through Commonwealth Bank's official app or website.
How can I tell a fake Commonwealth Bank message from a genuine one?
Genuine messages: Genuine SMS show the sender ID 'CommBank' or 'CBA' — though scammers can spoof these, so judge the content, not just the sender name. The examples below break down the tells that give a fake away — unexpected links, urgency, and requests for payment or details. If anything asks you to click a link or hand over information, treat it as suspicious until you've verified it independently.
What should I do if I already clicked a link or paid?
Act quickly: contact your bank, then follow the step-by-step recovery guide at /what-to-do. It walks you through who to contact — your bank, IDCARE and the right reporting channel — in the order that matters most.