Is this text or call from Bank of Queensland a scam?
No. Bank of Queensland (BOQ) is a long-established, ASX-listed Australian retail bank. The genuine risk sits on the other side of the ledger: scammers send fake BOQ texts about blocked cards and 'unusual activity', hoping you tap their lookalike login link before you stop to check. The good news: a few quick checks almost always tell a real Bank of Queensland message from a fake.
Genuine Bank of Queensland links lead to boq.com.au — but a link can be made to look real, so don't go by the link alone. Below is exactly what a real Bank of Queensland message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real Bank of Queensland message looks like
Genuine messages from Bank of Queensland link to boq.com.au. Treat a link to any other address as a warning sign.
- Genuine Bank of Queensland emails always come from an @boq.com.au address.
- BOQ never asks customers to click links or enter login details via SMS.
- The bank does not send urgent SMS messages threatening to lock accounts.
- Official BOQ communications use consistent branding and never direct customers to third-party domains.
- BOQ alerts about transactions or account changes are usually sent through the BOQ app or secure online banking, not random SMS.
What Bank of Queensland will never do
- Ask customers to click links or enter login details via SMS (BOQ never does)
- Send urgent SMS messages threatening to lock accounts; the threat itself is the tell
- Direct customers to third-party domains; official BOQ communications stay on boq.com.au
- Ask for your card PIN or the one-time code that was just sent to your phone; no legitimate bank will
- Ask you to move money to a 'safe account'; no legitimate bank ever makes that request
Common Bank of Queensland scams
- SMS messages claiming to be from BOQ that contain a link to a fake login page at a lookalike domain such as boq-secure-login[.]example.
- Texts warning of suspicious activity or a blocked card that urge the recipient to verify details immediately.
- Messages pretending to be a BOQ fraud team asking the customer to confirm their password or card number on a provided link.
Red flags to watch for
- The message asks for login details, passwords or card numbers.
- The SMS contains a shortened or unfamiliar link instead of directing you to type boq.com.au yourself.
- The message creates urgency by threatening immediate account lock or loss of funds.
- Sender ID is a random phone number or an unrecognised name rather than a verified BOQ channel.
- The email or SMS contains spelling errors or poor formatting.
Bank of Queensland scam examples
These composed examples show how scams impersonating Bank of Queensland typically read, with the tells that give each one away. Compare them against anything you've received.
BOQ Security: Your card has been temporarily blocked after a suspicious purchase attempt. Restore access within 4 hours at boq-card-restore[.]example or the block will become permanent.
What gives it away:
- BOQ never asks customers to click links or enter login details via SMS, so the link alone marks this as fake
- The domain is a lookalike, not boq.com.au
- The four-hour countdown and 'permanent block' threat are manufactured pressure; real card issues are resolved in the BOQ app or on a call you place yourself
A caller introduces themselves as 'the BOQ fraud team' and says scammers are draining your account right now. To stop the transfer, they offer to stay on the line while you confirm your password and full card number through a link they text you.
What gives it away:
- No legitimate bank asks you to confirm your password or full card number, on a call or through a link
- The manufactured emergency exists to stop you hanging up and checking; that pressure is the pattern, not a coincidence
- Caller ID can be spoofed, so the number on screen proves nothing; hang up and contact BOQ using the details inside your BOQ app or on a statement you already hold
Not sure about your message?
Paste the suspicious Bank of Queensland text or email and get an instant scam verdict, free.
How to verify a message from Bank of Queensland
Bank of Queensland's real website is boq.com.au and the official app is the BOQ app. Reach Bank of Queensland through those channels, never through the details inside a message you're unsure about.
- Don't tap the link, reply to the message, or call any number it supplies
- Type boq.com.au into your browser yourself, or open the BOQ app, and check your account; anything genuine will be waiting there
- If you're still unsure, contact BOQ using the contact details inside your BOQ app or on a statement you already hold, never details from the message
If you have been scammed in Bank of Queensland's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- Contact BOQ immediately using the details in your BOQ app or on your statements; the bank can lock your account, block your cards and try to stop transfers, and the first hours matter most
- If you entered your password on a fake page, change it from the official boq.com.au site or the BOQ app, and change it anywhere else you reused it
- If you shared identity documents such as a licence, passport or Medicare card, contact IDCARE (idcare.org) for free identity support
- Report the scam to Scamwatch and ReportCyber using the links below
- Forward the scam SMS to 7226 (spells SCAM) so carriers can block the sender
Where to report a scam impersonating Bank of Queensland
Received — or fell for — a message impersonating Bank of Queensland? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Latest Bank of Queensland scams in 2026
Fake BOQ messages doing the rounds follow a tight script: a blocked card or 'unusual activity', a short deadline, and a hyphenated lookalike login page dressed in BOQ branding. Some campaigns add a follow-up call from a pretend fraud team to walk victims through 'confirming' their password or card number. The details rotate, the structure doesn't: every version needs you to act through the message instead of through the bank. Since BOQ never asks customers to click links or enter login details via SMS, the defence is simple and total: delete the message, then check your account by typing boq.com.au yourself or opening the BOQ app.
Frequently asked questions
I got a text from Bank of Queensland with a link — is it a scam?
Bank of Queensland never asks for login details or account verification via SMS links. If you received such a message, delete it and report it at scamwatch.gov.au.
How do I know if a BOQ SMS is real?
Genuine BOQ messages do not contain clickable links asking for your details. Always go directly to boq.com.au or open the official app instead of clicking anything in the text.
What should I do if I clicked a fake BOQ link?
Change your BOQ password immediately from the official boq.com.au site, monitor your accounts, and contact IDCARE on 1300 432 273 for free support.
What is Bank of Queensland's real website?
BOQ's only real website is boq.com.au. Reach it by typing the address yourself or by using the BOQ app; a link in a text or email is never the safe way in, even when it looks official.
How do I report a Bank of Queensland scam?
Report the message to Scamwatch (scamwatch.gov.au) so the National Anti-Scam Centre can track the campaign, and forward scam texts to 7226 (spells SCAM) so carriers can block the sender. If you lost money, contact BOQ first using the details in your app or statements, then report to ReportCyber (cyber.gov.au).
Related scam types
Scams impersonating Bank of Queensland usually fit one of these patterns. Learn how each works:
Related brands
Other bank names scammers impersonate — check a message from one:
Sources
- Phishing scams: how scammers pose as trusted organisations (Scamwatch (National Anti-Scam Centre))
- Text or SMS scams (Scamwatch (National Anti-Scam Centre))
- Report a scam (Scamwatch (National Anti-Scam Centre))
This guide is general information, not legal or financial advice — always verify with Bank of Queensland through an official channel.