Is this renewal notice from Bupa a scam?
No. Bupa is a legitimate health insurer covering millions of Australians. The risk points the other way: fraudsters send fake renewal reminders, lapsing-cover texts and cancellation threats in Bupa's name to rush members onto lookalike pages that steal logins and card details. The good news: a few quick checks almost always tell a real Bupa message from a fake.
Genuine Bupa links lead to bupa.com.au — but a link can be made to look real, so don't go by the link alone. Below is exactly what a real Bupa message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real Bupa message looks like
Genuine messages from Bupa link to bupa.com.au. Treat a link to any other address as a warning sign.
- Genuine Bupa messages about policy renewals are sent from the Bupa app or after you log in at bupa.com.au, not via unsolicited SMS.
- Bupa only uses the domain bupa.com.au for official emails and never asks you to click a link in a text to complete renewal.
- Real Bupa renewal notices appear inside your secure member account on bupa.com.au or the Bupa app, not in a cold SMS.
- Bupa never sends SMS from random Australian mobile numbers asking you to renew a policy.
- Official Bupa communications about payments or policy changes always reference details already visible in your logged-in account on bupa.com.au.
What Bupa will never do
- Ask you to click a link in a text to complete a policy renewal
- Send renewal SMS from random Australian mobile numbers
- Ask for your member number or payment card details by SMS to 'process' a renewal; no legitimate health insurer collects payment that way
- Direct you to log in or pay anywhere other than bupa.com.au or the official Bupa app
- Cancel your cover the same day off the back of one message; genuine payment or policy changes are always visible inside your logged-in member account first
Common Bupa scams
- Scammers send SMS claiming to be Bupa and stating your policy is about to lapse, with a link to a fake renewal page on a lookalike domain.
- Fraudsters impersonate Bupa Australia renewal reminders and direct recipients to pay an overdue amount via a link that leads to a credential-harvesting site.
- Messages pretending to be from Bupa warn of an automatic cancellation unless you "confirm" details on a spoofed bupa-secure-login[.]example page.
Red flags to watch for
- An SMS from an unknown number demanding immediate policy renewal for Bupa.
- A message containing a link that does not end in bupa.com.au and urges you to renew or update payment details.
- Requests to log in or pay outside the official Bupa app or the real bupa.com.au site.
- Urgent language claiming your Bupa cover will end today unless you act via the supplied link.
- Any SMS that asks for your Bupa member number or payment card details to "process" a renewal.
Bupa scam examples
These composed examples show how scams impersonating Bupa typically read, with the tells that give each one away. Compare them against anything you've received.
Bupa Member Notice: your health cover lapses at midnight tonight. Renew in under two minutes at bupa-member-renew[.]example to keep your extras and hospital cover active.
What gives it away:
- Bupa says renewal notices appear inside your member account or the Bupa app, never as a cold SMS with a link
- The renewal page is a lookalike domain rather than bupa.com.au, the only domain Bupa uses
- The midnight lapse is a manufactured cliff-edge; cover does not vanish because you ignored one text
Subject: Action required, automatic cancellation pending. Dear Member, we were unable to process your latest premium. Confirm your payment card at bupa-billing-update[.]example within 24 hours or your policy and any pending claims will be cancelled.
What gives it away:
- Generic 'Dear Member' greeting, when official Bupa communications reference details already visible in your logged-in account
- It asks for card details through an emailed link, which Bupa never does; payments belong inside bupa.com.au or the Bupa app
- Threatening pending claims as well as the policy stacks pressure, a hallmark of cancellation-threat phishing
Not sure about your message?
Paste the suspicious Bupa text or email and get an instant scam verdict, free.
How to verify a message from Bupa
Bupa's real website is bupa.com.au and the official app is the Bupa app. Reach Bupa through those channels, never through the details inside a message you're unsure about.
- Do not renew, pay or confirm anything through the message itself
- Open the official Bupa app, or type bupa.com.au into your browser yourself, and check your policy status; a genuine renewal or payment issue will show there
- If your logged-in member account shows the policy in good standing, the message was a scam and can be reported
- Report the message to Scamwatch so other members are warned (link below)
If you have been scammed in Bupa's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- If you entered payment card details, call your bank now, have the card blocked and dispute any charges that appear
- Change your Bupa password immediately by typing bupa.com.au yourself, and update any other account sharing that password
- If you supplied identity documents or your Medicare details, contact IDCARE (idcare.org) for free specialist identity support
- Watch your member account and bank statements for claims, payments or detail changes you did not make
- Report the scam to Scamwatch and ReportCyber using the links below, and forward scam texts to 7226 so carriers can block the sender
Where to report a scam impersonating Bupa
Received — or fell for — a message impersonating Bupa? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Latest Bupa scams in 2026
Bupa-branded scams currently arrive dressed as housekeeping: a policy about to lapse, an overdue premium that needs a quick card confirmation, or an automatic cancellation you can supposedly stop by verifying your details. Each variant leans on the fear of being uninsured at the wrong moment, and each routes you to a lookalike page instead of bupa.com.au. The constant is that real renewal and payment information sits inside your member account and the Bupa app, so nothing is ever lost by ignoring the link. Members who check their cover by logging in themselves, rather than through the message, defuse every version of this scam.
Frequently asked questions
I got a text from Bupa about renewing my policy — is it a scam?
Bupa does not send renewal SMS from random numbers. Log straight into your account at bupa.com.au or the Bupa app to check any renewal status.
How do I know if a Bupa renewal message is real?
Only trust renewal notices that appear after you have logged in at bupa.com.au or inside the official Bupa app; ignore any SMS that asks you to click a link.
What should I do if I clicked a link in a fake Bupa text?
Change your Bupa password immediately via bupa.com.au, monitor your accounts, and report the message at scamwatch.gov.au.
What is Bupa's real website?
Bupa's official Australian website is bupa.com.au, the only domain it uses for member emails and logins. Manage your policy by typing bupa.com.au into your browser or using the Bupa app, never through a link that arrived in an unexpected message.
How do I report a Bupa scam message?
Report it to Scamwatch at scamwatch.gov.au so the National Anti-Scam Centre can track the campaign, and forward scam SMS to 7226 (spells SCAM) so telcos can block the number. If you lost money or shared personal information, also report to ReportCyber at cyber.gov.au and tell your bank.
Related scam types
Scams impersonating Bupa usually fit one of these patterns. Learn how each works:
Related brands
Other insurance names scammers impersonate — check a message from one:
Sources
- Phishing scams: how scammers pose as trusted organisations (Scamwatch (National Anti-Scam Centre))
- Email scams (Scamwatch (National Anti-Scam Centre))
- Report a scam (Scamwatch (National Anti-Scam Centre))
This guide is general information, not legal or financial advice — always verify with Bupa through an official channel.