Is this text or call from Commonwealth Bank a scam?
Banks are the most impersonated organisations in Australian scams, and Commonwealth Bank is no exception. A text, email or phone call that looks like it's from Commonwealth Bank can be genuine — but it can just as easily be a scam built to look identical. The good news: a few quick checks almost always tell a real Commonwealth Bank message from a fake.
Genuine Commonwealth Bank links only ever go to commbank.com.au, netbank.com.au. Below is exactly what a real Commonwealth Bank message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
Commonwealth Bank reported a 76% drop in customer scam losses since their peak (the second half of FY25 versus the first half of FY23). Source: CommBank Newsroom
What a real Commonwealth Bank message looks like
Genuine SMS from Commonwealth Bank typically arrive under the sender ID CommBank or CBA, and real links only ever go to commbank.com.au, netbank.com.au.
- Genuine SMS show the sender ID 'CommBank' or 'CBA' — though scammers can spoof these, so judge the content, not just the sender name
- CommBank never asks for your NetBank password, PIN or NetCode SMS codes — not by phone, SMS or email
- Real fraud alerts ask you to confirm or deny a transaction in the CommBank app — they don't link you to a login page
- Online banking lives only at netbank.com.au and commbank.com.au
- CommBank staff will never ask you to transfer money to a 'safe account' — no bank does
Crucially, Commonwealth Bank will never ask you to move money to a 'safe account', read out a one-time SMS code, or install remote-access software like AnyDesk or TeamViewer.
Common Commonwealth Bank scams
- 'Unusual transaction' or 'account locked' texts linking to a fake NetBank-style login page that steals your credentials
- Calls from a fake 'CommBank fraud team' — often spoofing the bank's real number — asking you to read out NetCode SMS codes or move money to a 'safe account'
- Sender-ID spoofed texts that land in the same message thread as genuine CommBank messages, borrowing their credibility
- Phishing emails about new statements, rewards or cashback that link to credential-harvesting pages
Red flags to watch for
- Anyone asking for your NetBank password, PIN or a NetCode SMS code — CommBank never does this
- Requests to transfer funds to a 'safe', 'holding' or 'audit' account — always a scam
- Links in SMS to log in to NetBank — always type netbank.com.au yourself or use the CommBank app
- Pressure and urgency, such as 'your account will be frozen in 30 minutes'
- A caller asking you to install remote-access software like AnyDesk or TeamViewer
Scam text examples
Here's a real example of a scam message impersonating Commonwealth Bank, with the tell-tale red flags highlighted. Compare it against anything you've received.
CommBank Alert: A payment of $1,847.00 to 'EBAY AU PTY' is pending on your account. If this was NOT you, verify your identity immediately at commbank-secure-netbank.com or your account will be suspended.
What gives it away:
- Anyone asking for your NetBank password, PIN or a NetCode SMS code — CommBank never does this
- Requests to transfer funds to a 'safe', 'holding' or 'audit' account — always a scam
- Links in SMS to log in to NetBank — always type netbank.com.au yourself or use the CommBank app
- Pressure and urgency, such as 'your account will be frozen in 30 minutes'
- A caller asking you to install remote-access software like AnyDesk or TeamViewer
Not sure about your message?
Paste the suspicious Commonwealth Bank text or email and get an instant scam verdict, free.
How to verify a message from Commonwealth Bank
- Call CommBank directly on 13 2221
- Log in via the CommBank app or by typing netbank.com.au manually
- Visit a branch — locations are listed on commbank.com.au
Where to report a scam impersonating Commonwealth Bank
Received — or fell for — a message impersonating Commonwealth Bank? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Commonwealth Bank scam alerts — Commonwealth Bank's own page on current scams and how to report one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Report scam texts and spam SMS or calls.
- Forward to 7226 (SPAM) — Forward the scam SMS to short code 7226 so your carrier can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Frequently asked questions
I got a text from CommBank about a suspicious transaction. Is it genuine?
Treat it as suspicious until verified. Real CommBank fraud alerts ask you to confirm or deny a transaction inside the CommBank app — they don't send links to log in or 'verify your identity'. Don't tap anything: open the app yourself or call 13 2221 to check.
The text appeared in the same thread as real CommBank messages. Doesn't that prove it's real?
No. Scammers can spoof the 'CommBank' sender ID, which makes their text land in the same conversation thread as genuine messages. Thread position proves nothing — judge the content. Any message with a login link or a request for codes is a scam, wherever it appears.
What should I do if I gave a scammer my NetBank details or a NetCode?
Call CommBank on 13 2221 immediately — they can lock your account, block transfers and attempt to recover funds, and the first hours matter most. Then change your NetBank password, report the scam to Scamwatch (scamwatch.gov.au) and ReportCyber (cyber.gov.au).
Would CommBank ever ask me to move my money to keep it safe?
Never. No Australian bank asks customers to transfer money to a 'safe account' — your money is already in your account. That request, however convincing the caller sounds, is the signature of a bank impersonation scam. Hang up and call 13 2221.
Related scam types
Scams impersonating Commonwealth Bank usually fit one of these patterns. Learn how each works:
Related brands
Other bank names scammers impersonate — check a message from one:
This guide is general information, not legal or financial advice — always verify with Commonwealth Bank through an official channel.