Is this text or call from ING a scam?
No. ING is a legitimate bank, the branchless Australian arm of the global ING Group, and its accounts and app are entirely real. What isn't real is the stream of card-verification texts sent in its name: ING doesn't send security alerts by SMS at all, which makes the fakes unusually easy to unmask once you know that. The good news: a few quick checks almost always tell a real ING message from a fake.
Genuine ING links lead to ing.com.au — but a link can be made to look real, so don't go by the link alone. Below is exactly what a real ING message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real ING message looks like
Genuine messages from ING link to ing.com.au. Treat a link to any other address as a warning sign.
- ING only contacts you via the ING Australia app or when you initiate the call yourself
- Genuine ING messages use the domain ing.com.au and never ask you to click a link for card verification
- ING will never send an SMS asking you to verify, reactivate or unlock your debit or credit card
- Any real ING communication about your account will appear inside the secure app inbox first
- ING Australia does not use SMS sender IDs for security alerts; all urgent notices arrive through the app
What ING will never do
- Send an SMS asking you to verify, reactivate or unlock your debit or credit card (ING never does)
- Deliver urgent security notices by SMS; real ING alerts arrive inside the secure app inbox first
- Ask you to click a link for card verification
- Ask for your password or a one-time code; no legitimate bank will
- Ask you to move money to a 'safe account'; no legitimate bank will
Common ING scams
- Scammers send SMS pretending to be ING claiming your card needs immediate verification and linking to an inert lookalike domain such as ing-card-verify[.]example
- Fraudsters pose as ING and send a fake security alert warning of suspicious transactions, directing you to a counterfeit site like ing-secure-login[.]example to "confirm" details
- Criminals impersonate ING Australia with messages about a blocked account or failed transfer, pushing recipients to enter card or online-banking credentials on a fake page
Red flags to watch for
- The message arrives as an SMS; ING does not send card-verification texts
- The sender claims urgency or account restriction and pressures you to click a link right away
- The URL shown is anything other than ing.com.au, for example ing-card-verify[.]example or similar variations
- The text contains spelling errors, generic greetings such as "Dear Customer", or requests for passwords or one-time codes
- The message threatens to lock or cancel your card unless you act immediately
ING scam examples
These composed examples show how scams impersonating ING typically read, with the tells that give each one away. Compare them against anything you've received.
ING: Your card has been suspended pending verification. Reactivate within 2 hours at ing-card-check[.]example to avoid permanent cancellation.
What gives it away:
- ING never sends SMS asking you to verify, reactivate or unlock a card, so the very existence of this text is the proof it's fake
- The link points to a lookalike, not ing.com.au, and a real notice would sit in the secure app inbox
- A two-hour fuse on a 'permanent cancellation' is pure pressure; card problems don't work on countdowns
A caller claiming to be 'ING security' says a fraudulent transfer is leaving your Orange Everyday account this minute. To cancel it, they need you to read out the one-time code that has just arrived on your phone.
What gives it away:
- The code they want is the one authorising THEIR transfer; reading it out hands over your account
- ING contacts you through the app or when you call it, so an unsolicited security call demanding codes doesn't fit how the bank operates
- Hang up and check inside the ING Australia app; a genuine hold or alert will be waiting there
Not sure about your message?
Paste the suspicious ING text or email and get an instant scam verdict, free.
How to verify a message from ING
ING's real website is ing.com.au and the official app is the ING Australia app. Reach ING through those channels, never through the details inside a message you're unsure about.
- Don't tap the link, reply, or read anything out to a caller; put the message aside entirely
- Open the ING Australia app and check the secure inbox and your transactions, or type ing.com.au into your browser yourself; anything real will be there
- If you still want confirmation, call ING using the contact options shown inside the app or on ing.com.au, never a number supplied by the message
If you have been scammed in ING's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- Call ING immediately using the contact options in the ING Australia app or on ing.com.au so the bank can block your card, secure the account and try to stop any transfer
- Change your ING access code and password via the official app, and change any other account where you reused them
- If you shared identity documents such as a licence, passport or Medicare card, contact IDCARE (idcare.org) for free identity support
- Report the scam to Scamwatch and ReportCyber using the links below
- Forward the scam SMS to 7226 (spells SCAM) so carriers can block the sender
Where to report a scam impersonating ING
Received — or fell for — a message impersonating ING? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Latest ING scams in 2026
Because ING runs branchless and app-first, nearly every scam in its name arrives as an SMS: card suspended, verification required, transfer failed, always with a short window and a lookalike link. Some campaigns chain a follow-up call from 'ING security' that harvests the one-time code needed to empty the account. The fakes evolve their wording, yet all of them contradict a single fixed fact: ING does not send card-verification texts, and its urgent notices live inside the secure app inbox. Checking the app before believing any message is therefore not just a good habit here, it is a complete defence.
Frequently asked questions
I received an SMS from ING asking me to verify my card — is it a scam?
Yes. ING does not send SMS messages to verify cards; any such text is fraudulent. Delete it and report the number to Scamwatch at scamwatch.gov.au.
How do I know if an ING message is real?
Only trust messages that appear inside the ING Australia app or that you requested by phone. Never click links in unsolicited texts; instead, open the app or type ing.com.au yourself.
What should I do if I clicked a link in a fake ING text?
Change your ING password immediately via the official app, monitor your accounts for unusual activity, and contact IDCARE on 1300 432 273 for free support. Report the scam at cyber.gov.au.
What is ING's real website in Australia?
ING Australia's only genuine website is ing.com.au. Reach it by typing the address yourself or by using the ING Australia app; any variation with extra words, hyphens or a different ending is an imposter.
How do I report an ING scam text?
Forward the text to 7226 (spells SCAM) so carriers can block the sender, and report it to Scamwatch (scamwatch.gov.au) so the National Anti-Scam Centre can track the campaign. If money was taken, call ING first through the app, then report to ReportCyber (cyber.gov.au).
Related scam types
Scams impersonating ING usually fit one of these patterns. Learn how each works:
Related brands
Other bank names scammers impersonate — check a message from one:
Sources
- Text or SMS scams (Scamwatch (National Anti-Scam Centre))
- Phishing scams: how scammers pose as trusted organisations (Scamwatch (National Anti-Scam Centre))
- Phone scams (Scamwatch (National Anti-Scam Centre))
This guide is general information, not legal or financial advice — always verify with ING through an official channel.