Is this renewal notice from NRMA a scam?
No. The NRMA is a trusted Australian motoring and insurance name, which is exactly why criminals wear it: premium-refund texts, urgent policy-adjustment messages and spoofed login pages all use NRMA branding to pry card and login details out of members. The good news: a few quick checks almost always tell a real NRMA message from a fake.
Genuine NRMA links lead to nrma.com.au — but a link can be made to look real, so don't go by the link alone. Below is exactly what a real NRMA message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
Australians reported about $2 billion in scam losses in 2024 — down 25.9% on the year before. Source: National Anti-Scam Centre
What a real NRMA message looks like
Genuine messages from NRMA link to nrma.com.au. Treat a link to any other address as a warning sign.
- NRMA never sends SMS from a short code or unknown number asking you to click a link for a premium refund
- Genuine NRMA communications about policy changes or payments are sent from an identifiable long number or appear inside the My NRMA app or your logged-in account at nrma.com.au
- NRMA does not cold-contact members via SMS or email demanding immediate action on a supposed overpayment
- Real NRMA renewal or claim updates are visible when you log directly into your account at nrma.com.au rather than arriving as an unexpected link
- NRMA never requests card details or personal verification via a text message
What NRMA will never do
- Send an SMS link asking you to claim a premium refund
- Request card details or personal verification via a text message
- Cold-contact you demanding immediate action on a supposed overpayment
- Hide a refund, renewal or claim update from your logged-in account so a message link is the only way to see it
- Push you to pay or 'confirm' details on any site other than nrma.com.au; no legitimate insurer takes payments through lookalike domains
Common NRMA scams
- Scammers send SMS claiming you are owed a premium refund and include a link to a fake site mimicking nrma.com.au to harvest card details
- Fraudsters pose as NRMA and text about an urgent policy adjustment that requires you to "confirm" details on a spoofed login page
- Impersonators use lookalike domains such as nrma-refund-claim[.]example or nrma-secure-login[.]example in messages that appear to come from NRMA
Red flags to watch for
- The message contains a shortened or suspicious link instead of directing you to log in at nrma.com.au yourself
- It claims an immediate refund or policy change that you did not request and urges you to act now
- The sender ID is a random long number or a short code rather than a known NRMA number you have previously received messages from
- The text asks for card, login or personal details to process the supposed refund
- Hovering over or previewing the link reveals a domain that is not nrma.com.au
NRMA scam examples
These composed examples show how scams impersonating NRMA typically read, with the tells that give each one away. Compare them against anything you've received.
NRMA Refunds: an audit found your policy overpaid $187. Enter your card to receive the credit: nrma-premium-refund[.]example/claim
What gives it away:
- NRMA never sends SMS links for premium refunds, and it never asks for card details by text
- You do not enter card details to RECEIVE money; that request only ever takes money out
- A refund you never asked about, paired with an act-now link, is the signature premium-refund bait used against insurer customers
A page at nrma-secure-login[.]example reproduces the NRMA sign-in screen and warns that an urgent policy adjustment is pending, asking you to log in and then confirm your card details so your premium is not recalculated at a higher rate.
What gives it away:
- The address is a lookalike, not nrma.com.au; previewing a link before tapping exposes this instantly
- A real policy adjustment would be waiting inside your account at nrma.com.au or the My NRMA app, reachable without any supplied link
- The threatened premium hike is pressure dressing; insurers do not reprice your policy because you failed to click
Not sure about your message?
Paste the suspicious NRMA text or email and get an instant scam verdict, free.
How to verify a message from NRMA
NRMA's real website is nrma.com.au and the official app is the My NRMA app. Reach NRMA through those channels, never through the details inside a message you're unsure about.
- Do not tap the link, reply to the text, or enter any details it asks for
- Open the My NRMA app or type nrma.com.au into your browser yourself and check your policy; any genuine refund, renewal or adjustment will be visible when you log in
- Preview the link's real destination if you can; anything that is not nrma.com.au confirms the scam
- Compare the message against the current scams NRMA lists on its consumer-alert page (linked below)
If you have been scammed in NRMA's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- If you entered card details, call your bank straight away to block the card and dispute any charges; acting within hours gives the best chance of recovery
- Change your NRMA password by typing nrma.com.au yourself, and change the same password anywhere else you used it
- If identity details such as your licence went in, contact IDCARE (idcare.org) for free identity support
- Check your NRMA account and bank statements for payments, claims or detail changes you did not make
- Report the scam to Scamwatch and ReportCyber using the links below, and forward the scam SMS to 7226 so carriers can block the sender
Where to report a scam impersonating NRMA
Received — or fell for — a message impersonating NRMA? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- NRMA scam alerts — NRMA's own page on current scams and how to report one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Latest NRMA scams in 2026
The refund is the star of current NRMA impersonations: a text announces your policy overpaid, an audit found a credit, or an urgent adjustment needs confirming, and every path ends at a lookalike page asking for the card details that supposedly receive the money. Domains rotate faster than the script does, so the reliable tells are behavioural: NRMA does not send refund links by SMS and never asks for card details by text. While national reporting shows scam losses trending down, insurance refund bait remains a steady presence. Check any claim by logging in at nrma.com.au or the My NRMA app yourself, and let unexpected refunds prove themselves there.
Frequently asked questions
I got a text from NRMA saying I have a premium refund — is it a scam?
NRMA does not send SMS links for refunds. Log straight into your account at nrma.com.au to verify any payment, and report the message at scamwatch.gov.au.
How do I know if an NRMA message is real?
Genuine NRMA messages never ask you to click a link for a refund or to enter details. Check the same information by logging into nrma.com.au yourself.
What should I do if I clicked the link in a fake NRMA text?
Change any passwords you entered, monitor your accounts, and report the incident to IDCARE on 1300 432 273 or via cyber.gov.au.
What is NRMA's real website?
NRMA's official website is nrma.com.au, and genuine links point only there. Manage your policy by typing nrma.com.au into your browser yourself or through the My NRMA app, and treat any other domain in an NRMA-branded message as a fake.
How do I report an NRMA scam text?
Check and report it through NRMA's consumer-alert page at nrma.com.au, then report it to Scamwatch at scamwatch.gov.au and forward the SMS to 7226 (spells SCAM) so carriers can block the sender. If you lost money, also lodge a report with ReportCyber at cyber.gov.au and call your bank.
Related scam types
Scams impersonating NRMA usually fit one of these patterns. Learn how each works:
Related brands
Other insurance names scammers impersonate — check a message from one:
Sources
- Consumer alerts and current scams (NRMA)
- Text or SMS scams (Scamwatch (National Anti-Scam Centre))
- Australians better protected as reported scam losses fell by almost 26 per cent (National Anti-Scam Centre)
This guide is general information, not legal or financial advice — always verify with NRMA through an official channel.