Is this bill or text from Telstra a scam?
No. Telstra is Australia's biggest telecommunications company and entirely legitimate. Its name is simply useful to criminals, who borrow it for overdue-bill texts with payment links, 'your internet is compromised' cold calls pushing remote access, and fake refund and rewards schemes. The good news: a few quick checks almost always tell a real Telstra message from a fake.
Genuine Telstra links lead to telstra.com.au, telstra.com — but a link can be made to look real, so don't go by the link alone. Below is how genuine Telstra contact usually works, the scams commonly run in its name, the red flags that give a fake away, and an example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real Telstra message looks like
Genuine SMS from Telstra typically arrive under the sender ID Telstra or TELSTRA, but sender IDs can be spoofed, so the name alone proves nothing. Genuine links lead to telstra.com.au, telstra.com. Treat a link to any other address as a warning sign.
- Telstra says the My Telstra app is the most secure way to get in touch with it about your account
- Telstra says it often calls customers to review their accounts, tell them about new products and services, or let them know if their account is overdue, so being contacted isn't the test; what the contact asks you to do is
- Telstra says it won't phone and ask for information like your bank or credit card details, unless it relates to an existing account requiring payment
- Telstra says it won't contact you to ask for an SMS-delivered PIN in order to 'upgrade' your service or offer a discount, and advises never revealing one-time codes unless you initiated the call or transaction
- Telstra describes calls saying your internet will be disconnected unless you give remote access to your computer as 'not our style', and advises never giving an unsolicited caller remote access
What a genuine Telstra contact shouldn't do
- Ask you to pay a bill with a gift card (Telstra says no legitimate organisation in Australia will accept gift cards as a way to pay for a bill)
- Threaten disconnection in an automated call about 'suspicious activity' on your line (Telstra lists these calls as scams)
- Ask you, in an unsolicited call, to give remote access to your computer (Telstra advises never to give an unsolicited caller remote access)
- Phone and ask for bank or credit card details, unless it relates to an existing account requiring payment, or ask for a one-time PIN to 'upgrade' your service (Telstra says it won't)
Common Telstra scams
- Overdue-bill texts with a payment link, threatening suspension or disconnection if you don't pay immediately
- Cold calls claiming your Telstra or NBN internet is 'compromised' or about to be disconnected, then asking you to install remote-access software so a 'technician' can fix it
- 'Refund' calls where the scammer pretends to overpay you a refund, then pressures you to wire the 'excess' back
- Fake Telstra rewards or points-expiry emails linking to card-harvesting pages
Red flags to watch for
- Threats of immediate disconnection by phone, especially an automated call; Telstra lists these among its active scams
- A link in a text that pushes you to pay or log in; Telstra recommends the My Telstra app for reviewing your account details, so check there instead
- Requests to install remote-access apps such as AnyDesk, TeamViewer or QuickSupport
- Callers asking for bank details or one-time codes to 'process a refund'
- Pressure to buy gift cards or transfer money to keep your service connected
Telstra scam examples
These composed examples show how scams impersonating Telstra typically read, with the tells that give each one away. Compare them against anything you've received.
TELSTRA: We were unable to process your last payment. Your services will be suspended today unless you settle the balance now at my-telstra-pay[.]example.
What gives it away:
- A text pushing you to settle a balance through a link is a classic scam pattern; check what you owe in the My Telstra app, which Telstra recommends for reviewing your account details
- The same-day suspension threat is pressure meant to stop you checking your account first; Telstra describes scams claiming it couldn't process your last payment and that a one-off payment is needed to maintain services
- It talks about 'your services' generically, a weak sign at best: a message that quotes real account details proves nothing either, because details leak in data breaches
A caller from 'Telstra technical support' says your internet has been compromised and will be disconnected within hours. To fix it, they ask you to install a remote-access app such as AnyDesk and read out the connection code on your screen while they 'run diagnostics'.
What gives it away:
- Telstra describes calls saying your internet will be disconnected unless you give remote access to your computer as 'not our style', and advises never giving an unsolicited caller remote access
- The connection code they want read out hands them control of your device and anything you log into while they watch
- The hours-until-disconnection countdown exists to stop you hanging up; hang up anyway and call back on a number listed on telstra.com.au
Subject: Your Telstra points expire tonight. Dear Customer, you have unredeemed rewards points on your account. Redeem before midnight at telstra-rewards-claims[.]invalid; a small card verification step is required to release your gift.
What gives it away:
- Asking for card details to 'release' a reward is the harvest; that step is the entire point of the email
- The link goes to a lookalike address, and a link that looks right proves nothing either; Telstra recommends accessing rewards through the official app or website instead of clicking links in emails
- A midnight expiry plus a generic 'Dear Customer' greeting marks a mass-mailed phish, not an account message
Not sure about your message?
Paste the suspicious Telstra text or email and get an instant scam verdict, free.
How to verify a message from Telstra
Telstra's real website is telstra.com.au and the official app is the My Telstra app. Reach Telstra through those channels, never through the details inside a message you're unsure about.
- Don't pay, tap a link, or call a number supplied by the message or caller
- Open the My Telstra app, or type telstra.com.au into your browser and log in; your real balance, due date and any genuine notices are there
- If a caller claims to be Telstra, hang up and call back using a number listed on telstra.com.au
- If the message doesn't match what your account shows, it's a scam; report it rather than acting on it
If you have been scammed in Telstra's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- If you paid or shared card or bank details, call your bank immediately, block the card and dispute the charges
- If you installed remote-access software, disconnect that device from the internet, uninstall it, run a security scan, and change your important passwords from another device; call your bank if you logged into banking during the session
- Change your Telstra account password from telstra.com.au, and change it anywhere else you reused it
- If you shared identity documents, contact IDCARE (idcare.org) for free identity support
- Report the scam to Scamwatch and ReportCyber using the links below, and forward scam texts to 7226 so carriers can block the sender
Where to report a scam impersonating Telstra
Received — or fell for — a message impersonating Telstra? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Telstra scam activity in 2026
Telstra impersonation splits across two channels. By text, it is the overdue bill: a payment link, a suspension threat, sometimes a spoofed TELSTRA sender ID for credibility. By phone, it is the 'compromised internet' technician who needs remote access, or the refund officer who 'overpays' you and wants the difference wired back. The scripts get updated, but the asks tend to repeat: a link payment, remote access, or codes and bank details for a refund. Telstra lists IP address calls, disconnection calls and refund scams among its active scams, and says it won't contact you to ask for an SMS-delivered PIN to upgrade your service. Verify inside the My Telstra app, and call back only on numbers you find on telstra.com.au yourself.
Frequently asked questions
I got a call saying my Telstra internet will be disconnected today. Is it real?
Treat it as a scam. Telstra lists automated calls claiming to be from Telstra and threatening disconnection due to suspicious activity among its active scams, and describes 'nbn disconnection' calls threatening disconnection within 24 to 48 hours; it says to hang up immediately. These calls aim to panic you into handing over remote access or payment details. Check the My Telstra app instead.
Does Telstra send SMS payment links?
Don't rely on a link either way. Telstra says it uses its own link-shortening service in some texts and emails, so a link on its own doesn't settle whether a message is genuine. What settles it is what the text asks: a text pushing you to pay or log in through a link, especially with a suspension threat, should be checked in the My Telstra app instead of acted on, even if the sender appears as 'Telstra'.
Someone from 'Telstra technical support' wants remote access to my computer. What should I do?
Refuse and hang up. Telstra describes scammers who say your internet will be disconnected unless you give them remote access, and advises never giving an unsolicited caller remote access to your computer. If you already installed something like AnyDesk or TeamViewer, disconnect from the internet, uninstall it, run a security scan, change your important passwords from another device, and call your bank if you logged into banking during the session.
How do I check whether a Telstra bill message is genuine?
Ignore the message's link or callback number. Open the My Telstra app or type telstra.com.au into your browser and log in — your real balance and due date are there. If the message doesn't match what your account shows, it's a scam; report it to Scamwatch.
What is Telstra's real website?
Telstra's official websites are telstra.com.au and telstra.com, and your account lives in the My Telstra app or behind a login you reach by typing those addresses yourself. Domains that bolt extra words onto the Telstra name, such as billing or rewards variants, are a common phishing trick, however polished they look.
How do I report a Telstra scam text or call?
Forward scam texts to 7226 (spells SCAM) so carriers can block the sender, and report the text or call to Scamwatch (scamwatch.gov.au) so the National Anti-Scam Centre can track the campaign. If you lost money or gave a scammer remote access, also report it to ReportCyber (cyber.gov.au) and call your bank first.
Scam message examples
Related scam types
Scams impersonating Telstra usually fit one of these patterns. Learn how each works:
Related brands
Other telco names scammers impersonate — check a message from one:
Sources
- Phone scams (Scamwatch (National Anti-Scam Centre))
- Text or SMS scams (Scamwatch (National Anti-Scam Centre))
- Report a scam (Scamwatch (National Anti-Scam Centre))
- Active scams and scam alerts (Telstra)
- How do I protect myself against phone & SMS scams? (Telstra)
This guide is general information, not legal or financial advice — always verify with Telstra through an official channel.