Is this bill or text from TPG a scam?
No. TPG is a legitimate Australian internet and mobile provider. Scammers, not TPG, are behind the overdue-invoice texts, card 'verification' emails and fake 'TPG Secure App' links circulating in its name, all built to capture payments or logins from its customers. The good news: a few quick checks almost always tell a real TPG message from a fake.
Genuine TPG links lead to tpg.com.au — but a link can be made to look real, so don't go by the link alone. Below is how genuine TPG contact usually works, the scams commonly run in its name, the red flags that give a fake away, and an example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real TPG message looks like
Genuine messages from TPG link to tpg.com.au. Treat a link to any other address as a warning sign.
- TPG says that if a message seems suspicious or unexpected, you should contact the business using its official website or published contact details, and not any contact details in the message
- TPG says it won't call you and ask for your PINs, passwords, or a one-time passcode for verification
- TPG says it won't contact you to request a SIM swap or ask you to provide a one-time code
- TPG says it won't contact you and ask for your payment details relating to an nbn appointment or fault, or ask to access your computer or devices in person or remotely
- Anything genuine, such as a balance or a notice, can be checked in your TPG account without using a link in a message
What a genuine TPG contact shouldn't do
- Call you and ask for your PINs, passwords or a one-time passcode for verification (TPG says it won't)
- Contact you to request a SIM swap (TPG says it won't)
- Call you from a private number, or ask for your credit card details for refunds, reimbursements or compensation (TPG says it won't)
- Ask for payment details for an nbn appointment or fault, or for access to your computer or devices (TPG says it won't)
- Tell you to download an app or pay through a link in an unexpected message; as a general rule, don't, and check your account in the My TPG app or at tpg.com.au instead
Common TPG scams
- Scammers send SMS claiming an overdue TPG bill with a link to a fake payment page on a lookalike domain.
- Emails pretend to be from TPG billing and warn of account suspension unless the customer 'verifies' card details on a bogus site.
- Messages urge customers to download a 'TPG Secure App' from a link that actually installs malware or steals login credentials.
Red flags to watch for
- The sender name, number or email address looks right but the message pushes you to act through a link or number inside it; TPG says scammers use call spoofing to make a call look like it's coming from a local or trusted number.
- It demands immediate payment via an urgent link instead of directing you to log into tpg.com.au yourself.
- The link uses a domain such as tpg-billing-secure[.]example or tpg-internet[.]example instead of tpg.com.au.
- The message uses a generic greeting such as 'Dear Valued Customer', a sign ACMA lists for telco impersonation, though a message that does use your name proves nothing because names leak in data breaches.
- It threatens same-day disconnection or legal action if you do not click the supplied link.
- A robocall threatens to disconnect your service unless you give personal information or pay; TPG describes this as an nbn disconnection scam.
TPG scam examples
These composed examples show how scams impersonating TPG typically read, with the tells that give each one away. Compare them against anything you've received.
Subject: TPG Billing: suspension notice. Dear Valued Customer, your recent payment could not be processed. Verify your card details at tpg-account-services[.]invalid within 24 hours or your account will be suspended.
What gives it away:
- A sender address can be faked, so don't judge by it; log in to your TPG account yourself to check whether any payment problem exists, rather than using a link to update payment details
- 'Dear Valued Customer' is a generic greeting, which ACMA lists as a sign of telco impersonation; a message that does use your name proves nothing, because names leak in data breaches
- A suspension threat inside 24 hours is there to make you act before checking; TPG says to verify a suspicious or unexpected message using its official website or published contact details, not details in the message
TPG Security: Your connection is at risk. Download the new TPG Secure App now at tpg-secure-app[.]example to protect your account before access is restricted.
What gives it away:
- An app download pushed through a text link is a red flag, because a download from an unexpected text can steal your login or compromise your device
- Check statements and alerts in the My TPG app or at tpg.com.au, typed in yourself, instead of acting on a security-scare text
- Fear plus a deadline ('at risk', 'before access is restricted') is the pressure pattern, not how a provider talks about maintenance
Not sure about your message?
Paste the suspicious TPG text or email and get an instant scam verdict, free.
How to verify a message from TPG
TPG's real website is tpg.com.au and the official app is the My TPG app. Reach TPG through those channels, never through the details inside a message you're unsure about.
- Don't click the link, download anything, or pay through the message
- Log in directly at tpg.com.au, typed into your browser yourself, or open the My TPG app and check your actual balance and notices
- Don't judge by the sender: names, numbers and email addresses can be disguised, so check your account yourself
- If you're still unsure, use the contact options you find on tpg.com.au, not a number or link the message supplies; TPG says to use its official website or published contact details, not details in the message
If you have been scammed in TPG's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- If you entered card details on a fake payment page, call your bank immediately, block the card and dispute any charges
- If you downloaded anything from a message link, disconnect the device from the internet and run a security scan before using it for banking or email
- Change your TPG password from tpg.com.au, and change it anywhere else you reused it
- If you shared identity documents, contact IDCARE (idcare.org) for free identity support
- Report the scam to Scamwatch and ReportCyber using the links below, and forward scam texts to 7226 so carriers can block the sender
Where to report a scam impersonating TPG
Received — or fell for — a message impersonating TPG? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
TPG scam activity in 2026
TPG-branded scams currently work three angles: the overdue invoice text pointing at a lookalike payment page, the 'TPG Billing' suspension email demanding card verification, and the fake 'TPG Secure App' download that goes after logins and devices. The constants across all three are a link inside the message, a generic greeting, and a same-day threat. None of those details proves anything on its own, because sender names, email addresses and links can all be disguised. TPG has said scammers have tried to replicate its genuine email-account retention emails to phish personal information, and says to verify an unexpected message using its official website or published contact details. Log in to your TPG account yourself; if the message's claim isn't waiting there, treat the message as a scam.
Frequently asked questions
I received a TPG text saying my bill is overdue with a link — is it a scam?
Don't use the link. A text pushing you to pay through a link is a common scam pattern, and TPG says to verify a suspicious or unexpected message using its official website or published contact details, not details in the message. Log in to your TPG account yourself to check any balance.
How do I know if a TPG email about account suspension is real?
You can't tell from the sender address or the logo alone, because both can be copied. TPG has warned that scammers have tried to replicate its genuine email-account retention emails to phish personal information, and says it will not ask for your My Account login details, personal information or payment details in that campaign. Don't click links in the email; log in to your account yourself, or contact TPG using its published contact details.
What should I do if I clicked a link in a fake TPG message?
Change your TPG password immediately from tpg.com.au, scan your device for malware, and report the message at scamwatch.gov.au.
What is TPG's real website?
TPG's official website is tpg.com.au, and your account is managed there or in the TPG app. Type the address into your browser yourself instead of following message links. Domains that wrap the TPG name in words like 'billing', 'secure' or 'internet' are a common impersonation trick.
How do I report a TPG scam message?
Report it to Scamwatch (scamwatch.gov.au) so the National Anti-Scam Centre can track it, and forward scam texts to 7226 (spells SCAM) so carriers can block the sender. If you lost money or entered card details, call your bank first and also report it to ReportCyber (cyber.gov.au).
Scam message examples
Related scam types
Scams impersonating TPG usually fit one of these patterns. Learn how each works:
Related brands
Other telco names scammers impersonate — check a message from one:
Sources
- Email scams (Scamwatch (National Anti-Scam Centre))
- Text or SMS scams (Scamwatch (National Anti-Scam Centre))
- Dealing with spam (ACMA)
- Scams Awareness (TPG)
- Watch out for scam texts pretending to be from your telco (Australian Communications and Media Authority (ACMA))
This guide is general information, not legal or financial advice — always verify with TPG through an official channel.