Is this bill or text from TPG a scam?
No. TPG is a legitimate Australian internet and mobile provider. Scammers, not TPG, are behind the overdue-invoice texts, card 'verification' emails and fake 'TPG Secure App' links circulating in its name, all built to capture payments or logins from its customers. The good news: a few quick checks almost always tell a real TPG message from a fake.
Genuine TPG links lead to tpg.com.au — but a link can be made to look real, so don't go by the link alone. Below is exactly what a real TPG message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real TPG message looks like
Genuine messages from TPG link to tpg.com.au. Treat a link to any other address as a warning sign.
- Genuine TPG billing and service messages are sent from tpg.com.au email addresses only.
- TPG never asks customers to click a link in an SMS or email to pay a bill or update payment details.
- Account statements and usage alerts from TPG arrive through the customer's My TPG portal or the official TPG app.
- TPG will never threaten immediate service disconnection in a single unsolicited message.
- Any genuine TPG communication uses the customer's full account number and references their specific plan.
What TPG will never do
- Ask you to click a link in an SMS or email to pay a bill or update payment details
- Email you from an address that does not end in @tpg.com.au
- Threaten immediate service disconnection in a single unsolicited message
- Push app downloads through message links (no legitimate telco distributes its software that way); statements and alerts arrive through the My TPG portal or the official TPG app
Common TPG scams
- Scammers send SMS claiming an overdue TPG bill with a link to a fake payment page on a lookalike domain.
- Emails pretend to be from TPG billing and warn of account suspension unless the customer 'verifies' card details on a bogus site.
- Messages urge customers to download a 'TPG Secure App' from a link that actually installs malware or steals login credentials.
Red flags to watch for
- The message comes from a mobile number or email address not ending in @tpg.com.au.
- It demands immediate payment via an urgent link instead of directing you to log into tpg.com.au yourself.
- The link uses a domain such as tpg-billing-secure[.]example or tpg-internet[.]example instead of tpg.com.au.
- The message contains spelling errors or generic greetings like 'Dear Valued Customer' rather than your actual name.
- It threatens same-day disconnection or legal action if you do not click the supplied link.
TPG scam examples
These composed examples show how scams impersonating TPG typically read, with the tells that give each one away. Compare them against anything you've received.
Subject: TPG Billing: suspension notice. Dear Valued Customer, your recent payment could not be processed. Verify your card details at tpg-account-services[.]invalid within 24 hours or your account will be suspended.
What gives it away:
- Real TPG emails come only from addresses ending in @tpg.com.au, and TPG never asks you to click a link to update payment details
- 'Dear Valued Customer' is the giveaway greeting; genuine TPG communications use your full account number and reference your specific plan
- One unsolicited message threatening suspension inside a day is exactly what TPG says it will never send
TPG Security: Your connection is at risk. Download the new TPG Secure App now at tpg-secure-app[.]example to protect your account before access is restricted.
What gives it away:
- There is no app delivered by text link; the download exists to steal your login or compromise your device
- Genuine statements and alerts arrive through the My TPG portal or the official TPG app, not through security-scare texts
- Fear plus a deadline ('at risk', 'before access is restricted') is the pressure pattern, not how a provider talks about maintenance
Not sure about your message?
Paste the suspicious TPG text or email and get an instant scam verdict, free.
How to verify a message from TPG
TPG's real website is tpg.com.au and the official app is the My TPG app. Reach TPG through those channels, never through the details inside a message you're unsure about.
- Don't click the link, download anything, or pay through the message
- Log in directly at tpg.com.au, typed into your browser yourself, or open the My TPG app and check your actual balance and notices
- Check the sender: a genuine TPG email ends in @tpg.com.au, and a genuine notice references your full account number and plan
- If you're still unsure, use the contact options you find on tpg.com.au, never a number or link the message supplies
If you have been scammed in TPG's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- If you entered card details on a fake payment page, call your bank immediately, block the card and dispute any charges
- If you downloaded anything from a message link, disconnect the device from the internet and run a security scan before using it for banking or email
- Change your TPG password from tpg.com.au, and change it anywhere else you reused it
- If you shared identity documents, contact IDCARE (idcare.org) for free identity support
- Report the scam to Scamwatch and ReportCyber using the links below, and forward scam texts to 7226 so carriers can block the sender
Where to report a scam impersonating TPG
Received — or fell for — a message impersonating TPG? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Latest TPG scams in 2026
TPG-branded scams currently work three angles: the overdue invoice text pointing at a lookalike payment page, the 'TPG Billing' suspension email demanding card verification, and the fake 'TPG Secure App' download that goes after logins and devices. The constants across all three are an off-domain link, a generic greeting instead of your account number, and a same-day threat. Those constants are also the defence, because every genuine TPG notice reaches you through @tpg.com.au email or the My TPG portal and app. Log in at tpg.com.au yourself; if the message's claim isn't waiting in your account, the message was the scam.
Frequently asked questions
I received a TPG text saying my bill is overdue with a link — is it a scam?
Yes. TPG never sends payment links by SMS. Log into your account at tpg.com.au to check any balance.
How do I know if a TPG email about account suspension is real?
Only emails from addresses ending in @tpg.com.au are genuine. Never click links; always visit tpg.com.au directly.
What should I do if I clicked a link in a fake TPG message?
Change your TPG password immediately from tpg.com.au, scan your device for malware, and report the message at scamwatch.gov.au.
What is TPG's real website?
TPG's only official website is tpg.com.au, and your account is managed there through the My TPG portal or the official TPG app. Type the address into your browser yourself instead of following message links. Domains that wrap the TPG name in words like 'billing', 'secure' or 'internet' are impersonations.
How do I report a TPG scam message?
Report it to Scamwatch (scamwatch.gov.au) so the National Anti-Scam Centre can track it, and forward scam texts to 7226 (spells SCAM) so carriers can block the sender. If you lost money or entered card details, call your bank first and also report it to ReportCyber (cyber.gov.au).
Related scam types
Scams impersonating TPG usually fit one of these patterns. Learn how each works:
Related brands
Other telco names scammers impersonate — check a message from one:
Sources
- Email scams (Scamwatch (National Anti-Scam Centre))
- Text or SMS scams (Scamwatch (National Anti-Scam Centre))
- Dealing with spam (ACMA)
This guide is general information, not legal or financial advice — always verify with TPG through an official channel.