Common scam types in Australia

Most scams reaching Australians follow a handful of well-worn playbooks. Each guide below explains how the scam works, the warning signs to watch for, and what to do if you've been targeted. Got a specific message? Check it now for an instant verdict.

• Fake accounting software alerts (Xero, MYOB & more)Accounting-software scams are fake emails, invoices and texts that impersonate platforms like Xero, MYOB, QuickBooks and Reckon — 'billing failed', 'account suspended', 'view your invoice' — to trick businesses into logging in on a fake page or opening a malware-laden attachment. They peak around EOFY, when invoices and account messages look routine.
• Bank Impersonation ScamsScammers pose as your bank's fraud team by phone or text — often spoofing the bank's real number or landing in the same SMS thread as genuine messages — to 'protect' your money. The goal is your login details, your one-time security codes, or convincing you to move funds to a so-called safe account. These are among the most financially devastating scams reported in Australia.
• Business email compromise (BEC) & fake invoice scamsBusiness email compromise — also called payment redirection or fake invoice scams — is when a scammer hacks or imitates a business's email and tells you its bank details have changed, so a genuine payment goes to the scammer instead of the real supplier. It's one of the costliest scams for Australian businesses, and it spikes at EOFY when invoice volumes are high.
• Delivery & Parcel ScamsFake 'missed delivery' texts and emails impersonating Australia Post, DHL, FedEx and other couriers are among the most common scams hitting Australian phones. They claim a parcel is held up — wrong address, unpaid fee, failed delivery — and push you to a fake tracking or payment page built to steal your card details.
• myGov impersonation scamsmyGov scams are fake texts and emails that look like they're from myGov or Services Australia — claiming your account is suspended, a payment is blocked, or you need to 'verify' your details — to lure you to a fake myGov sign-in page and steal your account. A hijacked myGov account can expose your tax, Centrelink and Medicare records.
• QR code scams (quishing)QR code scams — also called 'quishing' — use a QR code instead of a visible link to send you to a fake login or payment page, or to download malware. Because people trust QR codes and can't read where they lead, a scam sticker, email or text can be hard to spot until it's too late.
• Tax refund & ATO impersonation scamsTax refund scams are fake texts, emails and calls that pretend to be from the ATO or myGov — promising a refund or threatening a debt to trick you into handing over your login, personal details or money. They spike around tax time (June to October), when a message about your return looks believable.
• Unpaid Toll ScamsWaves of texts claiming you owe a few dollars in unpaid tolls — usually impersonating Linkt or E-Toll — have flooded Australian phones. The amounts are deliberately small, often around $3, but the fake payment page captures your full card details and personal information.

These guides are general information for Australians, not legal or financial advice — if you've lost money, contact your bank and report it straight away.