What are scam text messages?

Estimated reading time
min

Text scams occur when someone impersonates an organisation or individual and sends you a message that contains an urgent request, such as paying an overdue toll or claiming a refund, with a link or a phone number to call.
Receiving an unexpected text with a sense of urgency with a link in the message is one of the many red flags that it might be a scam.
The scammer will often impersonate trusted organisations, such as the post office or a bank, through text message spoofing or by mentioning the organisation name in the text message, but they can also pretend to be a family member, such as your child.

Texting is a convenient form of communication, and it’s one of the most popular ways we communicate with each other.

Texting is a convenient form of communication, and it’s one of the most popular ways we communicate with each other. According to the Australian Communications and Media Authority, around 96% of Australians use their phones to text people, be it a family member, friend or colleague.¹ And it’s not just the younger generation who are sending fun emojis and checking in with their loved ones – just over half of older Australians text their family and friends, which is around 2 million people across the country.²

However, scammers often exploit our love for texting to target their next victim. With the right technology, they could send hundreds of texts daily, hoping someone would respond or follow their instructions. In fact, sending a text message (usually with a suspicious link) is one of the top three ways a scammer might contact you.³

That’s why knowing how to spot these text message scams might assist in communicating with your loved ones safely and avoid being scammed.

What are scam text messages?

Text scams (also called ‘smishing’ or SMS scams) occur when a scammer contacts you by text message to trick you into clicking a link and following the instructions. The catch, however, is that these links take you to a fraudulent website designed to steal your personal information or install malicious software (malware) on your device or prompt you to share personal information. From there, the scammer can use your information to steal your money or engage in other fraudulent activity, such as applying for a loan in your name.

The scammer will often impersonate trusted organisations, such as the bank or government, but they might also pretend to be a loved one, such as your child. Sometimes, these scam text messages might have the same phone number or sender ID (the name that pops up when you get a text) as the organisation or person the scammer is impersonating. They might use special software that helps them set the sender ID to the organisation or business they’re impersonating, or they might exploit weaknesses in a telco’s system to change the sender’s information. Your phone might group the fake and legitimate text messages in the same thread based on the sender ID, making it hard to tell what’s real and what’s a scam.

How can you try to spot text scams?

You receive an unexpected text message that asks you to share personal information, make a payment or click a link. The message might come from an organisation you’ve never dealt with before, too. For example, if you don’t take the toll roads and receive a text saying you have an unpaid toll bill, then it’s most likely a scam.
There’s a sense of urgency for you to act immediately, or there’ll be repercussions, such as getting a fine or missing out on a refund.
The link in the message doesn’t match the organisation it’s claiming to be, or it doesn’t look like the URL you typically use.
The message might also begin with the name of the company the scammer is impersonating, especially if the message is unexpected and not part of a thread. If the company’s name is spelled incorrectly or looks different, it might be a message from a scammer. For example, ‘Anz Bank: Your account has unusual activity. Sign into your account here: www.anz-bank-australia.com.au.’

What should you do if you receive a scam text message?

Stop, pause, and think before you reply or do what the message tells you to do. This can help you identify if the message is a scam.
Avoid clicking on links or calling phone numbers in the message. This can lead you straight to a fake website or scam caller who will try to manipulate you into handing over personal information.
Call the organisation or the person back using a number you found independently, such as on the back of a banking card or in your phonebook. Verify that they were the ones who contacted you.
Never share your personal or banking information by text message.
Report the text message to Scamwatch, ReportCyber or to your bank (if the scammer is claiming to be from your bank).
Turn on your phone’s spam filter or download a legitimate third-party scam text blocker, such as Robokiller and Truecaller.
Reach out to your telco to report the scam text message or to get advice on how to stop these text messages.

5 common scenarios of scam text messages

As you’ll see, you might receive many types of scam messages. While we’re not more likely to receive one type over another, our behaviours (like the companies we trust or are used to hearing from) might make us more susceptible to some text scams than others.

1. Bank impersonation

A scammer might impersonate a bank and send you a text message claiming there’s unusual activity on your account, you have a notification, or even that you need to pay a credit card fee. However, banks will never send you a text message asking for personal details or payment.

If you click on a link in one of these messages, it can take you to a fake version of your bank’s website, where you might be prompted to log in and share your personal information. If you follow the instructions, the scammer will use that information to impersonate you when they talk to your bank to steal your money for their financial gain.

2. You’re entitled to a refund

A scammer might send you a text message claiming that you’re owed a refund, even though you haven’t requested one or made a purchase. To reclaim your money, you’re instructed to click a link in the message and provide your bank account details. However, when you click on the link, the scammer installs malware on your device and steals essential data and files to use in other scams and criminal activities.

This type of scam text message often lacks information about who is providing the refund, specifies an amount in Australian dollars, and cites an oddly specific figure you’re supposedly entitled to receive.

3. Outstanding toll payment

The scammer pretends to be from a toll road company and sends you a text message claiming your toll or e-tag payment is overdue even if you don’t have an account with that toll company. The message demands that you click on the link immediately to pay the overdue toll and avoid any penalties. When you click on the link, you are redirected to a fake website and prompted to pay. However, you unintentionally pay the scammer directly instead of paying the toll company.

4. Parcel redirection

Whether taking advantage of end-of-financial-year bargains or gearing up for the Boxing Day rush, everyone loves a good sale – and so do scammers. They will capitalise on the fact that we’re shopping online during these sales and send out heaps of text message scams claiming to be from the post office with information about your parcels.

Here’s how these text scams work: you’ll receive a message from the scammer claiming that your delivery has failed. The message will contain a link and instructions for you to click on it to choose a new delivery date or location. If you click the link, you might be prompted to enter your personal information to verify your identity or to make a small payment for parcel redirection. The scammer will steal your personal or banking information to use for themselves, such as impersonating you to carry out other types of scams.

5. ‘Hi Mum, I lost my phone’

Imagine receiving a text message from ‘your child’ out of the blue, stating that they lost their phone and are using a spare. They ask you to text them at the number in the message because they’re stressed about an urgent bill they need to pay and need your help paying it. Your parental instincts kick in, and you text them back. The scammer will play up the distress and worry to try and manipulate you into paying the bill for them. Because you’re worried about your child, you ask the scammer for their bank account details so you can transfer them some money. They’ll send you their banking account information, so when you transfer the money, you’re paying the scammer directly – and you won’t know until you speak to your real child again.

What can you do if you think you’ve been scammed?

If you have shared your banking details, contact your bank immediately to notify them that your account has been compromised. If you’re an ANZ customer, contact us immediately to report the fraud.
If you shared credit card details, ‘block’ or cancel those cards immediately. If your cards are with ANZ, you can report the stolen card through the ANZ app or by calling us.
Block the number, and don’t communicate with the scammer. If your phone has the option to report the number, do so.