Scams and identity theft were big problems in Australia, long before the Optus data breach put many of us on alert.
According to the Australian Competition and Consumer Commission (ACCC), more than $381 million has been lost to scams so far this year.
And there have been more than 146,000 reports to the ACCC's Scamwatch, but those are only the ones being reported, so the actual scam loss figure could be higher, ACCC deputy chair Delia Rickard says.
"Scammers will almost always pretend to be a trusted entity, a government agency, a bank or major retailer, or they will be tapping in on current events," Ms Rickard says.
"So, we're seeing scams and scammers at the moment call and have an excuse that they're calling because of the Optus breach."
Here are some of the common scams going around right now to watch out for.
E-toll scams
What's the scam? Scammers posing as a toll roads operator to trick people into handing over personal information.
How does this scam work? It starts with a message claiming to be from road toll operators like Linkt. Sometimes, people are asked to pay an unpaid toll, other times people are asked to update their account details for their e-tag. Sometimes the texts come from unknown mobile numbers, but Linkt says it's been made aware of scammers using a spoofing technique that makes the message appear as if the sender is Linkt. The message usually contains a short URL link, which takes people to a website with very convincing-looking branding. From there, they're directed to log in or enter personal information.
What can I do to protect myself? Never click any links that seem suspicious. Linkt says people should check for common signs of phishing sites, such as spelling errors and poor grammar and to be wary of URLs that don't start with https://www.linkt.com.au. Scamwatch says you should contact the company directly if you think you have an unpaid bill, making sure you use the contact details you've found yourself online, in the phone book or on a previous bill, not the ones supplied by a suspected scammer.
Imposter bond investment opportunities
What's the scam? Scammers impersonate real financial companies or banks and claim to offer government/treasury bonds or fixed-term deposits.
How does this scam work? There's a few ways. Some victims are contacted by phone about offers of investment opportunities, while others search for investment opportunities online, find a fake but very convincing-looking, third-party comparison website and complete an enquiry form. From there, they're usually directed to transfer funds into a bank account or provide their credit details to make a deposit for their "investment".
What can I do to protect myself? Scamwatch recommends independently verifying the financial institution or bank issuing the bonds by calling them directly — and make sure you find that number on your own, rather than using any phone numbers or links provided by a suspected scammer. Check to see if the company is listed on government-run MoneySmart's "Companies you should not deal with" list. If you've been told you're dealing with someone from an institution, ask to speak to that person by name. Have an accredited financial or legal advisor check any potential investment opportunity. And, remember, bonds can be purchased via the ASX.
The 'Hi Mum' scam
What's the scam? Scammers pretend to be the victim's child and ask them to transfer money or disclose personal information.
How does this scam work? The scammer sends a message to the victim starting with something along the lines of "hi mum". The scammer says their phone has been lost or damaged and often asks the victim to replace their child's number in their contact list with the number they're messaging from. If the victim asks which child they're talking to, the scammer is careful not to name names and usually says they're the oldest child. There's often a bit of back-and-forth before the scammer asks the victim to borrow money for a replacement phone and directs them to transfer money. However, it's not just money — Scamwatch says there's been reports of scammers asking for personal information such as photos for their social media profile, so watch out for that too.
What can I do to protect myself? Check to make sure the person you're messaging really is who they say they are. Scamwatch says you can do that by calling the original number you have for that person and try a secondary contact method — so, maybe, send them a message over social media or send an email. Scamwatch also recommends telling another relative about the message. And you can always ask a question only your person would know the answer to or make up a fake question to catch out a potential scammer — so you could ask something such as: "How's the dog going?", knowing they don't have a dog.
Threatening 'official' calls
What's the scam? Scammers call you up and try to scare you into thinking you've going to be fined or arrested.
How does this scam work? Victims receive a phone call from someone claiming to be from a government department or authority threatening with serious consequences — some are told they're being fined, they have an unpaid tax bill or that there's a warrant out for their arrest. Sometimes, the call will tell the victim to pay a fee or fine to resolve the matter or ask for personal information, such as passport details, date of birth or bank information. Here's the script from an example of a scam call that Scamwatch shared with us — notice how they use the current threat of identity theft to legitimise their fraudulent claims:
Investigation division of Department of Home Affairs. The reason behind this call is that there is a legal case being filed under your name and your identity is being used for several illegal activities. There is an arrest warrant issued under your name as well. To talk to a federal officer from the Department of Home Affairs press one now.
What can I do to protect myself? Stop and question whether the caller's story is true. Don't let them pressure you. Never use contact details provided by the caller, instead dig out those details yourself by looking at the organisation's official website. If you're unsure about who the person is or whether you can trust them, don't send money, give credit card details or disclose personal information to them.
Phantom tractor scams
What's the scam? Scammers pose as suppliers of tractors and agricultural machinery, convincing buyers to pay deposits on equipment that doesn't exist.
How does this scam work? Scammers impersonate a machinery business and advertise cheap machinery via fake websites or bogus classified ads to lure potential buyers. Sometimes, they use legitimate business names or ABNs to appear more authentic. The scammers use a bunch of different means of tricking people into handing over money, including offering a fake contract of sale, answering questions by phone or email and offering a free trial period once a deposit is paid. The scammers promise to deliver the machinery and direct the victim to pay an online transfer, sometimes via a "safe" third-party service that is actually run by the scammers. But the machinery never arrives.
What can I do to protect myself? Scamwatch says to make sure the seller is who they say they are by searching for the address of the business online and calling a nearby business. Don't just rely on name recognition of the business or an ABN search because scammers can fraudulently use this information to pretend they're running a legitimate operation. Also, try doing an internet search with the exact wording in the ad to see what comes up. Insist on inspecting machinery in person or via a live video and ask to pay at the time of delivery or pick-up.
'Suspicious' transaction scam
What's the scam? Scammers call victims, warning about a dodgy purchase, to trick them into handing over personal information.
How does this scam work? Victims answer their phone or receive a voice message from someone claiming to be from their bank advising them of a suspicious transaction. Some may claim there was an issue because of the Optus data breach, some tell victims a specific amount as been charged to their account — it could be something like an Amazon or a Netflix account. The victim will be asked to "confirm" personal information or banking details, such as their credit card numbers. Here's the script from an example of such a scam call that Scamwatch shared with us:
"We have received a purchase request of $299.99 and the same will be debited from your account within an hour automatically. If you have not placed the order, then please press one to speak with a representative to cancel the order or call us back at [redacted number]. Thank you."
What can I do to protect myself? Check your account independently via the organisation's secure app, log in to its website using your normal login or call them using a phone number you've dug up on your own, such as by looking at the Contact Us page on the organisation's official website.
Scams about scams
What's the scam? A scammer who has successfully swindled a victim out of money going back for more.
How does the scam work? A scam victim is contacted by a fake firm offering to get their money back, so long as they pay a fee. Depending on how much information a scammer has managed to steal from a victim, they might call or send an email and may sound quite convincing if they're armed with their personal details.
How do I protect myself? Scamwatch says, if you've been scammed out of money, report any lost funds to your bank. If you're unhappy with the bank's response, seek free advice from the Australian Financial Complaints Authority.
