Scam advice

Emails, messages, QR codes, or phone calls that appear to be from a trusted source (like a bank, your school or employer, or even a government department). They’re requesting you to take urgent action – either for something really bad, or something really good.

The main goal is to get you to click a link that will either download and install malware without you knowing, or to trick you into logging into an account on a fake website (eg. a fake Gmail login page). But there are some common red flags to keep an eye out for.

If you receive a phishing email in your University inbox, be sure to report it using the Report button.

Common examples include:

• You receive an email that appears to be from your bank saying your account has been hacked with a link to reset your password. The link is to a fake page that looks like your bank’s, but is really harvesting your login details.
• On social media, you receive a direct message (DM) or comment saying you’ve won! It includes a link for you to claim your prize, but there is no prize. Instead the link takes you to an infected website, and in the background your device is infected with info-stealer or other types of malware.
• An SMS from Australia Post saying you have a package that won’t be delivered unless you click a link and pay additional fees. At best, the scammers have just made some money off you, but at worst they’ve also infected your device with malware.
• Example from ScamWatch: Mother-in-law lost $4000 over a fake tax debt

Scammers may call or email you pretending to be IT support from your school, employer, or a trusted company like Microsoft. They warn that your computer is infected with a virus and that they need you to follow their directions urgently!

After convincing you to enter your login details or install software that will allow them to access your computer, they begin installing malicious software without your knowledge. This software can steal your information, including all of your passwords – which could lead to financial loss or identity theft.

Common examples include:

• You receive a phone call form someone claiming to be from the National Broadband Network (NBN). They warn that you’ll lose internet access within a few days unless you update your computer. The offer to walk you through the steps, asking you to download and install a file so they can adjust your settings remotely. In the background however, they’re installing malware that harvests your personal information and gives them long-term access to your system.
• Example from ScamWatch: I lost $520 to fake 'Telstra' employee

Starting on a dating app or social media, scammers match with people and act like they’re interested in starting a romantic relationship. Over time they shower you with love and build trust, before finally asking financial help.

They try to convince you to transfer money, buy gift cards or send crypto payments so they can pay their bills, buy food, buy a ticket to come visit you, or to invest it for you. Once you transfer the money, they disappear – leaving your heartbroken and financially drained.

Common examples include:

• Someone follows you on social media and strikes up a friendship very quickly – building into romance. They say they need help paying for some medical bills and ask if you can help them pay for it, promising to repay you next month. But once you transfer the money, they disappear.
• Example from ScamWatch: Georgina's Facebook fiancé leaves her flat broke

You receive an unexpected phone call, email, or message on social media from someone posing as an investment advisor. They promise you huge financial returns if you invest with them, weaving a story about the millions they’ve made, the techniques they’ve discovered, and the guaranteed money you can make with their help.

All you have to do is transfer money to them either through bank transfers or cryptocurrency. The problem is, those bank and crypto accounts are disposable, and they have no intention of investing your money. By the time you’ve transferred the funds, they’ve disappeared.

Common examples include:

• You receive a call from someone who sounds extremely professional, with extensive knowledge of investments. They offer to invest your money, promising amazing returns, and patiently answer all your questions. Over a few months, you transfer more and more money to increase your investment. But suddenly one day they stop replying to your calls and emails, and their website is down. The scammer has run off with your money, and there is almost zero chance of recovering the funds.
• Example from ScamWatch: I lost $50,000 in fake online trading

Learn more about finance scams on Moneysmart.

Some scams specifically target current and prospective university students. We've created a separate list of those common scams to help you identify them and stay safe.

Learn more