Phishing is a common tactic used by cybercriminals to steal sensitive information such as online banking logins, credit card numbers, business credentials, and passwords. These attackers use fraudulent messages—often called “lures”—to trick individuals into giving up confidential data.
Once stolen, this information can be used to assume your identity, steal additional data, or install malware on your device.
How Spam and Phishing Emails Work
Spam and phishing messages use various tricks to deceive their victims. Some examples include:
-
Fake security alerts claiming unauthorized access to your system
-
Requests for information to “complete” a form or document
-
Bogus invoices for goods you didn’t purchase
These messages often appear to come from well-known, trusted organisations. They are designed to look legitimate and can be delivered via email, SMS, messaging apps, or social media.
Commonly Imitated Organisations
Cybercriminals often impersonate major brands and government services to make scams more convincing. Some of the most frequently copied entities include:
-
Law enforcement and police – fake fine or legal threat scams
-
Utility companies – false overdue bills for electricity or gas
-
Postal services – fake parcel pick-up notifications
-
Banks – fraudulent requests to update your account information
-
Telecommunication providers – deceptive billing or verification requests
-
Government departments – including ATO, Centrelink, Medicare, and myGov
How to Protect Yourself from Phishing Attempts
The Australian Cyber Security Centre (ACSC) recommends the following steps to reduce your risk:
1. Be Cautious with Emails and Messages
-
Don’t click links or open attachments from unknown senders.
-
Avoid interacting with messages that sound too good to be true or pressure you into immediate action.
2. Check Links Before Clicking
-
Hover over any link to see the actual web address (usually shown at the bottom of your browser).
-
If unsure, search for the content manually using keywords instead of clicking the link.
3. Verify Suspicious Communications
-
If in doubt, talk to a friend or family member about the message.
-
Contact the company directly using verified contact details from their official website, not those provided in the message.
4. Use Technology to Help You
-
Install a spam filter to reduce the number of malicious messages you receive.
-
Use safe online habits like secure browsing and responsible email practices. Learn more on how to use email safely and browse the web safely.
5. Know What Real Organisations Won’t Do
-
Banks, social media platforms, and major companies like Amazon, Apple, Facebook, Google, and PayPal will not ask you to submit sensitive information via a link in an email or text.
6. Stay Informed
-
Subscribe to the ACSC Alert Service for updates on current threats.
-
Visit Scamwatch to learn about the latest scams targeting Australians.
For more information on scam and phishing threats visit https://www.cyber.gov.au/acsc/view-all-content/threats/phishing
If you require assistance with your cyber security setup please give us a call on 1300 796 246 or fill out the form below.
