Phone and text scams: how to spot them

Your phone is one of the easiest ways for scammers to reach you. A call claiming to be from your bank, a text about a parcel or a toll, a message from "Mum" with a new number: they're designed to look ordinary and create a sense of urgency. This guide explains the common patterns, recent changes that help you spot fakes and what to do if you're targeted.

Common phone and text scams

Scams change constantly, but the same themes keep coming back:

• Impersonation of organisations: banks, government agencies, telcos, delivery companies, toll operators and well-known retailers.
• Family and friend scams: a message saying "Hi Mum, I've lost my phone, this is my new number", followed by a request for money.
• Tech support scams: a caller claims your computer or internet has a problem and asks for remote access.
• Threats: claims that you owe money, face arrest or will have a service cut off unless you pay now.
• Too-good-to-be-true offers: prizes, refunds, investments or jobs.
• Account verification codes: a request to read out a code sent to your phone, which is often an attempt to take over an account or port your number.

Warning signs

Be suspicious of any unexpected call or message that:

• asks for money, gift cards, cryptocurrency or a bank transfer;
• asks for personal details, banking information, passwords, PINs or one-time codes;
• asks you to install an app or give someone remote access to your device;
• pressures you to act immediately or threatens consequences;
• includes a link to "verify", "update" or "pay";
• asks you to keep it secret.

Scamwatch advises hanging up on calls like these.

Caller ID can be faked

Scammers can make a call or text appear to come from a real phone number or organisation. This is often called spoofing. The ACMA warns about caller ID scams. Seeing your bank's name or number on the screen doesn't prove the call is from your bank.

The "Unverified" label on texts

Many organisations send texts that show a name, such as a business name, instead of a number. Scammers have copied these sender names to slip their messages into genuine threads.

To tackle this, the ACMA introduced the SMS Sender ID Register. From 1 July 2026, businesses and organisations must register the names they use to send texts. Messages using a sender name that isn't registered show as "Unverified" and are grouped together.

An "Unverified" label is a strong reason for caution, though it doesn't always mean a scam; a legitimate organisation may simply not have registered. Equally, a registered name isn't a guarantee: always be careful with links and requests for information.

How to check if a call or message is genuine

1. Don't use the contact details in the message. Scammers supply their own numbers and links.
2. Find the official contact details yourself: from the organisation's official website, app, a bill or the back of your card.
3. Contact the organisation directly and ask whether the message is genuine.
4. For family messages, call the person on the number you already have, or ask a question only they would know.

Genuine organisations won't mind you checking.

Protecting your number and accounts

Your mobile number is often used to send security codes. If a scammer takes control of it, for example by porting it to another provider, they may be able to get into your accounts. To protect yourself:

• never share one-time codes or porting codes with anyone who contacts you;
• use a PIN or password on your telco account if your provider offers one;
• use strong, unique passwords and an authenticator app where you can;
• act fast if your phone suddenly loses service unexpectedly. Contact your provider using another phone. See keeping your number.

If you've been scammed

Act quickly:

1. Contact your bank or card provider immediately if you've lost money or shared banking details. The faster you act, the better the chance of stopping a payment.
2. Change passwords on any accounts that may be affected, starting with email and banking.
3. Contact your telco if your number or account may have been compromised.
4. Report the scam to Scamwatch. Reports help warn others and disrupt scams.
5. Get support. Being scammed is upsetting, and it can happen to anyone. Talk to someone you trust.

Reducing unwanted calls and texts

• Let unknown numbers go to voicemail.
• Use your phone's built-in spam filtering and call blocking.
• Block and delete scam texts after reporting them.
• Don't reply to scam texts, even to say "stop".

Examples of scam messages

Seeing what scams look like can help you spot them. Here are made-up examples in the style of common scams:

• "Your parcel could not be delivered. Update your address here: [link]". Delivery companies rarely ask for payment or details through a text link. Check the delivery through the official app or website.
• "Unpaid toll notice. Pay now to avoid a fine: [link]". Check with your toll account directly, not through the link.
• "Hi Mum, I dropped my phone in the toilet. This is my new number. Can you help me pay a bill?". Call your child on their usual number before doing anything.
• "This is your bank. We've detected suspicious activity. Please confirm the code we just sent you.". Banks won't ask you to read out security codes. Hang up and call the number on your card.
• "Your internet will be disconnected today due to a technical fault. Press 1 to speak to a technician.". Hang up and contact your provider using the number on its website or your bill.

Talking to family about scams

Scammers target everyone, but some people are especially vulnerable, including older relatives and people who are new to using smartphones. A short conversation can make a big difference:

• explain that caller ID and sender names can be faked;
• agree that no one in the family will ever ask for money by text without a phone call;
• show them how to block numbers and report scams;
• reassure them that it's always fine to hang up and check.

Scams aimed at businesses

Small businesses are targeted too, often with fake invoices, impersonation of suppliers or messages claiming to be from a telco or bank. The same rules apply: verify any request for payment or changed bank details by contacting the organisation using details you already have.

Quick rules to remember

• If in doubt, hang up and check.
• Never give codes, passwords or banking details to someone who contacted you.
• Don't click links in unexpected texts; go to the official app or website.
• Be wary of urgency, threats and secrecy.
• Report scams to Scamwatch, and help others by talking about them.

Scams evolve quickly, but these habits stay the same. Taking a moment to pause and check is the single most effective defence.

Reporting helps everyone

Every report to Scamwatch helps authorities see new scams quickly and warn the public. Even if you didn't lose money, reporting is worthwhile.

Key points

• Hang up on unexpected calls asking for money, details, codes or remote access.
• Caller ID can be faked; check by contacting the organisation yourself.
• Texts from unregistered sender names are labelled "Unverified" from 1 July 2026.
• Never share one-time or porting codes.
• If you've been scammed, contact your bank immediately and report it to Scamwatch.