TL;DR: Scammers impersonate Australian banks like Commonwealth Bank, ANZ, NAB, Westpac and Bendigo to steal logins and one-time codes. Verify through the official app, forward hoax messages to the bank, and report to Scamwatch and ReportCyber.
👉 Check my digital footprint — free 30-second check →
How bank impersonation scams work
In Australia these scams tend to appear as a text, email or call claiming to be your bank's security team. The message warns of unusual activity, a blocked card or an account needing verification, and demands a quick reply. It leads to a fake login page or asks you to share the one-time code you were just sent.
Red flags
Australian banks keep to a few standards that scam messages routinely ignore:
- Urgency: a threat that your account will be locked within the hour.
- One-time code requests: the code is for your use alone and should not be given to a caller.
- Odd links: check the address first, because scam sites often mimic a bank's name.
- Requests for a PIN or password: your bank has no need for the full details.
- Faked caller ID: a call can appear to come from the bank's real number.
What to do if you get a suspicious message
Skip the link and the number in the message. Use the bank's official app, type the website address yourself, or call the number on your card. If you have already clicked or shared a code, change your password in the official app, call the bank's fraud line and check your account for transfers you did not make. Speed gives the bank the best chance of stopping a payment.
Reporting contacts by bank
These details come from each bank's own security pages. Always start from the official app or website, not a message.
ANZ
ANZ asks you to forward fake text messages and hoax emails to hoax@cybersecurity.anz.com.
NAB
NAB lists 13 22 65 (within Australia) for personal fraud and scam support, and phish@nab.com.au for phishing emails.
Westpac
Westpac asks you to forward hoax emails to hoax@westpac.com.au, and to call 132 032 to speak to a fraud or scam specialist.
Bendigo Bank
Bendigo lists 1300 236 344 for fraud and phishing@bendigoadelaide.com.au for phishing emails.
Commonwealth Bank
Contact Commonwealth Bank through its official app or the number on the back of your card.
Reporting to Australian authorities
Scamwatch, run by the ACCC, takes scam reports. ReportCyber is the national cybercrime reporting portal, and the Australian Cyber Security Hotline is 1300 CYBER1 (1300 292 371). Tell your bank at once if money has left your account.
More guides on this topic
Banking in another country? See the UK bank scams guide or the Canadian bank scams guide. If a scammer used your details, read the Australian identity theft guide.
Impersonation scams often start from leaked contact details. A free digital footprint check shows whether your email or number appears in exposed data.
Frequently Asked Questions
How do I know if a message from my bank is real?
Do not trust the message itself. Open the bank's official app or type its web address yourself, or call the number on your card. A real bank does not need your full password, PIN or one-time passcode.
What should I do if I gave a scammer my one-time passcode?
Change your password through the official app, call the bank's fraud line straight away and review recent transactions.
Where can I forward a hoax email or text?
ANZ uses hoax@cybersecurity.anz.com, Westpac uses hoax@westpac.com.au and NAB uses phish@nab.com.au. Check your own bank's security page.
Where do I report a bank scam in Australia?
Report it to Scamwatch and ReportCyber, and tell your bank. Keep screenshots of the message.
What is the Australian Cyber Security Hotline number?
The ACSC lists 1300 CYBER1 (1300 292 371) for reporting cybercrime and security incidents.
Sources
- ANZ – Report scams and fraud
- NAB – Report fraud and scams
- Westpac – Security
- Bendigo Bank – Security
- Scamwatch
- ReportCyber