Scammers regularly impersonate major banks like NAB — sending fake texts, emails, and even phone calls that look and sound convincingly official. The goal is always the same: get you to hand over login details, a one-time passcode, or card information.
Here's how the NAB impersonation scam typically works, the red flags to watch for, and exactly what to do if you've been targeted.
How the NAB Scam Works
Most versions of this scam start with an unexpected text, email, or phone call claiming to be from NAB's fraud or security team. It usually warns of "suspicious activity," a "blocked transaction," or a need to "verify your account" — creating urgency so you act before thinking it through. The message links to a fake login page designed to look identical to NAB's real site, or asks you to read out a one-time passcode over the phone.
Red Flags to Watch For
Genuine banks follow a few consistent rules that scammers routinely break:
- Urgency and threats — "your account will be frozen in 30 minutes" is a classic pressure tactic.
- Requests for a one-time passcode (OTP) — NAB will never ask you to read an OTP back to them over the phone or text.
- Links to unfamiliar domains — hover over or long-press any link before tapping; scam domains often look almost right but are slightly misspelled.
- Requests for your full password or PIN — a real bank never needs your complete password.
- Caller ID spoofing — scammers can make a call appear to come from NAB's real customer service number. A legitimate-looking number is not proof the call is real.
What to Do If You Receive a Suspicious Message
Don't click any links or call any numbers included in the message. Instead, open the official NAB app or type the bank's known website address directly into your browser, or call the number printed on the back of your card. Verify independently rather than through anything provided in the suspicious message itself.
What to Do If You Already Responded
If you clicked a link, entered your details, or read out an OTP, act immediately: log in through the official NAB app and change your password, call NAB's fraud line directly, and monitor your account for unauthorized transactions. The faster you act, the more likely the bank can reverse fraudulent transfers.
👉 Check your own exposure in 30 seconds → scan your email free.
Frequently Asked Questions
How do I know if a message claiming to be from NAB is real?
NAB will never ask you to share your full password, PIN, or one-time passcode over text, phone, or email. Genuine NAB communications do not create urgency to click a link immediately or threaten to freeze your account within minutes. If in doubt, contact NAB directly using the number on the back of your card or their official app — never a number provided in the suspicious message.
What information do NAB impersonation scammers try to steal?
Scammers typically try to obtain your online banking username and password, one-time passcodes (OTPs) sent by SMS, your card number and CVV, or your Social Security number / national ID. They then use this to drain your account or open new credit in your name.
What should I do if I already clicked a link in a fake NAB message?
Do not enter any information on the page it leads to. If you already entered your login details, change your NAB password immediately from the official app or website, and call NAB directly to report the incident and review recent account activity.
What should I do if I gave a scammer my NAB account details or OTP?
Contact NAB immediately through their official fraud line to freeze your account and reverse any unauthorized transactions. Change your password, enable additional security features if available, and monitor your statements closely for further unauthorized activity.
How do I report a fake NAB text or call?
Forward the suspicious text to your mobile carrier's spam reporting number (7726 in many countries) and report it directly to NAB using their official fraud reporting channel. You can also file a report with your country's consumer protection or anti-fraud agency.