TL;DR: A text says your bank rewards points are about to expire and gives a "redeem" link. The site looks like your bank and asks for your login, card number or PIN. ANZ (November 2025 and January 2026), Westpac (March 2026) and NAB (June 2026) have all warned about it. Banks say they don’t send unexpected texts with login links. Check points only in your banking app.
Three banks, one scam
| Bank | Warning | Source |
|---|---|---|
| ANZ | Rewards SMS: points expiring, link to fake redemption page (Nov 2025, Jan 2026) | ANZ |
| Westpac | Rewards SMS: points about to expire, "redeem" link to fake site (Mar 2026) | Westpac |
| NAB | Rewards points texts and emails linking to fake NAB sites asking for login, card or PIN (Jun 2026) | NAB |
When a scam gets warnings from three of the big four, it’s not a one-off. It’s a product line.
Why it works
- Loss aversion. "Use it or lose it" hits harder than "you’ve won something."
- Real programs. People do have points, often more than they remember.
- Small ask. "Just log in to redeem" feels routine.
- Not your money... yet. It feels low-risk, so guards drop.
What the fake site wants
- your internet banking login;
- your card number and sometimes PIN;
- a one-time code to "confirm" redemption.
With those, they can log in, add payees or set up a digital wallet.
How to check your points safely
Open your banking app or type your bank’s address yourself. Points that are really expiring will show there. If the app says nothing, the text was lying.
What banks say they never do
- ANZ: never asks you to click a link to log in.
- Westpac: never asks you to verify your identity by clicking a link in an SMS.
- NAB: never sends unexpected texts with links.
If you clicked and entered details
- Call your bank now using the number on its website or card.
- Change your banking password from another device.
- Ask the bank to check for new payees, devices or wallets.
- Report the text to your bank and ACMA (0429 999 888). See reporting guide.
Same scam, other places
Airline and retail points get targeted too. See loyalty points theft and the Qantas breach. A free exposure check shows if your number is in breach data.
Frequently Asked Questions
Is the "rewards points expiring" text from my bank real?
ANZ, Westpac and NAB have all warned about scam texts claiming rewards points are expiring. Check your points in your banking app instead.
What happens if I click the rewards points link?
It leads to a fake site that asks for your login, card number or PIN.
Do Australian banks send text messages with login links?
ANZ, Westpac and NAB all say they don’t ask you to log in or verify identity via links in texts.
Where do I report a rewards points scam text?
Forward it to your bank’s reporting number or address and to ACMA on 0429 999 888.