TL;DR: In June 2026, Scamwatch warned about food delivery scams hitting customers, restaurants and delivery workers. Scammers pose as DoorDash, Uber Eats, a restaurant or a customer and ask for one-time codes, logins, your mobile number or bank details. They use them to take over accounts, change payment settings or redirect earnings. Rule: never share a code, and deal only through the official app.
Who gets targeted
Scamwatch says the scams hit three groups:
| Who | What the scammer says |
|---|---|
| Customers | "There’s a problem with your order/refund, read me the code we just sent" |
| Restaurants | "We’re Uber Eats/DoorDash, we need to verify your account" |
| Delivery workers | "That order was fraudulent / a double order, give us your details for compensation" |
How it works
- Scammers contact you about an order, refund, cancellation, account issue or payment problem.
- They might say they can see your order to sound legit, then ask for "extra" details or payment outside the app.
- They ask for a one-time code, login or bank details.
- With that, they take over the account, change payment settings or redirect money. For riders, that can mean earnings go to the scammer.
Your dinner arrives cold. Your account doesn’t come back at all. Bad night.
Two examples Scamwatch shared
- A text posing as a bank fraud alert says a "fraudulent Uber Eats card attempt" was flagged and asks you to reply to confirm. Replying tells the scammer your number is live, and the follow-up call is where the real theft starts.
- A message to a delivery worker, posing as DoorDash support, says a KFC order was paid with someone else’s card and will be "removed" so the worker can still "receive the payment". The catch is handing over account details.
The older WhatsApp version
In July 2024, Uber Eats emailed Australian customers about scammers on WhatsApp posing as Uber Eats staff, SBS reported. They invited people to join a "promotional team" and earn rewards for liking or bookmarking stores. It has the hallmarks of a task-based job scam: easy "work" for rewards, which usually ends with you being asked to pay in. Uber Eats said it will never ask for your password and to contact it only through the app or website.
Red flags
- Unexpected calls or messages about orders, refunds, cancellations or account issues
- Requests for codes, passwords, logins or bank details
- Unexpected password reset emails, login alerts or account changes
- Pressure to act fast
Stop, Check, Protect
- Stop: don’t rush, don’t click links in unexpected messages, don’t share codes or financial details.
- Check: contact the restaurant or platform through its official app or website.
- Protect: if you shared money or info, act fast. Change passwords, contact the platform and your bank.
If you’ve been hit
- Change your app password and email password.
- Remove unknown devices and payment methods from the app.
- Call your bank if card or bank details were shared.
- Report to Scamwatch and get help from IDCARE (1800 595 160).
A one-time code is the key to your account. Nobody legit needs you to read it out. That’s the same lesson as our guide to "read me the code" bank scams. A free exposure check shows if your number or email has leaked.
Frequently Asked Questions
Do Uber Eats or DoorDash ask for verification codes by phone?
Treat any request for a one-time code as a scam. Scamwatch says scammers use codes to take over accounts.
How do food delivery scams target drivers?
Scammers tell workers an order was fraudulent or doubled and ask for details as "compensation", or access their accounts to redirect earnings.
Is the Uber Eats WhatsApp "promotional team" job real?
No. Uber Eats warned customers in 2024 that scammers on WhatsApp were offering rewards for liking or bookmarking stores. It’s a task scam.
What should I do if I gave a code to a scammer?
Change your passwords, remove unknown devices and payment methods, contact the platform and your bank, and report to Scamwatch.