ANZ know your customer scam: how the fake account check works

Quick answer

A text or email saying ANZ needs to verify or update your details, with a link to click, is a scam. ANZ is the bank scammers pretend to be. ANZ says it never asks for passwords, PINs or codes by email or SMS. Don't click, and contact ANZ through its app.

All scam alerts
Comes by
Text, Email, Phone call
Pretends to be
ANZ
Last updated

How it works

Banks do have to confirm customer details, and ANZ lists know-your-customer information among the reasons it may contact customers. Scammers borrow that reason.

The message says your account will be restricted or closed unless you verify your identity. It links to a page made to look like ANZ internet banking. If you type your login there, or a one-time code, the scammers have what they need to get into your account. Some follow up with a phone call from someone claiming to be ANZ's fraud team.

ANZ says it will never ask you to share passwords, PINs, ANZ Shield or token codes or one-time passcodes by email or SMS, click a login link, or move money to another account.

Red flags

  • A text or email that tells you to verify your details through a link
  • A threat that your account will be restricted or closed
  • A sender address that's slightly off, such as a different domain from anz.com
  • A request for a password, PIN or one-time code
  • A caller who says they're from ANZ and asks you to move money to a "safe" account
  • Unusual wording, formatting or urgency

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown number
ANZ: We need to complete a know your customer check. Your account will be restricted within 24 hours unless you verify your details at [link].

What to do

  1. 1

    Don't click or call back

    Don't use the link or any number in the message. Go to the ANZ app or type the ANZ address yourself.

  2. 2

    Check with ANZ directly

    Use the ANZ app, or the contact details on anz.com.au or the back of your card, and ask whether the request is real.

  3. 3

    If you entered your details

    Call ANZ right away on the number from its official site, so it can secure your account. Change your internet banking password.

  4. 4

    If you shared a code or moved money

    Tell ANZ immediately. Contact IDCARE (1800 595 160) for identity support if personal details were exposed.

  5. 5

    Report it

    Report the message to Scamwatch, and to ReportCyber if you lost money or details.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Scammers send these to numbers and emails they've bought or scraped, and they sound more convincing when they have your name. Details like that sit on data broker and people-search sites and turn up in breaches. Serus finds where your phone number and address are listed and removes them, and alerts you when your details show up in a breach, so fewer scammers can reach you.

More ANZ scams

All common ANZ scams

Frequently asked

Is the ANZ know your customer message real?

Banks do ask customers to confirm details, but ANZ says it doesn't send messages asking you to verify through a link or share passwords or codes. Check in the ANZ app.

Is ANZ a scam?

No. ANZ is a real bank. Scammers pretend to be it.

What does ANZ say it will never ask for?

Passwords, PINs, ANZ Shield or token codes and one-time passcodes by email or SMS, and it won't ask you to click a login link or move money to another account.

I clicked the link. What now?

Don't enter anything. If you did, call ANZ using the number on its official site straight away and change your password.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.