Scam calls in Australia: how to spot them and report them

Quick answer

A call that asks for payments, passwords, one-time codes or remote access is probably a scam, and the number can be faked. Hang up, look up the organisation's number yourself and call back, then report it to Scamwatch.

All scam alerts
Comes by
Phone call, Text
Last updated

How it works

Scam callers pretend to be a bank, a government body or a telco and say something is wrong: a hacked account, a debt, a threat of arrest. Scamwatch's guidance says it's probably a scam call if the caller asks for personal or financial information.

They can disguise their number to look local or official, so the caller ID tells you little. Being on the Do Not Call register doesn't stop scammers either.

They push for passwords, one-time codes, payments or remote access to your device.

Red flags

  • A caller who asks for payments, passwords or one-time codes
  • Threats of arrest or claims your accounts were hacked
  • A call that creates pressure to act now
  • A number that looks local but you don't know who it is
  • A caller who wants remote access to your device
  • A request to use contact details the caller gives you

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown number
This is the fraud team at your bank. We've seen suspicious activity on your account. To secure it, read me the code we just sent you, or call [phone number] now.

What to do

  1. 1

    Hang up

    If you're unsure who's calling, hang up. Let calls from unknown numbers go to voicemail.

  2. 2

    Call back on a number you look up

    Find the organisation's number on its official website or the back of your card. Don't use any contact details the caller gave you.

  3. 3

    If you gave out details

    Contact your bank and phone provider straight away. Change passwords on accounts you mentioned.

  4. 4

    Use Stop, Check, Protect

    The National Anti-Scam Centre's advice: stop, check who you're really dealing with, and protect yourself if it was a scam.

  5. 5

    Report it

    Report the call to Scamwatch. ACMA also publishes guidance on phone and SMS scams.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Scam callers dial in bulk, but a call that uses your name or an account detail sounds more real. Names, phone numbers and addresses come from people-search sites and old data breaches. Serus finds the broker and people-search sites that list your details and requests removal, and alerts you when your info shows up in a breach.

Frequently asked

Can scammers fake a number that looks local?

Yes. ACMA notes scammers can disguise their number to look like they're calling from somewhere local.

Does the Do Not Call register stop scam calls?

No. Scamwatch notes you can still get scam calls even if you're on the register.

Will my bank ask for a one-time code on the phone?

Treat any call that asks for a one-time code or password as a scam. Hang up and call your bank on the number on your card.

Where do I report a scam call?

Report it to Scamwatch. If you lost money, call your bank and phone provider straight away.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.