Westpac scam emails and texts: how to spot the fake login alert
Quick answer
Emails and texts that say they're from Westpac and ask you to verify your details, redeem rewards or call about a "new login" are scams. Westpac says it never asks you to move money to a "safe" account. Don't click or call, open the Westpac app instead, and forward the message to Westpac before deleting.
- Comes by
- Email, Text, Phone call
- Pretends to be
- Westpac
- First reported
- Latest official alert
- (Westpac)
- Last updated
How it works
Scammers pretend to be Westpac, a bank that is itself a victim here. Westpac's own security page lists several versions that have gone around in 2026.
- "New login detected" email (October 2026). It tells personal and business customers to call a number to check the activity. A second email then makes it look like you're talking to someone at the bank. The caller says your accounts are at risk and tells you to move your money to a "safe" account.
- Online Banking verification email (July 2026). It says your access will be restricted unless you verify or update your details by a set date, and links to a fake website that steals personal and banking information.
- "Verify your ID" email (May 2026). It claims you must update your details to stay compliant with regulations. The button leads to a fake site.
- Rewards points text (March 2026). It warns your Westpac Rewards points are about to expire and links to a fake site where you'd "redeem" them.
Westpac also warned in July 2026 about a business using the name "Westpac-Group Australia" that isn't connected to the bank.
The aim is your Online Banking login and card details, or a transfer you make yourself to an account the scammer controls.
Red flags
- An email or text with a link asking you to verify your identity or sign in to Online Banking
- A "new login detected" alert that tells you to call a number in the message
- Anyone telling you to move money to a "safe" account
- A deadline or threat that your access will be restricted
- Points about to expire with a link to redeem them
- A website address that is long, unusual or not westpac.com.au
Example message
We detected a new login to your Westpac account. If this wasn't you, call [phone number] now to secure your funds, or verify your details at [link] to avoid your access being restricted.
What to do
- 1
Don't click, call or reply
Skip every link and phone number in the message. Open the Westpac app or type westpac.com.au into your browser yourself.
- 2
Report it before you delete it
Westpac asks you to forward scam emails and texts to the addresses and number on its "How to report" page, then delete the message.
- 3
If you clicked a link, change your password from another device
Change your Online Banking password on a device you trust, then watch your accounts for anything unusual and contact Westpac straight away.
- 4
If you called the number or moved money, contact Westpac immediately
Use the Westpac app, or the number on Westpac's own site. You can report a transaction in the app and lock your accounts and cards with SafeBlock.
- 5
Get identity support if you shared details
IDCARE offers free, confidential help after a scam or identity theft, and ReportCyber takes reports of cybercrime. Our guide on what to do after a data breach covers the steps for passwords and credit checks.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers need a name, an email address or a mobile number, and they get those from data breaches and from lists of personal details that brokers collect and resell. The more places your details sit, the more of these messages land in your inbox.
Serus finds the data brokers that list your details and sends the removal requests, and it alerts you when your email or phone number turns up in a breach. That won't stop every scam message, but it gives scammers less to work with.
Official alerts
Frequently asked
Is Westpac behind these emails?
No. Westpac says these messages didn't come from the bank. Scammers copy its name and branding to look real.
Will Westpac ever ask me to move money to a safe account?
No. Westpac says it will never ask you to move your money to a "safe" account.
Can Westpac email me to verify my details?
It may contact you about updating information, but it says it won't ask you to verify your identity or sign in to Online Banking through a link in an email or text.
What if I only clicked the link?
Change your Online Banking password from a different device, check your accounts for activity you don't recognise and contact Westpac right away.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
