This Scam Alert is a joint warning from the Australian Communications and Media Authority (ACMA) and the National Anti-Scam Centre’s Scamwatch.
What’s happening
Criminals are committing fraud by taking control of mobile phone numbers or making unauthorised changes to phone accounts. Once they gain access to your phone, they can receive verification codes, reset passwords, restrict access to your systems, and get access to a wide range of services that rely on your mobile number for security checks, including:
your bank accounts
myGov
subscription services
rewards programs.
Some people are at risk of mobile number fraud when their email account is compromised. Mobile phone fraud can also occur when scammers gain access to your ID documents or passwords through phishing attempts and following data breaches.
Who’s at risk
Anyone with a mobile phone number can be targeted by this scam. However, people who know or suspect they have been in a data breach may be at greater risk of being targeted.
Warning signs to look out for
Unexpected alerts about changes to your mobile account.
Verification codes you didn’t request.
Account login attempts or password reset emails you didn’t initiate.
Your phone suddenly stops working, shows no signal or switches to ‘SOS only’.
If you’ve been affected
If your phone stops working unexpectedly or you notice suspicious activity, contact your bank immediately then contact your phone provider.
Change passwords on all your devices and online accounts and notify your bank or card provider straight away.
Monitor your bank statements and account activity for anything unusual.
If a scammer has your personal details, contact IDCARE on 1800 595 160 for support.
Stay protected
Stop –Don’t click unusual links, download attachments, or install apps you weren’t expecting. These can be used to steal your personal information. Don’t share your ID document or numbers unless you are sure of who you are dealing with.
Check –Check whether it’s really your telco company by calling back using the phone number on a bill or official website or app. Check your account regularly for unusual changes or activity. Ask your telco how they would normally contact you and be cautious of contact that differs from this.
Protect –Secure your personal details and accounts by using strong, unique passwords or passphrases and update them regularly. Where you can, use multi-factor authentication. Delete emails, including emails you send, with ID documents attached so they can’t be accessed if your email is ever compromised. If your ID is lost or stolen, contact your telco and bank immediately and replace the documents.
