scam email Archives - Computer Support Professionals

Australia Post customers targeting scam messages

What’s happened?

Australia Post is warning the community of widespread scam text messages telling customers there are problems delivering a package, or that a parcel won’t be delivered “due to unverified shipping address.”

The text messages use AusPost as the sender name (which means it appears in the same text thread as other legitimate AusPost communications) and asks you to click on a link.

The link leads to a fake website with the Australia Post logo, asking you to verify your address and provide a payment. By entering these details, the scammer can steal your personal and financial information.

Does it affect me?

How to managed my backup services

These text messages have been sent to a large number of people.

The way mobile phones show SMS conversations means this scam message can look like a legitimate Australia Post text message. When scammers pretend to be legitimate or well-known brands to trick you into handing over your personal details, this is known as ‘phishing’.

How do I stay safe?

Remember that Australia Post will never:

Email or text message you asking you to click on a link to print out a receipt or label for parcel collection and tracking, or to access your package.
Ask you to send an email with your personal or financial information, including any form of ID, passwords, credit card details or account information.

If you are not sure whether an email, text message or phone call is legitimate, contact the organisation the message claims to be from. Do this by searching for contact details on their official website, social media page or other independent source and not from any contact details in the message.

If you believe you have sent any personal information to a scam email address or entered it into a scam website and are worried that your identity may have been stolen, you can contact IDCARE – Australia and New Zealand’s free national identity and cyber support service – on 1300 432 273.

For more information, please visit: www.staysmartonline.gov.au

Watch out for myGov tax scam emails

What’s happened?

Tax time is here, and we see a surge in scammers impersonating trusted brands like myGov or the Australian Taxation Office (ATO) to trick you into giving them money or personal details. These scams can come through as emails, text messages and fake myGov login pages. Usually these scams will say you’re entitled to a tax refund or that you need to pay a debt. They are also made to look very real through the sophisticated use of myGov and ATO logos, information and even email addresses which makes it easy for anyone to fall victim.

In June 2019, the ATO received 6,444 reports of tax-time scams that impersonated the ATO. Emails with links to fake myGov login pages were the biggest email scam in that month.

The trend in scammers demanding ‘debt’ payments via gift cards is also on the rise, with Australians aged 18-44 years making the majority of iTunes payments to scammers ($94,420 in June alone), closely followed by Google Play cards ($27,993).

These scam messages often include links that direct you to fake websites or login pages – where you enter your login details and fill out your personal details to claim a ‘refund.’ Scammers can then use this information to commit credit card or tax fraud and identity theft. By clicking on these links you also run the risk of downloading malware onto your computer.

How do I stay safe?

myGov will never send you a text, email or attachment with links or web addresses that ask you for your login or personal details. Do not click on links in emails or text messages claiming to be from myGov.
Always login to your official myGov account to check your tax, lodge your return, and check if you owe a debt or are due a refund. Do this by manually typing https://my.gov.au/ into your internet browser.
You can also check the status of your tax affairs at any time by calling the ATO on 13 28 61 or contacting your tax agent.
Have a strong password on your myGov account and add a security code to your login process to provide an extra layer of protection. This makes it harder for a hacker to get any further if they crack your password.
Unfortunately these scams continue well beyond the 30 October deadline for tax returns, as scammers know many people are waiting for a refund or debt owed. It’s important to watch out for scams throughout the year.

For more information, please visit: www.staysmartonline.gov.au

Beware of scam emails threatening to reveal intimate images

What’s happened?

Members of the public have reported receiving scam emails that appear to come from their own email account, threatening to reveal intimate images of them unless they pay a fee.

This email scam is widespread, with the Australian Cyber Security Centre, Office of the eSafety Commissioner and Scamwatch receiving over 300 reports from the public this week.

How it works

This scam uses a tactic known as ‘sextortion’ – a form of online blackmail where a cybercriminal threatens to reveal intimate images of someone online, often to their friends and family, unless they pay a ransom quickly (often in cryptocurrency).

The scam uses ‘spoofing’ to make the email look like it’s come from your own email address. Email spoofing occurs when email addresses are manipulated to come from a different source, but display as a legitimate address. This is a technique commonly used by cybercriminals to make their scam seem real.

How do I stay safe?

If a blackmailer is threatening to reveal intimate images of you online, do not give in to their demands. Report it to the Office of the eSafety Commissioner.
If you receive one of these emails, don’t give the perpetrator any money or images, and stop all contact with them.
If you’re concerned about your physical safety, call Triple Zero (000) or contact your local police.
Change your passwords for all social media and online accounts – including your email account – straight away, and review your privacy and security settings.
Cybercriminals can use your personal details to their advantage, like manipulating your email address if it has been caught up in a data breach. You can check if any of your email addresses have been in a data breach by visiting https://haveibeenpwned.com/

For more information, please visit: www.staysmartonline.gov.au