Online scams in Australia are getting more convincing every year, some now written with the same tools that write everyday emails, which makes them harder to spot at a glance. Scammers often deliberately target people they assume are less familiar with the latest tricks, but the truth is these scams are designed to catch anyone off guard, regardless of age or experience. This guide breaks down the most common scams doing the rounds in 2026, how to recognise them, and exactly what to do if something slips through.
The Most Common Scams in Australia Right Now
- Phishing emails pretending to be your bank, Australia Post, Medicare or the ATO
- Tech support scams, where a caller or pop-up claims your computer is infected and asks for remote access
- Phone and SMS scams with urgent messages asking you to click a link or call back
- Invoice and payment redirection scams, fake bills asking you to update payment details
- Romance and relationship scams built over weeks or months through dating apps or social media
How to Recognise a Phishing Email
Phishing emails are designed to make you act before you think. A few consistent warning signs show up again and again:
- Creates urgency, "your account will be suspended within 24 hours"
- The sender's email address doesn't quite match the real company
- A generic greeting like "Dear Customer" instead of your name
- Asks you to click a link and "verify" personal or banking details
- Spelling or grammar that feels slightly off
- An attachment you weren't expecting
Before clicking any link, hover over it (or press and hold on a phone) to see where it actually leads. If in doubt, don't click, go directly to the organisation's website yourself and log in from there instead.
Tech Support Scams: What They Actually Look Like
This is one we hear about often. A caller or pop-up pretends to be from Microsoft, Telstra or another well-known company. In reality, genuine companies do not phone you out of the blue about a virus, do not display countdown pop-ups demanding you call a number, and will never ask for remote access before you've verified who they actually are.
- An unexpected phone call claiming to be from "Microsoft" or your internet provider
- A pop-up warning that locks your screen and displays a phone number to call
- Being asked to install remote access software so someone can "fix" your computer
- Being asked to pay with gift cards, cryptocurrency or a wire transfer
Practical Steps to Protect Yourself
- 1Never click links in unexpected emails or texts, go to the website directly by typing the address yourself
- 2If a call or message claims to be from your bank or a government agency, hang up and call back using the number on their official website, not the number they gave you
- 3Turn on two-factor authentication (2FA) for your email, banking and social media accounts
- 4Keep your computer and phone updated, security updates fix the exact weaknesses scammers rely on
- 5Never give remote access to your computer to someone who contacted you first
- 6Talk to a family member or a trusted local technician before acting on anything that feels urgent or high-pressure
What to Do If You've Already Clicked a Link or Shared Information
It happens to careful people too, these scams are built to be convincing. If you think you've clicked something you shouldn't have, or shared personal or banking details, act promptly rather than waiting to see what happens.
- Change the password for the affected account immediately, and any other account using the same password
- Contact your bank straight away if any financial details were shared
- Run a full security scan on your computer
- Report the scam (see below)
- Consider having your devices checked professionally if you're not sure what may have been accessed
Where to Report a Scam in Australia
Reporting a scam helps limit the damage to you and helps authorities warn others before it spreads further.
- Scamwatch, run by the ACCC, for general scam reports
- ReportCyber, run by the Australian Cyber Security Centre, for cybercrime
- Your bank's fraud team directly, if money or account details were involved