First published: 28 Aug 2024
Last updated: 03 Feb 2025

Content written for

Individuals & families
Small & medium business
Large organisations & infrastructure
Government

The ASD's ACSC is aware of emails and phone calls from cybercriminals claiming to be us.

The content of the scam emails and phone calls vary, but typically ask you to give personal information (such as passwords or bank details), money or ask you to download software.

To make the scam emails appear legitimate, cybercriminals have been using the ASD’s ACSC logo and signature block.

The scam emails and phone calls also create a sense of urgency to try and pressure you into doing something quickly. Often, this will include threats that if you do not act now, something terrible will happen.

ASD will never:

  • Ask for your personal information such as your passwords, bank details or answers to your security questions.
  • Send you an email with a link to ‘antivirus’ software or remote access applications such as ‘AnyDesk’ or ‘TeamViewer’.
    • If you click on a link sent by a cybercriminal, there is potential that malicious software could be downloaded and installed to your computer.
  • Ask you to purchase gift cards or cryptocurrency.
    • ASD’s ACSC does not charge money for our services.
    • If you receive a call from someone claiming to be us regarding money or requesting you move your money out of your bank account, assume you have been contacted by a cybercriminal.
  • Tell you that your IP is being used to access illegal websites or facilitate illegal activities, such as child exploitation material or money laundering.
  • Stop you from hanging up the phone.
    • We will never threaten or pressure you to stay on the line.
    • A real ASD’s ACSC employee will always encourage you to hang up and call 1300 CYBER1 to confirm you are speaking to us.

How do I stay secure from impersonation emails?

If you receive an email or phone call from the ASD’s ACSC and you wish to verify that it is legitimate, please contact us on 1300 CYBER1 (1300 292 371). We will never give you an alternative phone number to contact.

If you have received a suspicious email, do not click on links within the email. Call ASD to check it with us, then report it to ScamWatch and block the sender.

If you have clicked the link, require assistance, or if you’re not sure whether it’s a real email from ASD’s ACSC, call us on 1300 CYBER1 (1300 292 371). We will never give you an alternative phone number to contact.

Further advice can be found on our website on how to identify phishing emails. Please continue to report scams to ScamWatch.

How do I stay secure from impersonation phone calls?

If you receive a phone call from someone claiming to be from ASD’s ACSC and you’re not sure if it is legitimate, do not to give out any of your personal information.

Hang up the phone and call us on 1300 CYBER1 (1300 292 371). Our team will be able to confirm whether we have been trying to reach you.

Where can I go for help?

ASD’s ACSC is continually monitoring for ASD’s ACSC impersonation scams and is able to provide assistance and advice as required. Organisations or individuals that have been impacted or require assistance can contact us via 1300 CYBER1 (1300 292 371).

Was this information helpful?

Thanks for your feedback!

Optional

Tell us why this information was helpful and we’ll work on making more pages like it