Cybercriminals are adapting their methods to take advantage of the COVID-19 pandemic. We continue to receive reports from individuals, businesses and government departments about a range of different COVID-19-themed scams, online fraud and phishing campaigns.
Scam Messages
Be alert to COVID-19-themed text messages, social media posts, emails and phone calls as criminals can use these methods to scam members of the public.
These messages can appear as if they were sent from organisations you know or trust.
They attempt to trick users into performing specific actions such as:
-
Opening an attachment
-
Visiting a website
-
Revealing account credentials
-
Providing sensitive information
-
Transferring money
During the national COVID-19 vaccine rollout, cybercriminals could target Australians. During vaccination rollouts in the US and UK, some people were tricked into paying money to jump the vaccine queue. Others received emails with fake vaccination appointments, which stole personal information. Additionally, cybercriminals have created fake online stores claiming to sell products that don’t exist such as COVID-19 cures or vaccinations.
Do not trust these offers. The COVID-19 vaccine will be free for all Australian citizens, permanent residents and most visa holders. If you receive one of these messages, ignore or delete it and do not open any links or attachments.
If you think a message might be legitimate and you want to be sure, find a source you can trust. Look up the organisation’s official website or phone their advertised phone number. Don't use the links or contact details in the message you have been sent.
Visit the National Anti-Scam Centre - Scamwatch COVID-19 vaccination scams page to keep up to date and learn how to avoid vaccination scams.
Know how to spot a phishing scam message, take our quiz now!
Disinformation
The Australian Government Department of Health is the most trustworthy source of news and information about COVID-19 vaccines.
Protecting your business
Teach yourself and your staff how to prevent, recognise and report cybercrime.
You and your workforce are the most important lines of defence in protecting your business from cyber security threats. Training can change the habits and behaviours of staff and create shared accountability in keeping your business secure.
Ensure that your business has an informed workforce, a secure network and ensure staff regularly backup important data.
If your business experiences a cyber security or cybercrime incident, submit a report.
Useful information
Individuals and families
National Anti-Scam Centre - Scamwatch
Threat update: COVID-19 malicious cyber activity 20 April 2020