Scams

There are various types of scams, and cybercriminals always create new ones. It is important to be aware of these scams and their consequences, and take the necessary precautions to stay secure in the digital world.

Identity theft is one of the most serious consequence of scams. It occurs when someone uses your identity to steal money or gain other benefits. Once your identity is stolen, scammers can do serious damage such as opening new bank accounts and taking out loans in your name, signing contracts such as opening new phone plans, gaining access to your government online services, stealing your superannuation and more.

Scammers are very creative and always come up with new ideas to take advantage of you. For example, they may impersonate government departments (e.g. the Australian Taxation Office, asking for payment), set up fake dating or social media profiles, or tell you that one of your accounts was compromised and prompt you to take action – usually by clicking on links or give them personal information to ‘solve the problem’.

Scammers will attempt to gain access to your devices, accounts, or personal information through various methods.

Phishing

When scammers trick you into giving away your personal details, for example by luring you to click on malicious links or attachments that look legitimate. Scammers may impersonate your bank or a government department, and ask you to give out information such as your account number, password, or credit card numbers.

Malware

When you are tricked into installing software that gives scammers access to your files and track your activity.

Ransomware

When cybercriminals demand payment for you to regain access to your files.

Spear phishing

These messages are a class of phishing messages that target specific people and organisations, and may contain information that is true to make them appear more authentic. These messages can be extremely difficult to detect.

Remote access

When scammers falsely claim to be from a known company, such as your bank or your internet provider, and trick you into giving them remote access to your computer.

Hacking

When cybercriminals break into your devices by exploiting security weaknesses on your devices or network, and gain access to your personal data.

Scams are becoming more sophisticated and harder to spot. If you have any doubts about whether a message is genuine, first check if it is a scam by following these steps.

Go directly to a source you can trust

If you have any doubts about a message or call, contact the organisation directly: Visit the official website to find their phone number or to log in to your account via the official website: do not use the links or contact details given to you in the message.

Check what the official source says about what details they might request from you

Often companies or government agencies will say what they will and will not ask you online or over the phone. For example, the bank may tell you that they will never ask for your password. If someone claiming to be from the bank then asks you for your password, you know it is likely a scam.

What to look out for

There are common indicators of scams, such as phishing.

• Suspicious sender’s address: Scammers may use an email address that closely resembles one from a legitimate business, by changing a few characters.
• Generic greetings and signature: Scammers may use generic greeting such as “Dear valued customer” or “Sir/Ma’am”, or limited contact information in the signature block. These are strong indicators of a phishing email.
• Spoofed hyperlinks and websites: Malicious websites may look identical to a legitimate site, but the URL may use a variation in spelling or a different domain: for example .com instead of .net.
• Spelling and layout: Misspellings, bad grammar and punctuation, and inconsistent formatting are all indications of scams.
• Suspicious attachments: Unsolicited requests to open or download attachments are red flags: don’t do it.

Common things scammers do to trick you

In addition to exploiting security weaknesses, scammers prey on our human nature through various techniques, to prompt us to do certain things.

• Authority: Is the message claiming to be from someone official, such as your bank, a government department, a utility company, your doctor or a solicitor? Criminals pretend to be important people or organisations to trick you into doing what they want.
• Urgency: Are you told that you have a limited time to respond, for example, ‘within 24 hours’ or ‘immediately’? Scammers often threaten you with fines or other negative consequences.
• Emotion: Does the message make you panic, fearful, hopeful or curious? Scammers use threatening language, make false claims of support, or tease you into wanting to find out more.
• Scarcity: Is the message offering something that seems too good to be true, such as money or a ‘good deal’? Fear of missing out on an opportunity can make you respond quickly.
• Current events: Are you expecting to see a message like this? Scammers will exploit current news stories and events to make their claims seem more real (e.g. COVID-19).

Professor David Lacey, Chair of Cyber Security at the University of the Sunshine Coast, and Professor Monica Whitty, cyber psychologist at the University of Melbourne, give some insights into how scammers can trick us.