Common types of scams

Scams are deliberately designed to deceive you. Remember, if it sounds too good to be true, it probably is.

SMS & email scams

Messages might include a link to direct you to a fraudulent website or ask you for personal information.

More about SMShing & phishing scams

 

Online shopping scams

What might look like a genuine website selling goods at low prices could actually be a scam.

Learn about shopping scams

Remote access scams

Where a scammer calls you and attempts to obtain access to your accounts or device, pretending to be from a well-known company.

Learn about remote access scams

Investment scams

When a money making opportunity seem too good to be true.

See more about investment scams

Romance & dating scams

Where someone you meet online may not be who they claim to be, and set out to steal your heart in order to defraud you.

More about romance scams

Scams that target businesses

Learn about the main types of scams your staff need to be able to recognise to protect your business.

Learn about business scams

Threat & penalty scams

Where a scammer uses threats of penalty or harm to extort money from their victims.

Learn about threat and penalty scams

Job scams

Where a job opportunity appears to require little effort for a high financial reward and promises to make you money quickly.

Learn about job scams

Digital wallet scams

When you are contacted, usually by SMS or email, tricking you into sharing your card details or NetCode. Scammers will use this information to enter your card details into a digital wallet on another phone, so they can spend your money.

Learn more about digital wallet scams

Remember 3 simple steps: Stop. Check. Reject.

    1. Stop
      Does a call, email or text seem off? The best thing to do is stop. Take a breath. 
      Real organisations won’t put you under pressure to act instantly.

    2. Check
      Ask someone you trust or contact the organisation the message claims to be from.

    3. Reject
      If you’re unsure, hang up on the caller, delete the email, block the phone number. 
      Change your passwords.

Protecting yourself from scams

  • SMS & email

    Remember, we’ll never send you an SMS or email that:

    • asks for your NetBank Client ID
    • asks for your password
    • asks you to share a NetCode with us
    • includes a link to login directly from the SMS or email

    Always type commbank.com.au into a browser or use the CommBank app to securely access your banking.

  • What to look for

      Look out for messages or emails that:

    • Have spelling mistakes and incorrect grammar
    • Have unusual email addresses or URLs (e.g. @combank.com). They often look similar to official communications but aren’t quite right
    • Include an urgent call to action, such as asking you to unlock or verify an account, or log on and pay a traffic infringement notice
    • Ask you to forward money or claim that you’ve won a prize
  • Think it could be a scam?

    If you receive a suspicious SMS or email, follow these steps to keep you safe:

    • Don’t click any links
    • Don’t open any attachments you weren’t expecting, especially when it’s attached to a suspicious message
    • Check the links in SMS and emails. Hover your mouse over a link to see the destination URL (web address), before clicking it. On a smartphone you can press and hold a link to inspect it. Carefully read these URLs, as they’re often created to look similar to legitimate addresses
    • Forward the SMS or email to hoax@cba.com.au
    • Delete the SMS or email 

Is it really CommBank calling?

If you receive a call from someone claiming to be from CommBank, you can ask the caller to use CallerCheck to verify their identity in the CommBank app. We’ll then send a notification directly to your CommBank app, so you know you’re speaking to a legitimate member of our team.

Tips to keep you CommBank Safe

Our CommBank Safe video series shares some of our top tips on how you can stay one step ahead of the latest cyber threats, scams and fraud.

More information 

  • We work closely with law enforcement and other authorities to shut down fake or malicious websites as quickly as possible. We also support the Australasian Consumer Fraud Taskforce in the promotion of ScamWatch, a website dedicated to the prevention of scams. 

    Find out more about protecting your online security from the Australian Cyber Security Centre.

    Visit Be Connected to access a free online course that teaches you how to perform common banking tasks securely from home.

In your language

Important information

  • As the advice on this website has been prepared without considering your objectives, financial situation or needs, you should, before acting on the advice, consider its appropriateness to your circumstances. View our Financial Services Guide. Terms and Conditions for these products and services are available online or from any branch of the Commonwealth Bank. The Terms and Conditions should be considered before making any decision about these products.