How to protect yourself from scams

What to look for

We will never send you an email or SMS asking for banking information like your NetBank Client ID, password, or NetCode; or include a link to login directly from the email or SMS. Always type commbank.com.au into a browser or use the CommBank app to securely access your banking.

You can reduce your risk of being scammed by paying close attention to messages or emails that:

• Aren't quite right. Scammers may use similar email addresses (e.g. @combank.com) and copy the look and feel of official messages to trick you into thinking a message is legitimate
• Have spelling mistakes and incorrect grammar
• Include an urgent call to action, such as asking you to unlock or verify an account, or log on and pay a traffic infringement notice. They might also contain malicious software (also known as malware) designed to infect your machine and steal data over time

How to check if a message is legitimate

• When contacted by an unsolicited third party, it's better to be over-cautious. Contact the organisation directly using a phone number from their website (not the email or message) before you reply
• Hover your mouse over a link to see the destination URL (web address), before clicking it. On a smartphone you can press and hold a link to inspect it. Carefully read these URLs, as they’re often created to look similar to legitimate addresses
• Be suspicious of any correspondence received from overseas, especially if you're being asked to forward money or you're told you've won a prize
• Never open an attachment you weren’t expecting, especially when it’s attached to a suspicious message