Email scams

Email scams

Scam emails look like the real thing, but watch out for links and attachments designed to steal your money or information.

Australians lost $77 million to email scams last year. Scammers send 'urgent' emails pretending to be from the government, law enforcement and businesses.

They use the same logo and a similar email address as the real organisation. Scammers can also copy or 'spoof' the email address of an organisation or business to make the scam email look more real.
More Details

Steps you can take to avoid email scams

These simple steps can help prevent loss of money or personal information to scams:

Check that the email is real 

  • Contact the organisation or person using details you have found yourself (on their website or in the phone book) to check if the email was real
  • Access the organisations’ secure, authenticated portal or app directly (never via a link)

Learn how to protect your email account

  • Use unique passwords for different accounts and consider using a password manager so you don’t need to remember every single password you use.
  • Use multi-factor authentication when you can. This provides an extra layer of protection and means a scammer has to correctly guess your email password and a pin number sent to your phone to gain access to your email account.

eSafety has more advice on how to keep your email secure and the Australian Cyber Security Centre has a step-by-step guide on how to check the security of your email accounts following an incident or suspicious behaviour.

Be scam aware

Watch out for other common signs of a scam and immediately cut contact with anyone who tries to threaten or intimidate you.

Never give personal details or payment to anyone offering compensation or help you recover from a previous scam or data breach or winnings, prizes or an inheritance.