Fraud protection.
Now it's personal.
ANZ Falcon® technology monitors millions of transactions every day to help keep you safe from fraud.
Falcon® is a registered trademark of Fair Issac Corporation.
Latest scams, fraud and security alerts
Stay informed on the latest scams, fraud, and security alerts. Learn about emerging cyber threats and important online risks as they arise. If you are a business, make sure to stay updated with the latest business security alerts 
that could impact you.
Explore the latest alerts below, and make informed decisions to help keep your personal and banking details safe.
Businesses: See latest security alerts
July 2025
Posted on 16 July 2025
Digital wallet scams
Type: 
We would like to remind our customers to be wary of scams involving digital wallets.
Digital wallets allow you to make transactions with your mobile or wearable device instead of a physical card.
While digital wallets are safe, if scammers have access to your card details and one-time passcodes (OTP), they can add your card to their own device (or third party) and spend or withdraw your money without your permission.
Bank Impersonation scam alert
Type:
We have been made aware of an increase in bank impersonation scams. Be cautious of SMS messages or phone calls, claiming to be from ANZ. They may ask you to transfer money, open another account, provide your sensitive banking details or click on a link.
Remember, we will never ask you to:
- Share sensitive information like your One Time Passcode (OTP), verification code, PIN or card details.
- Click in a link to install software for live chat, remote access purposes, or access our official website.
- Transfer money to another account.
- Open a new account.
- Share sensitive banking details like your access PIN or card details.
ATM Cheque Fraud
Type:
Although cheque usage is less common today, there are still instances where fraudsters deposit fake cheques into ATMs as part of schemes targeting individuals selling goods.
In these scenarios, a fake cheque is deposited into the seller’s account which may temporarily make it appear that funds have been received. However, the cheque has not actually cleared. This can lead the seller to believe the payment is valid and release the goods, only to later discover that the cheque was dishonoured.
Watch out for Investment Scams
Type:
Investment scams are on the rise, and they’re becoming more convincing than ever. Many of these scams begin with ads on social media that appear to be endorsed by well-known and trusted public figures.
Once you engage, the scammer may introduce what sounds like an incredible opportunity to grow your money —often promising returns that are far higher than what you’d expect from a genuine investment. Sometimes, though, the offer might only seem slightly better than what you're currently getting, making it even more convincing and harder to detect.
Here’s what to look out for:
- You’re asked to share personal or financial details
- You’re encouraged to download software or apps
- You’re told to transfer money to unfamiliar accounts
- You may even see small “profits” at first, but then be asked to pay a fee or tax to withdraw your funds
Screenshot from a social media platform showing a scam message promoting unrealistic investment returns.
Screenshot from a social media platform advertising a false investment scheme.
Screenshot from US Securities and Exchange Commission showing a message of a sign up page of an investment platform.
End of Financial Year Scams
Type:
Individuals and businesses should be aware of increased scam activity as sophisticated cyber criminals take advantage of the busy tax period. During this busy time, scammers may use sophisticated tactics to try and catch you off guard. There are various types of scams, and the intent is clear - they want to steal your money or personal information.
Cyber criminals attempt to take advantage of this time of year with tax-related impersonation scams, namely those appearing to originate from the Australian Tax Office (ATO) or other government services such as myGov.
If you are unsure about the authenticity of a call or message, contact the ATO or applicable government service to verify.
For more information about rebate, refund and EOFY scams visit Rebate and refund scams online.
Business alerts
Posted on 21 July 2025
Critical alert from the Australian Signals Directorate's Australian Cyber Security Centre (ASD's ACSC)
Type: 
The ASD's ACSC has published a critical alert regarding vulnerabilities affecting Microsoft Office SharePoint Server products (CVE-2025-53770).
According to the ASD’s ACSC, the vulnerability may allow an unauthorised attacker to execute code over a network.
Posted on 10 July 2025
Critical alert from the Australian Signals Directorate's Australian Cyber Security Centre (ASD's ACSC)
Type:
The ASD's ACSC has published an alert regarding 2 vulnerabilities affecting Citrix Netscaler ADC and NetScaler Gateway Products.
The following vulnerabilities have been identified:
- CVE-2025-5777: Insufficient input validation.
- CVE-2025-5349: Improper access control on the NetScaler Management Interface.
According to the ASD’s ACSC, these vulnerabilities can lead to memory overflow issues, resulting in unintended control flow and Denial of Service due to insufficient input validation.
Posted on 23 June 2025
Critical alert from the Australian Signals Directorate's Australian Cyber Security Centre (ASD's ACSC)
Type:
The ASD's ACSC has sent a critical alert relevant to Australian organisations using Citrix Netscaler ADC and NetScaler Gateway Products (CVE-2025-5349 and CVE-2025-5777).
Citrix has identified the following vulnerabilities affecting Netscaler ADC and NetScaler Gateway Products:
- CVE-2025-5777: Insufficient input validation leading to memory overread, potentially leading to the exposure of sensitive data.
- CVE-2025-5349: Improper access control on the NetScaler Management Interface.
Posted on 19 May 2025
Critical alert from the Australian Signals Directorate's Australian Cyber Security Centre (ASD's ACSC)
Type:
The ASD's ACSC has published an alert regarding 2 vulnerabilities affecting Ivanti Endpoint Manager Mobile (EPMM).
The 2 vulnerabilities the ASD's ACSC is tracking in Ivanti EPMM are:
- CVE-2025-4427: Medium severity Authentication Bypass, and
- CVE-2025-4428: High severity Remote Code Execution
When chained together, these vulnerabilities can provide unauthenticated attackers Remote Code Execution.
All versions of Ivanti EPMM prior to and including 12.5.0.0 are vulnerable.
App Store is a service mark of Apple Inc. Google Play and the Google Play logo are trademarks of Google LLC