Latest scams, fraud and security alerts

• Be cautious of unexpected emails or SMS messages, or phone calls,
• Do not click on any links, or open any attachments that are unfamiliar or appear suspicious.
• Never enter credit/debit card information on any unknown, suspicious or untrustworthy websites.
• Never provide your passwords, account numbers, PINs, or OTP to anyone.
• Regularly check your transactions. If you notice anything unusual, contact us right away.
• Contact your provider/bank immediately on a trusted number if you’re contacted by someone saying your account is at risk, under review, or locked, or if you enter personal details on a website that you suspect is suspicious.
• Only use trusted app stores and avoid third-party app downloads.

If you suspect fraud on your account or have shared financial information or transferred money as a result of this scam, please contact us straightaway. Our Customer Protection Team is available 24/7 to help you.

You can also report scams to the Australian Government’s Scamwatch and the Australian Cyber Security Centre’s ReportCyber.

Impersonation scams imitate not only banks, but government agencies, organisations and even friends or family members. Here are some tips to help you protect yourself:

• Be cautious of unexpected emails or SMS messages, or phone calls, and do not click on any links, or open any attachments.
• Contact your provider/bank immediately on a listed number if you receive a message from someone saying your account is at risk, under review, or locked or if you enter personal details into a link that you suspect is a scam.
• Do not share personal or financial details, and never provide your passwords, account numbers, or one-time passcodes to anyone.
• Always pause and reassess the situation. Scammers often create a sense of urgency, pressuring you to act quickly.

For more information about bank impersonation scams, visit ANZ Security Hub – types of scams – bank impersonation scams.

If you suspect fraud on your account or have shared financial information or transferred money as a result of this scam, please contact us straightaway. Our Customer Protection Team is available 24/7 to help you.

You can also report scams to the Australian Government’s Scamwatch and the Australian Cyber Security Centre’s ReportCyber.

ASD’s ACSC encourages Australian organisations should review their use of vulnerable SonicWall devices, and consult the below for investigation and remediation advice:

• Gen 7 and newer SonicWall Firewalls – SSLVPN Recent Threat Activity
• CVE-2024-40766 Security Advisory

The vendor has also urged organisations to change passwords after updating to the latest version.

Organisations remain vulnerable if they have not fully implemented the mitigation advice by updating credentials after updating the firmware.

For more information, please read the Australian Cyber Security Centre’s alert, Ongoing active exploitation of SonicWall SSL VPNs in Australia (CVE-2024-40766) | Cyber.gov.au

Australian organisations should review their networks for use of vulnerable instances of NetScaler ADC and NetScaler Gateway.

Organisations or individuals that have been impacted or require assistance can contact ACSC via 1300 CYBER1 (1300 292 371).

For more information, please read the Australian Cyber Security Centre’s alert: Multiple vulnerabilities affecting NetScaler ADC and NetScaler Gateway devices

Businesses are encouraged to stay vigilant against suspicious communications across email, phone, messaging apps, and social media. Here are some practical ways to help safeguard your business:

• Verify the Source: Always confirm the sender’s email address or phone number. If someone claims to be from a trusted organisation, validate their identity through a separate, known channel.
• Avoid Clicking Links or Downloading Attachments: Only interact with links or files if you're confident about the sender’s legitimacy. Visit websites directly rather than clicking embedded links.
• Limit Personal Information Sharing: Be cautious about what you post online. Cyber criminals may use publicly available details to craft convincing scams.
• Pause and Assess: Scammers often create urgency to pressure quick decisions. Take a moment to evaluate the situation calmly before responding.
• Report Suspicious Activity: If you receive a questionable message, avoid engaging with it. Report it to your IT team, service provider, or relevant authority.

If you suspect fraud on your account, have shared financial information or transferred money as a result of this scam, please contact us straightaway.

You can also report scams to the Australian Government’s Scamwatch and the Australian Cyber Security Centre’s ReportCyber.

ASD’s ACSC encourages Australian organisations to:

• Review their networks for use of vulnerable instances of the Microsoft Office SharePoint Server products
• Consult Microsoft’s customer advisory (CVE-2025-53770) for mitigation advice.

For more information, please read the Australian Cyber Security Centre’s alert, Vulnerability in Microsoft Office SharePoint Server products.

ASD’s ACSC encourages Australian businesses, organisations and government entities to:

• Review their networks for use of vulnerable instances of the NetScaler ADC and NetScaler Gateway products
• Follow Citrix Security Advisory for mitigation advice.
• Ensure affected products are updated to versions that address this vulnerability.

For more information, please read the Australian Cyber Security Centre’s alert, Critical vulnerabilities in Citrix Netscaler ADC and NetScaler Gateway Products.

Australian organisations should review their networks for use of vulnerable instances of the NetScaler ADC and NetScaler Gateway products and consult Citrix's customer advisory Citrix Security Advisory for mitigation advice.

For more information, please read the Australian Cyber Security Centre’s alert: Critical vulnerabilities in Citrix Netscaler ADC and NetScaler Gateway Products