A text can look as though it came from a bank, government service, delivery company or even someone you know. Before tapping anything, pause and judge what the message wants you to do.
Look at the Request, Not Just the Sender
Scam texts often demand quick payment, ask for account details or direct you to a login page. Claims about a hacked account, unpaid fee, blocked service or urgent family problem are designed to rush the decision.
A familiar sender name or an existing message thread does not prove the text is genuine. Phone numbers and sender details can be disguised.
Know What “Unverified” Means
Australia's SMS Sender ID Register began on 1 July 2026. Messages using an unregistered branded sender ID must be labelled “Unverified”. Treat that label with extra caution, but remember that it does not prove the message is a scam.
Check Without Using the Message
- Do not reply, tap the link or call the supplied number.
- Open the organisation's official app or type its known website address.
- Find a phone number independently if you still need to call.
- For a “new phone number” message from someone you know, contact their old number or ask a question only they should answer.
If You Already Responded
Contact your bank immediately if you paid or shared financial details. Change any password entered through the link, starting with your email account if it is affected. Contact IDCARE if identity documents or important personal information were exposed.
Block and report the message using your phone's available controls. The safest habit is to leave the text and complete the check through a separate, trusted route.