Phishing Scam

Penipuan phishing adalah upaya penipu untuk mengelabui anda agar memberikan informasi pribadi seperti nomor rekening bank, sandi dan nomor kartu kredit anda.

Bagaimana cara scam bekerja?

Scammer akan menghubungi anda dan berpura-pura berasal dari bisnis yang sah seperti bank, telepon atau penyedia layanan internet. Anda mungkin dihubungi melalui email, media sosial, telepon, atau pesan SMS.

Petunjuk untuk mengetahui email bohong

• Scammer meminta anda untuk memberikan atau mengkonfirmasi rincian pribadi anda. Misalnya, scammer mungkin mengatakan bahwa bank atau organisasi memverifikasi catatan pelanggan karena kesalahan teknis yang menghapus data pelanggan. Atau, mereka mungkin meminta anda untuk mengisi survei pelanggan dan menawarkan hadiah untuk berpartisipasi.

• Alternatif lain, scammer dapat mengingatkan anda bahwa ada 'unauthorised or suspicious activity on your account' 'aktifitas yang mencurigakan di account anda'. Anda mungkin diberi tahu bahwa ada pembelian besar di negara asing dan menanyakan apakah anda memberi otorisasi atas pembayaran tersebut. Jika Anda menjawab bahwa anda tidak melakukannya, si penipu akan meminta anda untuk mengonfirmasi kartu kredit atau rincian bank Anda sehingga 'bank' dapat menyelidiki. Dalam beberapa kasus, scammer mungkin sudah memiliki nomor kartu kredit anda dan meminta anda untuk mengkonfirmasi identitas anda dengan mengutip kode keamanan 3 atau 4 digit yang tercetak di kartu.

Pesan phishing dirancang agar terlihat asli, dan sering menyalin format yang digunakan oleh organisasi yang ditiru oleh scammer, termasuk merek dan logo mereka. Mereka akan membawa Anda ke situs palsu yang terlihat seperti betulan, namun memiliki alamat yang sedikit berbeda. Misalnya, jika situs yang sah adalah 'www.realbank.com.au', si penipu dapat menggunakan alamat seperti 'www.reallbank.com'.

Jika anda memberikan scammer dengan rincian data anda secara online atau melalui telepon, mereka akan menggunakannya untuk melakukan kegiatan penipuan, seperti menggunakan kartu kredit anda dan mencuri uang anda.

Other types of phishing scams

   Whaling and spear phishing - the scammer targets a business in an attempt to get confidential information for fraudulent purposes. To make their request appear legitimate, they use details and information specific to the business that they have obtained elsewhere.
   Pharming - the scammer redirects you to a fake version of a legitimate website you are trying to visit. This is done by infecting your computer with malware which causes you to be redirected to the fake site, even if you type the real address or click on your bookmarked link.

Warning signs

   You receive an email, text or phone call claiming to be from a bank, telecommunications provider or other business you regularly deal with, asking you to update or verify your details.
   The email or text message does not address you by your proper name, and may contain typing errors and grammatical mistakes.
   The website address does not look like the address you usually use and is requesting details the legitimate site does not normally ask for.
   You notice new icons on your computer screen, or your computer is not as fast as it normally is.

Protect yourself

   Do not click on any links or open attachments from emails claiming to be from your bank or another trusted organisation and asking you to update or verify your details – just press delete.
   Do an internet search using the names or exact wording of the email or message to check for any references to a scam – many scams can be identified this way.
   Look for the secure symbol. Secure websites can be identified by the use of 'https:' rather than 'http:' at the start of the internet address, or a closed padlock or unbroken key icon at the bottom right corner of your browser window. Legitimate websites that ask you to enter confidential information are generally encrypted to protect your details.
   Never provide your personal, credit card or online account details if you receive a call claiming to be from your bank or any other organisation. Instead, ask for their name and contact number and make an independent check with the organisation in question before calling back.

Have you been scammed?

If you think you have provided your account details to a scammer, contact your bank or financial institution immediately.

We encourage you to report scams to the ACCC via the report a scam page. This helps us to warn people about current scams, monitor trends and disrupt scams where possible. Please include details of the scam contact you received, for example, email or screenshot.

We also provide guidance on protecting yourself from scams and where to get help.

Spread the word to your friends and family to protect them.