Bank Text Scams in Australia: What Seniors and Families Should Check
Bank text scams can look genuinely real. A message appears to come from your bank, warning of unusual activity, a blocked payment, a locked account, or some problem that needs urgent action right now. This guide explains what to check before you tap anything, what to do if a message looks suspicious, and how families can help an older parent build safer habits without making a fuss of it. For more ways to protect yourself online, see our complete guide to staying safe online.
Quick answer
If a bank text turns up that you were not expecting, do not tap the link, do not reply, and do not ring any number in the message. Instead, open your banking app yourself, type your bank’s website into your browser, or call the bank on the number from the back of your card or its official website. Remember that Australian banks have removed links from their texts, so a bank text with a link is a scam. If the message looks dodgy, you can forward it to 7726.
Why bank text scams can be hard to spot
These scams work because they copy the style of real messages. A scam text will often use the name of a real Australian bank, a short warning about your account, a link that looks official at a glance, urgent wording like “act now”, a phone number to call, and a request to confirm a payment or login. On top of that, it tends to arrive when you are busy, tired or worried, which is exactly when people act without thinking. That is why one simple rule beats a hundred warnings: never act directly from a bank text.
Common warning signs of a fake bank text
Treat a bank text as suspicious if it asks you to:
- Tap a link to log in
- Enter your banking password, card number or PIN
- Share a one-time code
- Move money to a “safe” account
- Call a number provided in the text
- Download an app or remote access tool
- Act immediately or your account will be closed
Some scam texts are obvious; others are very polished. Either way, the safe move is the same: step away from the message and contact the bank another way.
What to do before you tap anything
The whole thing comes down to slowing down. Scam messages are built to rush you, so pause before you do a thing, because a real banking issue can always be checked safely through your app, the official website, or the number on your card. Do not use the link in the text, even if it looks close to the real website, because it may lead to a fake login page; open the bank’s app yourself or type the address in by hand. Do not ring a number from the text either, since it may go straight to the scammer; use the number on the back of your card or a statement. Never share a one-time code with anyone who has contacted you out of the blue, as those codes approve logins and payments. And if you are unsure, ask a family member or friend to look at it with you. There is nothing embarrassing about checking; these scams are designed to fool anyone.
What to do if you clicked a bank scam text
If you clicked a link but entered nothing, just close the page and stop there; you are most likely fine. If you entered banking details, card details, a password or a one-time code, act quickly:
- Contact your bank immediately on its official number.
- Tell them what happened and exactly what you entered.
- Ask whether your card, password or online banking access needs changing.
- Check recent transactions.
- Change your banking password if the bank advises it.
- Report the scam text to 7726, and report the scam to Scamwatch at scamwatch.gov.au.
- Keep a note of what happened, including the time, the message and any details entered.
If money has actually left the account, contact the bank as soon as you possibly can. Fast action gives them the best chance of helping.
What protections you have in Australia
Australia’s banks and regulators have brought in real changes that work in your favour. Under the banks’ Scam-Safe Accord, banks have removed links from their text messages and rolled out a “Confirmation of Payee” name check, which warns you if the account name you are paying does not match the details you have entered. Businesses, including banks, must now register on the ACMA SMS Sender ID Register, so a genuine bank text should show the bank’s real name rather than an unknown number.
It is worth being honest about money, though. Australia does not have a guaranteed reimbursement scheme that pays everyone back. If your card or account was used without your say-so, the bank can often stop, trace or refund the transaction, and unauthorised charges are frequently put right. Money you were tricked into sending yourself is harder to recover, which is why checking first matters so much. If you are unhappy with how your bank handles a scam, you can take a free complaint to the Australian Financial Complaints Authority (AFCA) on 1800 931 678. Under the new Scams Prevention Framework, AFCA is becoming the central place to resolve scam complaints against banks, phone companies and online platforms.
How families can help an older parent
You can make this much easier without taking over. The most useful thing is a single shared rule, something easy to remember like: “If a bank text asks you to click, call, or log in, stop and check first.” Beyond that, help your parent save the bank’s real number in their contacts under a plain name like “Bank official number”, taken from the back of the card or the bank’s website, so the right number is always to hand.
Plenty of families also agree that a parent can simply forward any suspicious message to an adult child before doing anything, which makes checking feel normal rather than embarrassing. It helps to look at a few real scam examples together and point out the patterns: urgent wording, login links, requests for codes, unexpected account warnings, and spelling or formatting that feels slightly off. And keep the phone updated, since software updates quietly add protection; if updates baffle them, set a regular time to check the phone together. Keep the whole tone calm. The aim is a simple habit, not a telling-off.
A simple bank text safety checklist
Before acting on any bank text, run through these:
- Did I expect this message?
- Is it asking me to click a link or log in?
- Is it asking for a password, PIN, card number or code?
- Is it telling me to act urgently?
- Is it asking me to call a number in the message?
- Have I checked through the bank’s app or official number instead?
If the answer to any of these is yes, stop and check another way.
Delete it, reply, or worry about the thread?
If you have not clicked anything, report it to 7726 first and then delete it, so it cannot be tapped by mistake later. Do not reply, not even “STOP”, because replying can confirm your number is live and active; it is safer to ignore, report and delete. And be wary even when a scam text lands in the same thread as your real bank messages, because scammers can sometimes make a message look like it comes from a known sender. Do not trust the sender name or the thread. Use the same rule every single time: do not tap the link, and check through the official app, website or phone number.
FAQ
Do banks send text messages?
Banks do send some texts, but a genuine one will never pressure you to share passwords, PINs, card details or one-time codes, and Australian banks no longer put links in their texts. If a message pushes you to log in through a link, treat it as a scam and check through the bank’s official channels.
What number do I report scam texts to in Australia?
Forward scam or spam texts to 7726 (it spells “SPAM”). It is free, and your mobile provider uses these reports to track and block scam senders. You can also report the scam itself to Scamwatch at scamwatch.gov.au.
What should I do if I gave my bank details to a scammer?
Contact your bank immediately on its official number, tell them exactly what happened, and follow their instructions about changing passwords, freezing cards, checking transactions or securing your account. If your identity details were exposed, call IDCARE on 1800 595 160 for free support.
Should I call the police?
If money has been taken or you are worried about fraud, contact your bank first, because timing matters most. You can then report the scam to Scamwatch at scamwatch.gov.au, report online fraud through ReportCyber at cyber.gov.au, and call the Police Assistance Line on 131 444 for a non-urgent report. Call Triple Zero (000) only if someone is in immediate danger.
How can I help a parent without making them feel silly?
Make it a shared family rule. Point out that everyone gets these texts and everyone should stop and check. Skip the blame and focus on having a simple process.
Final thoughts
Bank text scams are common precisely because they create pressure. The safest habit is simple: do not click, do not reply, and do not call the number in the message. Check another way, through the banking app, the official website, or the number on the back of the card. And if in doubt, ask someone you trust before doing anything at all.
Before you finish
Download the free Family Tech Safety Checklist to help check phone safety, passwords, scam messages, emergency contacts and medical alarm details.
If your bank’s texts have started showing a name or the word Unverified at the top, that is the new sender ID system rather than anything to worry about. Our guide on why your bank’s texts look different now explains what it means.
