Billing and invoice scams

If scammers have been able to compromise the email account of a business or person, they'll search for payment-related emails they can exploit by posing as the business due a payment.

You may receive an email very but similar to the one you're expecting, but with changed account details, in the hope that you won't check the change is genuine. Your supplier may also claim they haven't received your payment - don't make any more payments until you've fully investigated.

To avoid this scam:

• Contact the business on a number you have sourced independently if payee information on the invoice has changed to verify the change.
• Verbally verify first time payments, or request to pay using PayID.
• Turn on Multi-Factor Authentication (MFA) for your email account.

Tips for employees/businesses:

• Verify payment requests from CEOs or senior management, or employee's request to change salary details, verbally.
• Help your customers avoid a scam impersonating your business by asking them to pay via your PayID.
• Turn on Multi-Factor Authentication (MFA) for your email account.

False billing scams usually involve fraudsters asking you or your business to pay fake invoices for directory listings, advertising or supplies that you didn’t order.

Fake billing scammers will often email you a fake or falsified invoice. They may pretend that they are a legitimate business that you know and trust.

To avoid this scam:

• Don't pay until you are sure the invoice is genuine and the payment details are correct.
• Check for discrepancies or changes to payment details.
• Contact the business you normally deal with by phone using a number you have independently sourced and verified.

Scammers impersonate government authorities (including overseas), law enforcement, debt collection agencies or trusted companies threatening fine, arrest, deportation or even physical harm to you or your family.

You may be asked to pay through unusual methods such as cryptocurrencies like bitcoin, cardless cash, cash deposits, international money transfers and gift cards/store cards.

To avoid this scam:

• Don't respond to the texts or emails, or if the threats are by phone - hang up! If you are concerned for your safety, contact the police.

Scammers set up fake websites or profiles on actual retailer sites. They then offer products or services at prices that are too good to be true.

They also post fake ads and fake reviews. They may use stolen logos, a ".com.au" domain name and stolen Australian Business Number (ABN). These scams are hard to spot.

To avoid this scam:

• Type the website and the word scam or review into a search engine and review results carefully.
• Check the websites URL for red flags such as:
  • Multiple dashes or symbols in the domain name.
  • Domain that imitates a business, such as Ap9le.
  • Domains for Australian businesses that don’t end in .com or .com.au.
  • Check the contact page. No contact info is a sign it's likely a scam.

Scammers try to convince you that you are owed or entitled to a grant, refund, winnings, inheritance, a prize or other money you did not expect to receive. But there's a catch - you have to pay something up front.

To avoid this scam:

• Never pay money to release money - even if the introducing person is known to you. It will always be a scam.

Rental scams often involve fake listings, requests for deposits before inspection, and pressure tactics to act quickly. Be cautious about unusually low prices, unconventional payment methods, and inconsistencies in listing details.

To avoid this scam:

• Don't pay any money until you've inspected the property, met the landlord or agent and are satisfied that the offer is genuine. If paying in cash, insist on a receipt at the time of payment.

Scammers impersonate various government agencies including MyGov, Centrelink, the ATO and law enforcement.

You may receive a call or text suggesting you need to act quickly to secure your account, catch a hacker, or pay an overdue tax bill or fine to avoid immediate arrest. They often build trust, create fear and a sense of urgency, hoping to catch you off guard.

To avoid this scam:

• Never give personal information or remote access to your devices to someone who contacts you. If you think the request might be genuine, always contact the organisation directly on a number you've independently sourced and verified. Never click the links!