Scams & fraud
How to tell if a text from a delivery company, toll road or bank is real
“Your parcel couldn’t be delivered.” “You have an unpaid toll.” “A new device has signed in to your bank.” Scam texts copy real ones closely, and some even land in the same thread as genuine messages. You don’t need to be a tech expert to check them. You just need one habit.
The short version
The one habit that works
- Don’t tap links in unexpected texts.
- Open the official app or type the website address yourself.
- If there’s a real problem, it will be waiting for you there.
- Report it, then delete it.
Why scam texts are so convincing
Scam texts work because they arrive at the same time as real ones. Most of us are waiting on a parcel, use toll roads or get bank alerts, so a message about any of those feels normal. Scammers send millions of them knowing a small share of people will be expecting exactly that delivery or bill.
They also look official. A text can show a sender name like “AusPost” or a bank’s name instead of a number, and on some phones it can appear in the same conversation as real messages from that company. Australia has introduced rules and a sender ID register run by the ACMA to make this harder, but no system catches everything.
So don’t judge a text by how it looks. Judge it by what it asks you to do.
The warning signs
| The text… | Why it matters |
|---|---|
| Includes a link to pay, confirm or “update” something | This is the main way scam texts steal card numbers and logins. |
| Gives you a deadline, a fine or a threat | Urgency stops you checking. Real organisations give you time. |
| Asks for a small payment, like a $2.99 redelivery fee | A small amount feels harmless, but the real aim is your card details. |
| Uses a web address that’s close to the real one, but not quite | Extra words, odd endings or misspellings are common, such as a brand name followed by “-au-pay” or “.info”. |
| Says you’re owed a refund or rebate | Refund texts are bait, especially around tax time and energy rebates. |
| Comes from a personal mobile number but claims to be a company | Big organisations don’t text you from random mobiles. |
How to check a text in under a minute
Don’t tap the link
Even opening the page can tell the scammer your number is active, and the fake page is designed to look identical to the real one.
Go to the source yourself
Open the company’s official app, or type its address into your browser. For a delivery, use the tracking number from your order confirmation email or the retailer’s website. For tolls, log in to your toll account. For your bank, use the banking app.
Look for the same message there
If there’s a real unpaid toll, held parcel or account issue, you’ll see it after you log in. If there’s nothing, the text was a scam.
Call if you’re still unsure
Use a phone number from the official website, the back of your card or a bill. Never use a number given in the text.
Australia Post, toll companies and banks have all warned about this
They say they won’t text you asking for card details, passwords or personal information through a link. If a text does, it isn’t them.
Reporting and deleting scam texts
- Report it to your telco. Telstra, Belong and Boost customers can forward scam texts free to 7226 (it spells SCAM), and confirmed scams get added to Telstra’s filters. Other providers explain their reporting options on their websites. On iPhone, you can also tap Report Junk under the message.
- Report it to Scamwatch if you want it recorded, especially if it’s a type of scam you haven’t seen before.
- Delete it. That stops you, or someone borrowing your phone, tapping the link later.
- Block the sender if it came from a number.
Don’t reply, even with “STOP”, to a message you think is a scam. Replying confirms your number is active.
If you’ve already tapped the link
Just opening a scam page usually doesn’t harm your phone. What matters is what you did next.
You entered card details
Call your bank straight away on the number on your card. Ask them to block the card and watch for transactions. Then check your statement over the next few weeks.
You entered a password
Change that password now, and any other account that uses the same one. Start with your email, then banking, then everything else. Turn on two-step verification while you’re there.
You entered personal details like your licence or Medicare number
Contact IDCARE on 1800 595 160. They’ll help you work out which documents to replace and whether to put a ban on your credit file.
You installed something
If the page asked you to install an app or “security update”, don’t open it. Delete it, then get the phone checked. On Android, scam apps can read your texts, including bank codes.
Stopping more scam texts
- Turn on your phone’s spam or unknown-sender filtering. On iPhone, look for Filter Unknown Senders in the Messages settings. On Android, open Messages settings and turn on spam protection.
- Ask your telco what extra scam filtering it offers.
- Keep your phone updated, so the latest scam protections are installed.
Practise on fake examples
Texts, links and QR codes is a free NovaSoft Labs course with six fictional scenarios and an explanation for every answer. Pass it to print a completion certificate.
Common questions
The text was in the same thread as genuine messages from that company. Doesn’t that prove it’s real?
No. Scammers can fake the sender name, and some phones group messages by that name. It’s one of the most convincing tricks, which is why the habit of not tapping links matters.
How did they know I was waiting for a parcel?
They probably didn’t. Huge numbers of people are waiting for a parcel at any time, so the guess often lands.
Is it safe to tap a link from my real bank?
Most banks try not to send links at all for this reason. Using the app is always safer, even when the message is genuine.
Sources
This guide is general information, not legal or financial advice. If you think you’ve lost money or personal information, contact your bank and the services named above straight away.
Keep reading
Related help
Talk to NovaSoft
Want a hand with this at work?
These guides are free to use. If your business wants help putting the checks, accounts and devices in place, our team can do it with you.