Alert Priority High
9 September 2016

Scammers claiming to represent Telstra are sending fake emails offering recipients refunds for double payment of a monthly bill.

The fake messages – headed Refund Bill Number: [a several digit number follows] ask the recipient to click on a link to make a claim for a refund of the overpayment. They claim that the second payment will then be refunded to the recipient's bank account.

The message claims to be sent in the name of Gerd Schenkel, Executive Director, Telstra Digital Sales and Service.

Telstra advises customers that receive a phishing email or text message not to click on any links or attachments and to delete the message immediately.

Staying safe

Be wary of any unsolicited email or SMS messages, particularly those that ask you to click on a link. Never click on a link in any unsolicited email or SMS message. If you have any doubts about a message, check directly with the sender using contact details obtained from legitimate sources such as official websites.

Keep your antivirus and any other security software up-to-date.

If you do accidentally click on the link, you may expose your computer or phone, and personal information, to criminals who aim to use it for malicious purposes. For example, they may harvest your online banking credentials and attempt to withdraw money from your account, or undertake identity theft-related activities such as taking out a bank loan in the recipient's name.

Stay Smart Online recommends you change your online banking details (including usernames and passwords), and access details for any other online accounts, using an uninfected device. Advise your financial institutions that you may have an infected device and ask them to look out for suspicious activity relating to your accounts.

Customers can report scam activity to the Australian Competition and Consumer Competition (ACCC) at the scamwatch website or by calling 1300 795 995

More information

Stay Smart Online has information on protecting your mobile device.

The information provided here is of a general nature. Everyone's circumstances are different. If you require specific advice you should contact your local technical support provider.