IDCARE has received many reports about a phishing text message appearing to come from Australia Post claiming receivers are the winner of a prize. It often appears in the same message stream as your legitimate Australia Post messages as scammers can ‘spoof’ their phone number. If you have responded with your personal information you will need to contact your bank as soon as possible (more below). We also suggest running anti-virus through your phone in case the link contained malicious software.
Australia Post has also posted the following details in relation to the issue under their Scam Alerts section.
If you have provided banking details (especially Credit/Debit card number) it is recommend you contact your financial institution immediately to let them know. Also request to have tighter security on your account i.e. add a security question only you would know the answer to, or a new PIN, etc. It is also recommended to change your passwords, ensuring they are strong and individual, after you have updated and run anti-virus software on your device.
This type of technology allows a caller to masquerade as someone else by falsifying the number that appears on the recipients caller ID display or in text messages. Caller ID Spoofing does not utilitse the real phone numbers service provider, it simply tricks call/message recipients handsets into thinking the call they are receiving is coming from the official organisation.
Run your anti-virus through the device you opened the message on. If you do not have anti-virus you may want to consider doing a factory reset on your phone.
IDCARE recommends that individuals: