Australia Post Phishing Scam

Australia Post Phishing Scam

<  Back to News and Media

Published on:

December 7, 2018

Australia Post Phishing Scam

IDCARE has received many reports about a phishing text message appearing to come from Australia Post claiming receivers are the winner of a prize. It often appears in the same message stream as your legitimate Australia Post messages as scammers can ‘spoof’ their phone number. If you have responded with your personal information you will need to contact your bank as soon as possible (more below). We also suggest running anti-virus through your phone in case the link contained malicious software.

Australia Post has also posted the following details in relation to the issue under their Scam Alerts section.

Financial Institution:

If you have provided banking details (especially Credit/Debit card number) it is recommend you contact your financial institution immediately to let them know.  Also request to have tighter security on your account i.e. add a security question only you would know the answer to, or a new PIN, etc. It is also recommended to change your passwords, ensuring they are strong and individual, after you have updated and run anti-virus software on your device.


This type of technology allows a caller to masquerade as someone else by falsifying the number that appears on the recipients caller ID display or in text messages. Caller ID Spoofing does not utilitse the real phone numbers service provider, it simply tricks call/message recipients handsets into thinking the call they are receiving is coming from the official organisation.

Device recommendations:

Run your anti-virus through the device you opened the message on. If you do not have anti-virus you may want to consider doing a factory reset on your phone.

How can I mitigate phishing risks?

IDCARE recommends that individuals:  

  1. Be very vigilant about emails, telephone calls and SMS messaging received. Be cautious of clicking on links or attachments you are not expecting and do your own research and explore alternative contact methods for the sender. When requests for personal information are made, it is always best to disconnect (where relevant) and contact the organisation directly on a number you have sourced yourself.
  2. Check the email address to see whether it is an email address the sender uses. Good organisations don’t contact you and ask you to “prove” who you are.
  3. Ensure you have anti-virus on all of your Internet enabled devices (including your phone).
  4. Change your email password after you have run an anti-virus scan on your device.
  5. If after reading this response plan you feel you need further support please contact IDCARE via the link below.


Other News

IDCARE is always active in the media from radio to TV, social media and news articles. Keep up to date with what's happening at IDCARE and in the media.
Why your number is being spoofed

You've heard about FluBot, now we explain what it is.

Explaining ‘Do not call’, Silent Numbers and Telephone Scams

Scammers do not receive these lists, and even if they did, would probably use them in the opposite way. 

Insights into how scammers trick us

Experts in the field reveal insights into how scammers trick us

Are your virtual "friends" like Siri spying on you? 

Plus , how safe is TikTok? We put it through the hAPPy Score.



IDCARE is here to provide you with specialist support and guidance when faced with a cyber and identity related issue. Contact one of our Identity & Cyber Security Case Managers to learn more about our Support Services and how we can help you.   

Get help

Submit a web request

Call Centre Icon


1800 595 160

Mon - Fri: 8am - 5pm AEST

QLD: 07 3555 5900
ACT & NSW: 02 8999 3356
VIC: 03 7018 2366
NT, SA & WA08 7078 7741

Call Centre Icon

call our NEW ZEALAND

0800 121 068

Mon - Fri: 10am - 7pm NZST

AKL: 09 884 4440