A phishing scam is a fraudulent attempt to obtain sensitive information or data from you such as bank account numbers, passwords and credit card numbers. You may be contacted by email, social media, phone call, or text message.

Scammers pretend to be from a trusted organisation and ‘phish’ for information through text messages and emails. The texts and emails contain malicious links and attachments designed to steal personal and financial information. Once provided, you can become vulnerable to ID takeovers, account hacks, email compromises and/or unauthorised internet banking or card transactions.

Warning signs

• The message is sent from a public email domain. Legitimate organisations will typically not send you emails from a free webmail service..
• The domain name is misspelt.
• The email is poorly written.
• It includes suspicious attachments or links.
• The message creates a sense of urgency.
• The messages asks you to log into your Internet Banking account.

How to protect yourself

• Be cautious and validate all communications you receive.
• Do not click on any links listed in the correspondence and do not open any attachments.
• Do not enter personal information in a pop-up screen.
• Do not respond to the message.
• Install a phishing filter on your email application and also on your web browser.
• If you receive a link posing to be from BOQ, report it to us immediately via financialcrimes@boq.com.au.
• Delete the message, ensuring to take a screen shot if you need to report the URL to BOQ.
• Always access Internet Banking via www.boq.com.au or the BOQ mobile app.

If in doubt, contact BOQ urgently on 1300 55 72 72, visit www.boq.com.au/contact-us for our operating hours.