What are the red flags of this scam?

An unexpected text or email says your account has been suspended, a suspicious login was detected, or urgent verification is needed — with a link to 'sign in' • A social media sponsored ad promises a competition to win a vehicle or cash prize for 'eligible' bank customers and asks you to log in to enter • The URL is NOT the bank's real domain: commbank.com.au, netbank.com.au, nab.com.au, anz.com.au, westpac.com.au — it contains extra words like 'auth', 'secure', 'verify', or a hyphen plus the bank name • After entering your username and password, the page asks for the SMS one-time passcode just sent to your phone — giving it allows real-time account takeover • The page looks identical to the real bank site because scammers now copy the newly updated bank designs within days of a bank rebrand • Social media ads promoting bank competitions with logos, colours, and images that look exactly like the real bank are also used to lead victims to these pages

What should I do if this happened to me?

Never click links in texts, emails, or social media ads to log into your bank — type the address directly into your browser or use the official app • Check the full URL before entering any credentials: it must be exactly commbank.com.au, nab.com.au, anz.com.au, or westpac.com.au — no extra words, hyphens, or unfamiliar TLDs • Your bank will never contact you via a social media ad asking you to log in for a competition or prize — delete and report such ads • If you already entered your credentials and OTP: call your bank's fraud line immediately using the number on the back of your card — a real-time session may still be reversible if reported quickly • Ask your bank to place a temporary hold on outgoing transfers while they investigate any unauthorised access to your account • Enable push notifications for all transactions — an alert of an unexpected transfer is your fastest signal to call the fraud line • Report to Scamwatch at https://www.scamwatch.gov.au/report-a-scam or ReportCyber at https://www.cyber.gov.au/report.

CRITICAL phishing Last reported: 16 Oct 2026 Share

A social media ad or text links to a fake bank login page that steals your password and OTP

Q: Is this a scam?

Yes. This is a documented scam pattern. A social media ad, SMS, or email links to a fake Australian bank login page copying the real design. After entering credentials and your OTP, the scammer logs into your real account and transfers funds within minutes. CommBank, NAB, ANZ, Westpac, and Macquarie have all been impersonated.

A social media ad, SMS, or email links to a fake Australian bank login page copying the real design. After entering credentials and your OTP, the scammer logs into your real account and transfers funds within minutes. CommBank, NAB, ANZ, Westpac, and Macquarie have all been impersonated.

Also known as: fake CommBank NetBank login page, fake bank login phishing Australia, bank smishing Australia, fake NAB internet banking page, bank account suspended text scam Australia, Australian bank OTP phishing, fake Westpac login Australia

Already happened to you? Do this in the next few minutes

1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.

What to do right now

1 Never click links in texts, emails, or social media ads to log into your bank — type the address directly into your browser or use the official app
2 Check the full URL before entering any credentials: it must be exactly commbank.com.au, nab.com.au, anz.com.au, or westpac.com.au — no extra words, hyphens, or unfamiliar TLDs
3 Your bank will never contact you via a social media ad asking you to log in for a competition or prize — delete and report such ads
4 If you already entered your credentials and OTP: call your bank's fraud line immediately using the number on the back of your card — a real-time session may still be reversible if reported quickly
5 Ask your bank to place a temporary hold on outgoing transfers while they investigate any unauthorised access to your account
6 Enable push notifications for all transactions — an alert of an unexpected transfer is your fastest signal to call the fraud line
7 Report to Scamwatch at https://www.scamwatch.gov.au/report-a-scam or ReportCyber at https://www.cyber.gov.au/report.

Red flags

⚠ An unexpected text or email says your account has been suspended, a suspicious login was detected, or urgent verification is needed — with a link to 'sign in'
⚠ A social media sponsored ad promises a competition to win a vehicle or cash prize for 'eligible' bank customers and asks you to log in to enter
⚠ The URL is NOT the bank's real domain: commbank.com.au, netbank.com.au, nab.com.au, anz.com.au, westpac.com.au — it contains extra words like 'auth', 'secure', 'verify', or a hyphen plus the bank name
⚠ After entering your username and password, the page asks for the SMS one-time passcode just sent to your phone — giving it allows real-time account takeover
⚠ The page looks identical to the real bank site because scammers now copy the newly updated bank designs within days of a bank rebrand
⚠ Social media ads promoting bank competitions with logos, colours, and images that look exactly like the real bank are also used to lead victims to these pages

Known variants

Social media competition variant: a sponsored ad on Facebook or Instagram claims eligible bank customers can win a vehicle or $10,000 by logging into their NetBank or internet banking account via the ad link. The login page copies the bank's newly redesigned interface.

Last seen: 10/16/2026

Already happened to you? Do this in the next few minutes

What to do right now

Red flags

Known variants

Sources