is that a scam?
← Back to all scams
HIGH phishing Last reported: 26 Sept 2026 Share

Fake energy or telco bill demands payment now — or your service will be cut tonight

Scammers impersonate AGL, Origin Energy, Ausgrid, Telstra, or Optus via fake emails, SMS, or phone calls claiming overdue bills or account breaches. Origin's July 2026 data breach (900k customers) gave scammers authentic names, addresses, and partial card numbers to make calls convincing.

Also known as: AGL fake bill scam Australia, Origin Energy impersonation scam, energy company email scam Australia, utility bill phishing Australia, Telstra impersonation scam, power disconnection scam Australia

What to do right now

  1. 1 Never follow a link in an unexpected email or SMS about your energy or telco account — go directly to the provider's official app or website by typing the URL yourself
  2. 2 Call your energy or telco provider on the number on your bill or their official website — never on a phone number given in a suspicious message or by an unexpected caller
  3. 3 If a caller knows your address, DOB, or partial card number, do not be reassured — the Origin Energy July 2026 breach exposed exactly this data for 900,000 accounts; treat the call as suspicious regardless
  4. 4 If you have given your full banking or card details to a scammer, call your bank immediately and ask them to block your card and monitor for unauthorised transactions
  5. 5 If affected by the Origin data breach, contact IDCARE on 1800 595 160 for free identity-recovery support
  6. 6 Report to Scamwatch at https://www.scamwatch.gov.au/report-a-scam or ReportCyber at https://www.cyber.gov.au/report.

Red flags

  • ⚠ An unexpected email or SMS says your energy or phone bill is overdue and your service will be cut unless you pay immediately via a link
  • ⚠ The link leads to a page that looks like AGL, Origin, or Telstra but the URL is not exactly agl.com.au, originenergy.com.au, or telstra.com.au — check carefully
  • ⚠ A caller claims to be from Origin Energy or AGL, recites your address and partial card number (real data from the 2026 breach), and asks for the remaining digits to 'process a refund or overdue payment'
  • ⚠ You are asked to pay via gift card, cryptocurrency, or a bank transfer to an account you don't recognise
  • ⚠ A 'refund' is offered but you must first pay a 'verification fee' or confirm your full banking details

Sources

Share this with someone who might need it