The ACMA is reminding consumers to be aware of scam SMS messages with unusual looking links. The messages are generated by malware called Flubot.
The scam is evolving as it targets Australians, and it may now look like a package delivery message from a service such as Australia Post, DHL or Amazon.
If you’ve received one of these messages, do not open the link without confirming it is legitimate. Clicking on the link may install malware that uses your contact list to send similar text messages to other people without your knowledge, potentially infecting their device. It may also access your personal information and banking details.
It is important to remember that some SMS scams may slip into your legitimate message streams to gain your confidence. For example, a scam claiming to be from Australia Post may appear among legitimate past messages from the postal service about parcel delivery.
To confirm if a package delivery message is real, contact the sender using contact details you’ve identified yourself, such as through an official website, or via information received at the time of the original purchase, such as a tracking number.
If you receive one of these scam SMS messages:
- Report it to Scamwatch
- Delete the message and block the number if it is unknown
- Do not click on any links or call the number
- If the malware installs, contact your bank and ensure your accounts are secure
- You may also want to reach out to your telco or an IT professional for further assistance
- If you have lost personal information to a scammer you can contact IDCARE or call 1800 595 160
- You can also make a report to ReportCyber if you have been a victim of this cybercrime.
Scammers target everyone! Find out more about how to protect yourself from phone scams.