Pretexting scams
Scammers might use a false story to trick you into giving personal information, money, or access to systems.
This is called a ‘pretexting scam’ and it’s a form of social engineering usually seen in SMS text messages, email and phone correspondence.
What is the scam?
An attacker will impersonate someone you know to request something urgently.
Attackers might claim to be a:
- colleague
- friend
- family member
- internet service provider (ISPs)
- mobile service carrier.
Using information they’ve found online about you, such as your hobbies, recent holidays and job changes, scammers will create realistic scenarios asking you to urgently take action.
This may result in you:
- downloading malicious software
- providing two-factor authentication codes
- login credentials
- sending money to a cybercriminal.
Protect yourself
- Check before you respond: use a different mode of communication if you receive a request from an unusual email address or phone number.
- Don’t overshare online: if the information you’re sharing is sensitive it shouldn't be shared with a wider audience.
- Adjust your privacy settings: be aware of posts you’ve been tagged in and where your information can be viewed.
- Stay updated: subscribe to the Australian Government’s, Australian Cyber Security Centre for current scam trends.
What to do if you've received a pretext scam
- Contact the sender using a different mode of communication to ask them if the message is genuine.
- Contact your bank to report the incident if you think you've been scammed and paid the scammer money.
- Read what to do if your account or device has been compromised for more information.
How to report a scam
UQ devices/accounts
- Alert the Cyber Security Operations Centre (CSOC) by reporting a cyber concern.
- To report a suspicious email, use the Phish Alert Button in Outlook. If you use another email client, follow instructions on how to report a suspicious email.
Personal devices/accounts
- Report the scam to the ACSC (Australian Cyber Security Centre) who may be able to assist you.
- Consider reporting the incident to ScamWatch.
- If you believe personal information has been put at risk, contact IDCare for support.