my.UQ

Threat and penalty scam

  1. Home
  2. Information and services
  3. Information technology
  4. Cyber security
  5. Cyber security at UQ

Scammers may attempt to threaten or blackmail you.

What is the scam?

The scammer may threaten you with a negative consequence if you don’t take the required action, for example, pay the fine or your visa will be cancelled. This type of scam is often targeted at students, especially international students.

Scammers pretend to be from a legitimate business or organisation to steal your bank details, personal information, or to trick you into downloading a virus onto your computer.

Often scammers pretend to be from:

  • a bank or other financial institution
  • a government or immigration department 
  • a real estate agent regarding a rental property.
  • the Australian police
  • The University of Queensland.

What to look out for

    • Requests asking you to verify your personal details or update your password.
    • Correspondence that doesn't address you by name and may contain spelling or grammatical errors
    • The contact or URL may not be legitimate

    Scammers may ask for you to:

    • send personal details, bank account or credit card details
    • send money to a third party
    • pay additional student fees
    • pay additional money for your visa
    • pay rent to someone other than your landlord.

    Scammers may threaten you with the following consequences if the payment is not made or the information is not provided:

    • Your visa will be cancelled
    • Your university enrolment will be cancelled
    • You will be deported
    • You will be arrested
    • You will be evicted.

    International students in particular can be targeted. They are told they will be in trouble over a certain matter and to pay the scammer to avoid shame or possible disciplinary action.

    How can you protect yourself?

    • Never give out your personal details to someone whose legitimacy can't be verified. If a bank or other organisation contacts you and asks you to verify yourself over the phone and provide a password, end the call and phone the organisation back using the number from their website to check the legitimacy of the request. 
    • Do not click on a link in a text or email claiming to be from a bank or other organisation as it may take you to a fake site which may steal your personal information. 
    • Understand that government agencies, banks and other large organisations would not threaten you or ask you to pay a fine over the phone. If you receive a call of this nature hang up immediately.
    • A government agency or legitimate organisation would not ask you to pay by unusual methods such as by gift or store cards, iTunes vouchers, wire transfers or bitcoins.
    • Do not respond to emails or text messages that threaten you. If you are concerned for your safety, contact the police.
    • Never send money or give bank details to anyone you don’t know or trust.

    What to do if you have (or think you have) fallen victim?

    Work devices

    Personal devices

    • If you have entered login credentials, change your password immediately. If you have used that password across multiple accounts, ensure you change your password for each account. See Use Secure Passwords for more information.
    • If you have entered your credit card or account details, contact your financial institution immediately.
    • Notify your friends, family and online contacts to use caution if they receive communications from you.
    • Enable multi-factor authentication (MFA) which requires a code to be entered, on all accounts where possible. See MFA for more information.
    • Report the scam to the ACSC (Australian Cyber Security Centre) who may be able to assist you.
    • Report the scam to the ACCC Scamwatch. This helps warn others about current scams and disrupts scams where possible. Please note they are unable to assist you in recovering funds or finding the scammer.
    • If your personal information has been put at risk, contact IDCare for support.