New variation of the bank impersonation scam detected

Posted by: ozscamwatchers

We have observed a new variation of the bank impersonation scam where an SMS, appearing to be from ANZ, is sent to customers advising them to expect a call from ANZ relating to "transaction issues".

During the call, customers are prompted to click on a link, provided in another SMS, to assist in resolving these issues. This link leads to a fake ANZ website with a button to begin "ANZ Live Chat". This website may look very convincing. If the customer clicks on the button, software will be downloaded on the customer's device providing the scammer remote access to the device.

The scammer (still impersonating an ANZ employee), will ask the victim to log into their Internet Banking, allowing the scammer to capture the customer's login credentials. The scammer may also take over the session and perform transactions or ask the customer to transfer their money into a "safe" account.

For example:

Remember, ANZ will never ask you:

• to click on a link to log in to ANZ Internet Banking or the ANZ App
• to provide remote access to your computer or phone
• for sensitive banking details (like passwords, PINs, one-time passcodes for payment, Shield codes, token codes)
• to transfer money to another account

If you've received and responded to a message that you now believe is a scam, have shared your banking details, or you're concerned your personal details have been compromised, contact ANZ immediately.

You can also report scams to Scamwatch. For more information on how to protect yourself online, please visit the ANZ Security Centre.

(Source: ANZ Bank Latest Security Pages)