Identify and report threats

Whether you’re setting up a new account, shopping online or doing some mobile banking on-the-go, it’s important you know how to identify potential threats.

Know what to look for

While hoaxes, phishing efforts and scams are becoming more sophisticated, they still leave clues behind to help you identify them. Each threat will be slightly different, but there are some clear warning signs to look for when scammers are trying to target you:

  • If it’s a written communication, such as an email or SMS, it may feature poor grammar and spelling (although sometimes it could be grammatically perfect!).
  • Phishing efforts will often try and replicate the appearance of Suncorp Bank’s branding and colours. If something isn’t formatted consistently or the colours/artwork appears off, it may be a phishing attempt.
  • The email address won’t appear quite right (e.g. scammers may send you communications to appear like official Suncorp Bank messages such as
  • Links to web addresses may look different to what you’re used to (e.g. the web address may be missing the secure ‘https://’ at the beginning).
  • Phone calls or text messages with urgent appeals for help or your personal details (e.g. credit card or account numbers, PINs or passwords).
  • Someone calls to ‘fix’ your computer without you organising it or recognising the service.
  • Your computer starts to run very slow. This could be due to malware or malicious software, including computer viruses, worms, Trojan horses and spyware.
  • The look of your computer has changed and/or opens websites automatically that you don’t normally visit.
  • If you receive a bill online, check to ensure the account details you are paying are correct.

If you receive an email from a regular payee advising their account details have changed, be sure to confirm the change with them verbally (e.g. by phone). Also be sure to compare account details inside invoices received via email (eg. PDF) against the previous known account details for that payee.

The most important thing to remember is that we’ll never send you text messages or emails to verify details or reset your account password. We’ll also never call you and ask for payment when helping you secure your banking or ask you to ‘Log in to Internet Banking’ through an email.

Know how to respond: Quick do’s and don’ts

If you have encountered something suspicious, knowing what to do next can be overwhelming. There’s some simple do’s and don’ts to follow when you suspect you’ve been a victim of a scam.


  • Think before you click – it could save you a lot trouble. If you aren’t sure a message appearing to be from Suncorp Bank is genuine, you can forward it directly to us at
  • Manually type in the URL (web address) rather than click on a link in an email.
  • Check for a secure padlock in the web address. This means the website is secure.
  • Know your rights – the ACCC website can provide more details on your consumer rights under Australian law.
  • Report it – you could save others from falling victim to the scam as well. You can contact us for help or reach out to SCAMWATCH to report it as well.
  • Remember, if it sounds too good to be true, it’s probably a scam.
  • Read through our Scam Fact Sheet in detail.


  • Respond to communications asking for personal information.
  • Click directly on any links in suspicious emails or texts.
  • Send money, gift cards or give credit card details, online account details or personal information to anyone you don’t know or trust.
  • Access mobile banking via open public Wi-Fi (where possible).

If you do suspect you’ve been a victim of fraud or a scam in relation to your Suncorp banking, please contact us immediately.