ACCC’s Scamwatch warns of new COVID tracing scam, steals banking details

Authorities have warned of a new COVID tracing scam that is capable of stealing Queenslanders details, including downloading a “banking credential stealing virus” to certain devices. SEE HOW TO STAY SAFE.

Queenslanders have been told to stay on alert after a new government COVID-19 tracing scam hit Australian phones this week in attempts to steal bank details.

The Australian Competition and Consumer Commission (ACCC) issued a warning Wednesday urging anyone who receives a text message claiming to be from a Government source called “COVIDFree”, to delete it immediately.

Scammers have used the coronavirus pandemic to defraud people out of millions of dollars

Coronavirus vaccine scam: Companies fined $500k

In August, the ACCC reported more than 4000 novel coronavirus-related scams had already led to the theft of more than $3.3 million from Australians, including one instance where scammers pretended to be Federal Health Minister Greg Hunt and falsely offered recipients to purchase COVID-19 support packages.

More than 4000 coronavirus, or COVID-19-related scams have led to the theft of more than $3.3 million from Australians, including one instance where scammers pretended to be Federal Health Minister Greg Hunt. Picture: Supplied

Posting to Twitter yesterday, ACCC’s Scamwatch showed an example of one of the new messages being spread around, appearing to be a government message telling the recipient a COVID case was nearby – prompting them to open a map via a non-government URL.
“We’ve detected a possible COVID-19 case near your neighbourhood. Check the maps to find out the most dangerous places to avoid tomorrow,” the message states.

Beware of the latest #COVID19 themed government impersonation scam. If you receive this text, don't click the link, just delete it. Not sure if a text is legitimate? Contact the relevant agency using details you’ve sourced yourself or visit the official website via your browser. pic.twitter.com/SoetaiD6Xb

— Scamwatch_gov_au (@Scamwatch_gov) September 23, 2020

An ACCC spokesman told the Courier-Mail that Scamwatch has already received 17 reports of the scam since Tuesday night, with the contained URL leading to a website that on Android devices “automatically started the download of a banking credential stealing virus.”
Users who visited the address on a iPhone or a computer appeared to be unaffected, with them being sent through to the Bing.com COVID-19 Tracker for Australia.

“Android users who went to this website should delete the file titled ‘Flash_Player.apk’ which may have been downloaded to their phone,” the spokesman said.

Queenslanders have been told to stay on alert after a new COVID tracing scam hit Australian phones this week. Picture: Supplied

“Android users who ran this file should have their phone professionally cleaned as soon as possible, and not use it for anything personal or sensitive (e.g. online banking) in the meantime.
“Not sure if a text is legitimate? Contact the relevant agency using details you’ve sourced yourself or visit the official website via your browser,” he said.

Tips for identifying and protecting yourself against potential scam messages

• Don’t click on links in text, social media messages or emails, even if it appears to come from a trusted source.

• Go directly to the website through your browser. For example, to reach the MyGov website type ‘my.gov.au’ into your browser yourself.

• Never respond to unsolicited messages and calls that ask for personal or financial details, even if they claim to be a from a reputable organisation or government authority — just press delete or hang up.