Money and identity thieves step up phone scams: how to fight back

The latest government data shows scams targeting smartphones have soared, but there are ways to outsmart the criminals.

Scammers are targeting Australians’ mobile phones more than ever before.

Great news! My application has been accepted!

And I’ve starred in a video online!

And my package is on its way and should arrive soon, even though I haven’t ordered anything!

All of these text messages have popped up on my phone in the past week, all unsolicited, and all almost certainly scams that will infect it with a virus that tries to steel my money or identity.

There has been an explosion in scammers targeting peoples’ smartphones, just as we become more reliant on them than ever before.

Shopping, banking, Covid check-ins, entertainment, emails all now take place in the palms of our hands, making phones of our most important personal items but also sadly one of the easiest targets for scammers.

Anyone who clicks without thinking when receiving an unsolicited message might as well walk around with hundreds of $50 notes stapled their clothes and invite anyone to grab them.

The latest ACCC Scamwatch.gov.au data shows phone and text scams were by far the biggest threat to consumers in 2021, with more than 210,000 reported and more than $111 million lost.

Scammers’ favourite attack method is phishing, where they try to trick you into giving out personal information such as bank account numbers, passwords and credit card details.

Scammers who break into phones can steal your passwords or lock you out for a ransom.

Others invite you to click on a link in a text or email, and that link can download a virus that accesses your files or locks you out unless you pay a ransom.

Cybersecurity specialists live this stuff and have some handy tips for everyday Aussies to protect themselves. Here are a few starters.

TRUST NOBODY

Any unsolicited text message or email received on your phone should be treated as suspicious, even if it apparently comes from a reputable source such as your bank, the ATO or other government agencies. Scammers usually pretend to be someone important, but the real authorities will never ask for personal details through an unsolicited message.

KEEP QUIET

Do not give out bank, credit card or other personal details if you receive a call claiming to be from your bank, another organisation or the government.

Scamwatch says: “instead, ask for their name and contact number and make an independent check with the organisation in question before calling back”.

STRONG PASSWORDS

The most common password on mobile phones is 123456, according to US data, and it was used by 3.5 million people last year.

The next most common password is Password, proving that people are frighteningly carefree about being scammed.

It’s not hard to choose a password that people will find hard to crack, and cybersecurity specialists say don’t use the same password for multiple devices or accounts. Some recommend using a password manager tool to keep track of our growing list of logins.

Always use two-factor authentication where you can, as this sends a code to your phone and adds an extra layer of protection.

FIGHT FLUBOT

Flubot is malicious software that started targeting Android phones in August 2021.

It’s installed on your phone if you tap a link in a text that may ask you to organise a parcel delivery time, check photos or hear a message. Once installed Flubot can access your messages, personal details, accounts and passwords.

It doesn’t infect iPhones but similar malicious software does and can damage your Apple device.