Commonwealth Bank ‘New Message Notification’ Phishing Scam
The original site is no longer online; links go to the Internet Archive copy.
The claim
Email purporting to be from Australia’s Commonwealth Bank claims that you have a new Internet Banking message.
What the fact-checkers found
The email is not from the Commonwealth Bank. Clicking the ‘Log On’ button included in the message opens a fraudulent website designed to steal your bank login credentials.
According to this ‘New Message Notification’ email, which claims to be from Australia’s Commonwealth Bank, you can click a Log On button to access a ‘new Internet Banking Message’. The email features the Commonwealth Bank logo along with a copyright notice in the footer.
However, the email is certainly not from the Commonwealth Bank. If you click the Log On button, you will be taken to a fraudulent website that has been built to closely mirror the bank’s genuine home page. After you enter your login details on the bogus website, you will be automatically redirected to the real Commonwealth Bank website.
Meanwhile, cybercriminals can collect the details you submitted on the scam website and use them to hijack your account. Once they have gained access to your account, they can transfer your funds to other accounts and conduct other fraudulent transactions.
Phishing scams like this one are very common. Be wary of any email that tries to get you to click a link or open an attached file to view a message, rectify a supposed account issue, or update your details. It is always safest to access all of your online accounts by entering the account address into your browser’s address bar or via a legitimate account app.
The security section of the Commonwealth Bank website has information about staying safe online and reporting scam attempts like this one.
Got a similar message?
Paste it into the detector and see whether it matches a known hoax.
Check a similar messageRelated fact-checks
Browse the archive →AOL ‘Billing Update Must be Performed’ Phishing Scam
The message is not from AOL. In fact, the email is a phishing scam designed to trick recipients into providing personal and financial details to Internet criminals.
ANZ ‘Service Has Been Limited’ Phishing Scam
The email is not from ANZ. It is a phishing scam designed to steal you account login details and your credit card numbers. According to this email, which purports to be from the Australian and New Zealand Banking Group (ANZ), your Internet banking service has…
Westpac ‘3 Incorrect Logins’ Phishing Scam
The email is not from Westpac. The message is a phishing scam designed to trick recipients into divulging their personal and financial information to cybercriminals.
‘Attempt to Deposit Your Tax Refund Failed’ Phishing Scam Email
The email is not from HMRC and the claim that a refund payment has failed is untrue. The email is a phishing scam designed to steal your personal and financial information via a fraudulent website.