Latest fraud and scam alerts

Latest scam alerts

Qantas cyber incident update - July 2025 

NAB is aware of a cyber incident involving Qantas that has exposed some Qantas customer information including, names, email addresses, and phone numbers. If you have been impacted, please be on alert for an increased chance of being targeted by phishing messages.

What you can do

The exposed personal information can lead to higher risk of targeted phishing and social engineering campaigns, or attempted access to accounts.

• Be alert for unexpected phone calls, texts, or emails appearing to come from Qantas. Criminals regularly impersonate brands (called spoofing) and may have additional information from this incident to appear legitimate.
• Please report any phishing to the respective business they are impersonating
• If in doubt about the legitimacy of a contact, don’t action anything, and contact the organisation back through an official channel.

• You can keep updated on the Qantas incident via Information for customers on cyber incident, opens in new window

If you have received this type of email or text message and have transferred money or provided information, contact us on 13 22 65  or  visit your nearest NAB branch, opens in new window immediately.

NAB-branded scam emails and text messages - June 2025 

NAB is aware Australians are receiving scam text messages and emails claiming to be from senders such as “NAB”, “NAB’s Resolve Team” or “NAB Rewards” saying there’s an issue with their account, there is a new transaction or direct debit, or NAB Rewards points will be expiring.

Do not agree to transfer any money or provide any information.

• The email or text message may say there has been an unusual sign in or transaction, or that the phone number on your account has been updated. The message may ask you to call “NAB” on a phone number if you didn’t sign in or make this update or transaction. In another scenario, the message might say you have NAB Rewards points that are expiring soon, and ask you to reply to the message or click a link.
• Do not respond or click on any links in the SMS or email, as they will likely lead to a fake NAB site designed to steal customer information.
• You may be asked to transfer money to a “safe account”. NAB will never ask you to transfer money to another account to keep it safe – it’s safe where it is. 
• If you’re unsure whether a call or text message is legitimate, don’t provide any information or transfer money. Contact us directly on the number on the back of your NAB card. NAB will not send unexpected text messages with links in them.

If you have received this type of email or text message, please report it to phish@nab.com.au.

If you have received this type of email or text message and have transferred money or provided information, contact us on 13 22 65  or  visit your nearest NAB branch, opens in new window immediately.

Update on compromised passwords in the media - July 2025

You may have seen reports in the media, opens in new window regarding published lists of compromised username and password combinations, including for sites such as Facebook, Google and Apple. NAB colleague or customer systems have not been compromised and remain secure.

Media sources are reporting that large databases have been found by security researchers which contain credentials collected across multiple online platforms. This does not appear to be a data breach of one platform in particular. Instead, it appears to be information collected from multiple sources, including malicious software.

Internet users, including some NAB customers, may have downloaded malicious software onto their computers or phones, which has collected information like their usernames and passwords for some websites, from their devices. This type of malware is known as an “infostealer”. Criminals may then post these details for sale on the dark web.

NAB monitors for customer account details that have been exposed online, and, if we spot something suspicious, we take action to protect customers. We'll let customers know if suspicious activity is detected on their account.

How do I know if there's malicious software on my device?

Signs you might have malware on your device can include devices running unusually slow, crashing or new unexpected applications or icons appearing. If you think there’s malicious software on your device, run an anti-virus scan or consult an IT professional for further advice.

You can help protect your devices and accounts by:

• Using unique and complex passwords for each of your online accounts and changing them periodically. Read more here: Create good password management habits - NAB, opens in new window
• Turning on multi-factor authentication wherever possible to add an extra layer of security. Learn more here: The benefits of Multi-Factor Authentication - NAB, opens in new window
• Only downloading apps from the genuine Apple App and Google Play Stores
• Looking out for suspicious messages and not clicking on links/attachments
• Turning on automatic updates to protect your devices and having up-to-date anti-virus software.
• Keep an eye on your bank accounts for suspicious activity and contact your bank immediately if you’re concerned or notice unauthorised transactions.

Read more about malware here: Malware | easy ways to protect your computer - NAB, opens in new window  on the Federal Government’s Cyber website: How to protect yourself from malware | Cyber.gov.au, opens in new window.

Please report any suspicious messages or calls to phish@nab.com.au or to 047 622 0003 (047 NAB 0003.) 

For more information and to see the latest security alerts, visit nab.com.au/securityalerts, opens in new window.

Reports of stolen shares – July 2025

ASIC has advised that Australians are currently being targeted by criminals impersonating individuals to steal their shares.

How are criminals stealing shares?

In an example, a criminal claiming to be ‘John Citizen’ creates a share trading account to sell shares owned by the real John Citizen.

The criminal uses stolen ID documents, as well as illegally obtained CHESS and Issuer Sponsored Holding Statements, to open the fraudulent account and then transfer the shares into that account. These documents could be stolen as the result of a third-party data breach or mail theft from letter boxes.

Tips to reduce the risk of share theft

• Regularly review your share portfolio(s), so that you can act quickly if you see something wrong. Ensure your contact details are up to date with your stockbroker, share registry and financial service provider.

• Lock and regularly check your letterbox to prevent mail theft.

• Create strong, unique passwords for your online accounts.

• Turn on multi-factor authentication for your online accounts, where possible.

For more information, please see ASIC’s Alert: Investor alert: Reports of stolen shares due to identity theft on the rise | ASIC, opens in new window, opens in new window

If you’re a nabtrade customer and believe that you have lost shares due to this issue, contact us on 13 13 80 (or if calling from overseas +61 3 8903 9991).

Card and PIN collection scams - April 2025

Australians are currently being targeted by criminals posing as a bank, IT company, payment service, Government agency or telecommunications provider. The caller may claim that your bank accounts or computer aren’t secure and your money isn’t safe, and ask you to provide your bank card and PIN.

How do they work?

• You may receive a phone call or see a pop-up message on your phone or computer stating there’s an issue with your device or account
•  You’ll be asked to share your PIN, and told to leave your bank card in your letterbox so it can be “cancelled and replaced”
• You may be asked to withdraw cash and leave it in your letterbox, or they may state they need to pick the cash up from you directly

Do not share your card or PIN with unsolicited callers.

NAB will never ask you to:

• Disclose your PIN or full card details
• Leave your bank card out to be collected
• Withdraw cash from your account, so it can be “checked”
• Transfer money to another account to keep it secure

If you have received this type of contact, please report it to phish@nab.com.au

If you believe that you have been scammed, contact us on 13 22 65 or visit your nearest NAB branch, opens in new window, opens in new window immediately. 

NAB-branded emails and flash SMS messages targeting customers – March 2025

NAB is aware of phishing emails and flash SMS messages attempting to impersonate “NAB” or “NAB’s Fraud team”. The email or message may state unusual activity has been detected on your account and to call a phone number to “ensure the safety of your account”.

A Flash SMS is a temporary text message that appears directly on a phone screen, even if locked. It disappears unless saved to your message inbox or screen grabbed.

NAB does not use flash pop-up messages to contact customers.

Do not call the number, agree to transfer any money, or provide any information.

If you’re unsure whether an email or message is legitimate, don’t provide any information or transfer money. Contact us directly on the number on the back of your NAB card.

If you have received this email or SMS message, please report it to phish@nab.com.au.

If you have received this message and have transferred money or provided information, contact us on 13 22 65 or visit your nearest NAB branch, opens in new window immediately. 

Fake gambling websites targeting Australians– February 2025

Australians are currently being targeted by fake online gambling sites. 

Common red flags:

• You might see an ad on social media or be referred by a friend to online gambling sites

• You might be asked to pay for credits by transferring money through a PayID® (that changes regularly) or by paying on credit card on the site

• You will usually lose the money you’ve deposited and be encouraged to deposit more, with bonus credits being offered 

• You may receive bonus credit or payments for joining, or referring family and friends to the site

• The site is not well-known

The Australian Communications and Media Authority (ACMA) has more information about protecting yourself from illegal gambling websites, including a list of blocked sites and how to report illegal gambling sites: Protect yourself from illegal gambling operators, opens in new window. 

If you need help with gambling, please visit Gambling Help Online., opens in new window

If you believe that you have lost money to a gambling scam, contact us on 13 22 65 or visit your nearest NAB branch immediately. 

Customers getting security notification that their password has been compromised - January 2025

Summary
When trying to sign in to the NAB app or Internet Banking, customers may see a notification on their Apple smartphone that their password has been compromised in a data breach and needs to be changed.

Please be aware this notification is a new feature from Apple’s Passwords app, not from NAB.

You may see this if you’ve saved your NAB Internet Banking password in the Apple Passwords App (or Keychain). It is alerting you that your saved password has appeared on a list of exposed passwords; it does not mean your own NAB account has been compromised.

A screenshot of the message from Apple Passwords that might pop up when customers try to log in to the NAB app/Internet Banking is below. Please note, other password manager accounts also send these notifications.

Action required

While this notification doesn’t mean your own NAB account has been compromised, if you see this message, you should update your NAB Internet Banking password to a complex unique password (which is not used elsewhere). There is information available at nab.com.au/passwordsecurity, opens in new window on best practice passwords.

For more information, you can read this article about Apple’s compromised passwords notification feature, opens in new window.

Job Offer and Employment scams -December 2024

NAB is aware of employment scams targeting the community.

How do they work?

• Criminals can offer jobs that pay very well with low effort however, these jobs often don’t exist.
• Criminals pretend to be hiring on behalf of high-profile companies and online shopping platforms and impersonate well-known recruitment agencies.
• Their goal is to steal your money and your identity details. Criminals will often direct you to either pay money to receive a ‘guaranteed payment’, promote items online, or download suspicious applications to your device.
• Be suspicious if a role is offered to you without an interview or discussion about your experience, suitability and references.
• Stop and check any job offers that seem too lucrative to be true. Research the recruiter and the business or individual offering the position. Contact the recruitment agency via phone numbers sourced from an independent internet search.
• If you believe you have been involved in an employment scam, please reach out to ReportCyber, opens in new window.

If you believe you have lost money to an employment scam, contact us on 13 22 65 or visit your nearest NAB branch immediately. 

Remote access scams targeting NAB Business customers – November 2024

Australians are currently being targeted by criminals posing as a bank or other well-known organisations (including the NBN, a telecommunications provider or technology company) requesting remote access to your devices to remove “viruses” or “fix an issue”.

• Criminals may call you pretending to work for a bank or other business regarding a “virus” or “issue”. They’ll request remote access to your devices, which may involve downloading “special software”.
• Alternatively, you may receive an email stating you’ll receive a call soon regarding a similar issue.
• Do not provide remote access to any unsolicited callers, as this may give criminals access to information on your device or access to your banking.
• If in doubt whether an issue is legitimate, call your banker or the number on NAB’s website.
• Learn more at nab.com.au/remoteaccessscams

If you believe that you have lost money to a business impersonation scam or investment scam, contact us on 13 22 65 or visit your nearest NAB branch immediately.