Alerts

Fake Bendigo email scam - “Payment approval needed”

Scammers are targeting Bendigo Bank customers via email.  These emails include Bendigo Bank images and branding and are asking recipients about a recent payment. The email provides instructions to call a fake call centre if they did not make this payment. 

Always remember:

• We will never ask you to move your funds to a ‘safe account’;
• Never provide your 6-digit Internet Banking security code to anyone - in person, over the phone or online even if they claim to work for your bank and have personal information about you'
• Never provide a caller with remote access to your computer;
• We will never ask you for your Internet Banking PIN, Internet Banking password or 6-digit Internet Banking security code;
• We will never ask you to login to Internet Banking via a link sent in an SMS or sent in an email;
• We may call from time to time and ask to verify your identity by asking for your verbal password. However, we will never ask you for any PIN, password or security code relating to your Internet Banking. If you feel uncomfortable, you can always verify our branch contact details on our website and call us back.
• If you ever feel uncomfortable, or not sure about a call, please hang up and call us on 1300 236 344.

If you have received a phishing email, report this to phishing@bendigoadelaide.com.au.  

Bank impersonation scams

Scammers are using technology to trick their victims, by making the call appear to come from the Bank’s legitimate phone number of +613 5445 0666, or by sending a text that appears in the same conversation thread as genuine bank messages.

Communications often have a sense of urgency to them, such as fraudulent activity raising red flags, or a frozen account.

Remember:

• We will never ask you to move your funds to a ‘safe account’;
• Never provide your 6-digit Internet Banking security code to anyone - in person, over the phone or online even if they claim to work for your bank and have personal information about you'
• Never provide a caller with remote access to your computer;
• We will never ask you for your Internet Banking PIN, Internet Banking password or 6-digit Internet Banking security code;
• We will never ask you to login to Internet Banking via a link sent in an SMS or sent in an email;
• We may call from time to time and ask to verify your identity by asking for your verbal password. However, we will never ask you for any PIN, password or security code relating to your Internet Banking. If you feel uncomfortable, you can always verify our branch contact details on our website and call us back.
• If you ever feel uncomfortable, or not sure about a call, please hang up and call us on 1300 236 344.

Learn more about how to spot a scam.

Cold calling scams

Bendigo Bank business and personal customers are continuing to being targeted by scammers.

The scammers are posing as bank staff, including Bendigo Bank, and are convincing with information they have.

More recently they:

• Have British/UK accents;
  Alert you to unauthorised transactions made from your accounts and banking products, which haven’t occurred;
• Provide information that seems real to get you to provide your e-banking PIN, password or 6-digit security code;
• Are requesting remote access to your computer to 'fix' problems;
• Ask you to download programs to your computer;
• Request that you transfer money into another ‘safe’ account.

These are all signs the person is a scammer, and you should hang up and call us on 1300 236 344.

Remote Access Scam

We are aware of a remote access scam where scammers are contacting customers via phone, SMS or email and requesting them to download software either to their computer or mobile device. 

The scammers may pose as the Bank or as many other businesses and often offer to assist with refunds or resolve technical issues.  Legitimate businesses will never ask you to download any software such as TeamViewer, AnyDesk.

Always remember:

• Never provide a caller with remote access to your computer.
• Never provide your 6-digit e-banking security code to anyone - in person, over the phone or online even if they claim to work for the bank and have personal information about you.
• If you feel uncomfortable, you can always verify our contact details on our website and call us back.

Cold calling scams - call line identification overstamping

Scammers are calling customers and appearing to be calling from within Australia.

They use a system called ‘call line identification overstamping’ (CLI overstamping). This is what makes the call appear to be operating within Australia, but they are not.

They are convincing with apparent previous knowledge of the customer. This is falsified information and they generally engineer the call to appear to be from the Bank's fraud or cyber security team.

Sometimes an SMS alert is also sent prior to the call that seemingly look like they are from Bendigo Bank. This is achieved using another method known as ‘alpha tags’ to make messages appear in a thread of legitimate messages from us. Unfortunately, there is currently no feasible way to intervene or prevent this from occurring.

Please check our things to remember and cold calling scams to protect yourself whenever you receive a call from anyone saying they are from the Bank.

Latitude data breach

A recent cyber-attack on Latitude Financial has resulted in the theft of personal information of customers, past customers and applicants across Australia and New Zealand.

Visit ID Care for more information about the breach.

A reminder to Bendigo Bank customers

• Never provide your 6-digit e-banking security code to anyone - in person, over the phone or online even if they claim to work for your bank and have personal information about you.
• Never provide a caller with remote access to your computer.
• We will never ask you for your e-banking PIN, e-banking password or 6-digit e-banking security code.
• We will never ask you to login to e-banking via a link sent in an SMS or sent in an email.
• We may call from time to time and ask to verify your identity by asking for your verbal password. However, we will never ask you for any PIN, password or security code relating to your e-banking. If you feel uncomfortable, you can always verify our branch contact details on our website and call us back.

If you have any concerns or have been a victim of an ID fraud www.idcare.org/contact/get-help is a free service offering expert help and support.

Latest alert - February 2023

Please be aware that criminals are currently promoting malicious links through search engines such as Google and Bing etc.

These malicious links can appear at the top of internet search results as Ad links with links similar to the real Bendigo Bank website address.

Please ensure you double-check any links in search results before clicking on them.

Below are two examples of malicious search engine Ad links.

Alert - January 2023

Scammers continue to pose as members from our fraud team and may call or send a SMS indicating you have been exposed to fraud or that your internet banking has been compromised or hacked.

In reports, scammers are requesting personal information such as your 6-digit security code, PIN or password. If you are asked this is a scam and hang up immediately.

In some reports, scammers are asking you to transfer money into another bank account. This is to trick you into giving away your personal information or money.

This is a scam.

Remember to always be cautious when giving out personal information or sending money online and follow our guidance to protect yourself.

Alert - December 2022

We have been made aware that scammers are posing as members from our Fraud Team. We have also had reports that scammers are posing as Bendigo Bank staff.

Scammers may call or send a SMS indicating you have been exposed to fraud or that your internet banking has been compromised or hacked.

They may also advise your funds have been placed "on hold".

In some instances we have received reports that scammers have even replicated our phone IVR options with one voice prompt linking to the "Fraud Department".

We have also received reports of customers receiving scam emails. The emails appear to come from Bendigo Bank asking customers to urgently call a phone number to address irregular activity against their bank account.

This is a scam.

Bendigo Bank will never request personal information such as your Pin/Password or ask you to login to online services from an email or SMS.

Before contacting Bendigo Bank please verify contact details against those published on our Contact us page.

Here are some other ways to protect yourself:

• Never provide your 6-digit e-banking security code to anyone - in person, over the phone or online even if they claim to work for your bank and have personal information about you.
• Never provide a caller with remote access to your computer.
• We will never ask you for your e-banking PIN, e-banking password or 6-digit e-banking security code.
• We will never ask you to login to e-banking via a link sent in an SMS or sent in an email.
• We may call from time to time and ask to verify your identity by asking for your verbal password. However, we will never ask you for any PIN, password or security code relating to your e-banking. If you feel uncomfortable, you can always verify our branch contact details on our website and call us back.

Latest alert - November 2022

Bendigo Bank has received reports of customers receiving scam emails. The emails appear to come from Bendigo Bank asking customers to urgently call a phone number due to irregular activity with their bank account.

This is a scam and the phone number is not a valid bank phone number.
Before contacting Bendigo Bank please verify contact details against those published on our Contact us page.

Here are some other ways to recognize a phishing email:

• Spelling and grammar – Look out for poor spelling and bad grammar within messages.
• Urgent call to action or threats - Be especially cautious if messages threaten you to take a suggested action.
• Mismatched email sender – Verify the sender is who you think it is by carefully checking the senders real email address.

Previous alert - September 2022

Bendigo Bank will never ask you to click on a link in an SMS text message to login to e-banking. Do not click on the link.

We are aware of a SMS phishing campaign targeting Bendigo Bank customers. The messages claim to be from Bendigo Bank and include a website link. The link leads to a fake Bendigo Bank website asking you to login to e-banking.

What to do if you have received this type of SMS text message

Please forward it to 0429 557 997 or take a screenshot and email it to phishing@bendigoadelaide.com.au and then delete the SMS text message. Please be aware you will not receive a personal response for any SMS text messages sent.

What to do if you clicked on the link and entered your details

If you have received this type of SMS text message and have clicked on the link and entered your e-banking details, please contact your local branch or call 1300 236 344 immediately.

Latest alert - July 2022

SMS phishing

We are aware of a current SMS phishing campaign targeting Bendigo Bank customers. The messages claim to be from Bendigo Bank stating that a payment has been attempted or your contact details have been updated in e-banking and to click on a link if this was not you. The link leads to a fake Bendigo Bank website asking you to login to e-banking.

Do not click on the link. Bendigo Bank will never ask you to confirm, update or disclose e-banking information via a link in an SMS text message.

What to do if you have received this type of SMS text message

Please forward it to 0429 557 997 or take a screenshot and email it to phishing@bendigoadelaide.com.au and then delete the SMS text message. Please be aware you will not receive a personal response for any SMS text messages sent.

What to do if you clicked on the link and entered your details

If you have received this type of SMS text message and have clicked on the link and entered your e-banking details, please contact your local branch or call 1300 236 344 immediately.

Example messages:

Previous alert - 14 January 2022

Phishing Scam Alert

Please be alert to any unsolicited SMS or Emails claiming to be from Bendigo Bank. Any SMS/Phishing Scam should be deleted immediately. If in doubt, attend your local branch or independently call 1300 236 344 to verify the legitimacy of the message received.

Any customer that has suffered a financial loss from cybercrime are encouraged to report at www.cyber.gov.au/report.