21 November 2018

What’s happened?
Watch out for fake SMS text messages pretending to be from Medicare. These are phishing messages that encourage you to click through to a website and provide personal information to claim a rebate.
These fake messages are being sent out in large numbers and are trying to steal your sensitive personal details and use them for malicious purposes.

Does it affect me?
Anyone could receive these SMS messages.

How do I stay safe?
SMS continues to be a popular method for criminals hoping to trick you into handing over your money or personal information.
There are some simple steps you can take to avoid an email scam:
  • Do not click on links in emails or text messages claiming to be from myGov or Medicare. myGov will never send you a text, email or attachment with hyperlinks or web addresses.
  • Don’t open messages if you don’t know the sender, or if you’re not expecting them.
  • Be suspicious of messages that aren’t addressed directly to you, or don’t use your correct name.
  • Login to your official myGov account by typing the web address my.gov.au into your browser to check your inbox for any legitimate emails from Medicare. Check that // appears at the beginning of the address bar when you land on the site.
  • You can also contact Medicare separately to check if they have sent the message.
If you are concerned that your personal information has been compromised and misused, you can contact Australia’s National Identity and Cyber Support Service, IDCare or use their free Cyber First Aid Kit.
If you have been a victim of a cybercrime such as fraud, report it to the Australian Cybercrime Online Reporting Network (ACORN).

More information
Read more about how to protect yourself from SMS phishing scams

The information provided here is of a general nature. Everyone’s circumstances are different. If you require specific advice you should contact your local technical support provider.
Feedback
Thank you to those subscribers who have provided feedback to our Alerts and Newsletters. We are very interested in your feedback and where possible take on board your suggestions or requests.

Disclaimer
This information has been prepared by the Australian Cyber Security Centre (‘the ACSC’). It was accurate and up to date at the time of publishing.
This information is general information only and is intended for use by private individuals and small to medium sized businesses. If you are concerned about a specific cyber security issue you should seek professional advice.
The Commonwealth and all other persons associated with this advisory accept no liability for any damage, loss or expense incurred as a result of the provision of this information, whether by way of negligence or otherwise.
Nothing in this information (including the listing of a person or organisation or links to other web sites) should be taken as an endorsement of a particular product or service.
Please note that third party views or recommendations included in this information do not reflect the views of the Commonwealth, or indicate its commitment to a particular course of action. The Commonwealth also cannot verify the accuracy of any third party material included in this information.