🇦🇺 Real Australian Examples

Spot the Scam —
Can You Tell the Difference?

Real examples of scam SMS messages, fake links, and manipulated images circulating in Australia right now — with a plain-English breakdown of every red flag.

$2.74B Lost to scams in Australia (2023)
#1 ATO & AusPost — most impersonated brands
3 sec Time OziShield takes to flag a scam
The examples below are based on real scam patterns reported in Australia. Sender names, links, and message text have been reconstructed for educational purposes — not copied verbatim. Each example shows you exactly what OziShield looks for, so you can start spotting these yourself.
Example 1 — A Legitimate Link

Before we show you scams, here's what a real, safe government link looks like.

✅ Legitimate Government Link SAFE
What you'd receive
ATO
Your tax return has been processed. View your notice of assessment at:

my.gov.au/ato/login
URL Check
🔒 https://www.ato.gov.au
OziShield Signals
✓ .gov.au domain ✓ Valid SSL ✓ No redirect ✓ No urgency language
Why this is safe
1
Official .gov.au domain — Australian government websites always use .gov.au. This cannot be registered by private individuals without verification.
2
No pressure or urgency — Legitimate organisations don't threaten consequences or demand immediate action in SMS messages.
3
No personal information requested — The ATO never asks for your TFN, bank details, or passwords via SMS.
4
Directs to myGov — All ATO communications go through myGov, not random external links.
✅ OziShield Verdict: Likely Safe No red flags detected
💡
Pro tip: Never click the link in a message — always go directly to my.gov.au or ato.gov.au by typing it yourself in your browser. That way you're guaranteed to land on the real site.
Example 2 — Fake AusPost Delivery SMS

One of the most common scams in Australia. Millions of these are sent every month.

🚨 AusPost Impersonation Scam HIGH RISK
What you'd receive
AusPost
Your parcel could not be delivered due to an incorrect address. A re-delivery fee of $3.50 is required within 24 hours or your parcel will be returned.

auspost-delivery-update.com/redeliver?id=AU82941
URL Analysis
⚠️ auspost-delivery-update.com
OziShield Signals
✗ Fake domain ✗ Urgency language ✗ Payment requested ✗ Random ID in URL ✗ Not auspost.com.au
🚩 Red Flags Detected
1
Fake domain — not auspost.com.au — The real AusPost only uses auspost.com.au. Any other domain claiming to be AusPost is fraudulent, no matter how similar it looks.
2
"24 hours or else" — classic urgency trap — Scammers create panic so you act before thinking. Real courier companies give you days to resolve delivery issues.
3
Requesting payment via SMS link — AusPost never asks for redelivery fees via an SMS link. Any payment request from a text message is a major red flag.
4
Tracking ID in URL is fake — The random-looking ID (AU82941) is designed to look legitimate. Real tracking numbers are provided separately, not embedded in payment links.
🚨 OziShield Verdict: High Scam Risk Do not click — report to Scamwatch
🛡️
What to do: Delete the SMS immediately. If you're genuinely expecting a parcel, go directly to auspost.com.au and track it using your tracking number. Report the scam at scamwatch.gov.au.
Example 3 — Fake ATO Tax Refund SMS

Tax season brings a flood of these. Scammers know Australians are waiting for refunds.

⚠️ ATO Tax Refund Impersonation CAUTION
What you'd receive
MyGov
Australian Taxation Office: A tax refund of $842.00 has been approved for your account. To claim your refund, verify your bank details within 48 hours:

ato-refund-portal.net/claim?ref=TFN9182
URL Analysis
⚠️ ato-refund-portal.net
✗ Not .gov.au ✗ .net domain ✗ "Verify bank details" ✗ 48-hour pressure ⚠ Specific $ amount (bait)
🚩 Red Flags Detected
1
ATO never uses .net domains — The ATO only communicates through ato.gov.au and my.gov.au. A .net or .com domain claiming to be the ATO is always fraudulent.
2
"Verify your bank details" — credential theft — The ATO already has your bank details on file if you've lodged a return. They never ask you to re-enter them via a link.
3
Specific dollar amount is bait — Scammers use realistic refund amounts ($842) to make the message feel personal and legitimate. This number is randomly generated.
4
Real ATO refunds arrive automatically — If you've lodged correctly, your refund goes directly to your bank account. The ATO doesn't SMS you to "claim" it.
⚠️ OziShield Verdict: High Scam Risk Delete and report
📞
What to do: Never provide bank details via an SMS link. Log into myGov directly at my.gov.au to check your actual refund status. Call ATO on 13 28 61 if unsure.
Example 4 — Manipulated Image (Deepfake)

AI-generated and face-swapped images are increasingly used in romance scams, fake news, and identity fraud.

🤖 AI-Manipulated / Deepfake Image MANIPULATION DETECTED
Image submitted to RealCheck
🤖 Portrait photo — face appears hyper-smooth,
background slightly blurred at edges
Forensic Signal Results
✗ ELA: Region mismatch ✗ EXIF: No camera data ✗ Face seam: Detected ✗ Skin tone: Inconsistent ✗ ViT: 91% deepfake ⚠ Frequency: GAN pattern
🔬 What Our Forensics Found
1
No camera metadata (EXIF) — A real photo taken on any phone contains hidden data: the device model, time, and often GPS. This image had none — a strong sign it was generated by AI software, not a camera.
2
Face boundary artefacts detected — Our face seam detector found unnatural transitions along the jawline and hairline — the invisible "stitching" left behind by face-swap software.
3
Skin tone inconsistency — The colour temperature of the face didn't match the neck and shoulders — a common sign that a face has been digitally placed onto a different body.
4
ViT Neural Network: 91% deepfake confidence — Our AI model, trained on thousands of real and fake images, assessed this image as highly likely to be AI-generated or manipulated.
🤖 OziShield Verdict: High-Confidence Manipulation Signal Treat with serious scepticism
💡
Common uses of deepfake images: Romance scams (fake dating profiles), fake celebrity endorsements for investment scams, political misinformation, and identity fraud. If an online profile seems too perfect — check it with RealCheck.
5 Golden Rules for Every Australian

Save these. Share them with family. They work against almost every scam.

🔗

Never Click SMS Links

Always type the official website address yourself. A genuine organisation won't mind if you go directly to their site instead of clicking their link.

⏱️

Urgency = Danger

"Act within 24 hours" or "your account will be suspended" are pressure tactics designed to stop you from thinking clearly. Slow down.

🏛️

Government Agencies Don't SMS Payment Links

The ATO, Medicare, Centrelink, and AusPost will never ask you to pay money or enter bank details via a text message link.

🤖

If the Photo Looks Perfect — Check It

Hyper-smooth skin, strange backgrounds, and slightly odd ears are signs of AI generation. Run it through RealCheck before trusting a profile.

📞

Call the Real Number

If you're unsure, hang up or don't reply — then call the organisation using the number on their official website or the back of your card.

🏛️

Got Scammed? Report It to Scamwatch

Reporting scams helps protect other Australians. The ACCC's Scamwatch collects reports to identify trends and warn the community. Visit scamwatch.gov.au to report a scam, or call the ACCC on 1300 302 502. You can also report to your bank immediately if you've transferred money.

Think You've Got a Scam?

Don't guess — let OziShield run the checks. Free, instant, and completely private.

🔍 Check a Link or SMS 🤖 Check an Image
Educational Disclaimer: All examples on this page are reconstructed for educational purposes based on real Australian scam patterns reported publicly. They do not reproduce verbatim scam content. OziShield results are informational — always verify through official channels. Built in Sydney 🇦🇺 by Ozinexus Technologies.