Scammers are constantly changing their tactics and are increasingly targeting small businesses through emails, text messages, phone calls, social media and fake websites. Taking a moment to stop and check before you act can help protect your business, money and information.

Common scam signs

Here's a list of common signs of a scam to help you protect your business:

  • Spelling mistakes or unusual language - The easiest way to spot a scam is to look for spelling mistakes, poor grammar or wording that sounds unusual. Some scammers now use artificial intelligence (AI) to create professional sounding messages, so don't rely on this sign alone.
  • Receiving a message from someone you do not know - Scammers will often impersonate trusted businesses or organisations to gain your confidence. If you get a message, call or email from a business or organisation that you are not a customer of, or weren't expecting, it could be a scam. Scammers often claim to be from a government agency, bank, supplier or delivery service.
  • Asking for your login details, passwords or verification codes - Scammers may ask for your login details or send you a fake login webpage to steal your personal information. It's best to get in contact with the business to confirm. Most businesses will not out of the blue ask for your:
    • passwords
    • login details
    • multi-factor authentication (MFA) codes
    • or verification codes.
  • Suspicious links, attachments or QR codes - Don't click links, open attachments or scan QR codes unless you're confident they're safe. These can lead to fake websites, contain viruses, or steal your personal and financial information.
  • Pressure to act immediately - Scammers often create a sense of urgency to make you feel pressured to act fast. Be careful, take time to read and research before actioning as this may be a scam. They may use phrases such as:
    • 'limited time offer'
    • 'act now'
    • 'immediate payment required
    • or 'your account will be suspended'.
  • Generic greetings and vague terms - If the message starts with phrases such as 'Dear customer', avoids using your name or seems unrelated to you, it might be a scam. Particularly if the content is unrelated to your business activities.
  • Asking for payment in unusual ways - If another business is asking for you to pay in a specific way, such as a gift card, it's a scam. Also be cautious if someone asks you to transfer money to a new bank account or change payment details at short notice. Always verify payment requests directly with the business using contact details you already know and trust.

Trust your instincts. If a message, phone call or invoice seems unusual, stop and verify it before taking action. Scammers rely on people acting quickly without checking the facts.

Think you've been scammed?

If you think you're a victim of a scam, it is important you know how to report and recover. 

You should: 

  • Contact your bank immediately if money has been transferred.
  • Change affected passwords and secure your accounts.
  • Report cybercrime through ReportCyber.
  • Report scams to Scamwatch.
  • Contact IDCARE if your personal information may have been compromised. 

Helpful resources

Remember, if you're unsure about a suspicious message, don't respond and don't click on links. Stop to check and verify before taking action.