Watch out for these ATO, PTV myki and Microsoft sign-in scams
Be on the lookout! We have reports of multiple scams targeting people at the moment, trying to steal your personal details and money.
Please read through this blog and remain cautious to best protect yourself from these scams.
PTV myki scam
Have you registered your myki card? If not and a scammer realises that a card is unregistered, they can register the number printed on your card to themselves and falsely claim a refund on any money you’ve loaded onto it.
Registering your myki cards to yourself, as soon as you can and whenever you get a new one, appears to prevent this loophole from being exploited.
If you suspect your myki has been compromised, contact Public Transport Victoria by calling 1800 800 007.
ATO impersonation scam
The ATO are warning there have been many reports of scammers impersonating government agencies.
Scammers have sent out ATO branded emails containing links to fake myGov websites which will steal your sign in credentials. Once they have access, they’ll then change your account bank details to their own and make fraudulent lodgements so that any payments will go to them.
Always be wary of emails, phone calls, text messages, or interactions on social media claiming to be from the Australian Taxation Office (ATO).
If you are suspicious, do not engage with them and instead
- Contact the ATO directly
- Visit the ATO verify or report a scam webpage
You can see a list of current scams on the ATO scam alerts page and subscribe to their general email updates.
Microsoft sign-on page impersonation phishing
Please also stay alert for phishing emails which then link to fake Microsoft sign-on pages.
Scammers have hosted pages that show a fake Microsoft OneDrive document preview and link to a phishing URL that will steal your credentials.
These credentials can then be used to read your stored emails and documents for information and details that can be further exploited.
Tips to stay safe
- Verify emails – Always double-check the sender’s email address, especially if the message seems unexpected or requests sensitive information. Often, cybercriminals will create ‘spoof’ links (or ‘domains’) by changing up the address slightly – for example, Deakin email addresses end in @deakin.edu.au, a sender address that’s not legitimate when you hover over it might read @deakin.org.au.
- Inspect links and attachments – Be cautious of links in emails or messages that take you to login pages. Before clicking on any links or downloading attachments, hover over them to preview the URL. If in doubt, verify with the supposed sender through a trusted means.
- Use the Phish Alert button in Outlook. Report any suspicious emails to Digital Services so that they assess the material and take the necessary steps to protect you and Deakin.
For further information and guidance, please refer to Microsoft’s official blog post on this scam: Detecting and mitigating a multi-stage AiTM phishing and BEC campaign | Microsoft Security Blog
Other current scams to watch out for
Please also keep an eye out for these common scams going around at the moment.
Authority and virtual kidnapping scams targeting Chinese international students
The Victoria Police Financial Crimes Squad has put out a warning that international students, especially those from China, have been the target of scammers impersonating Chinese officials, police officers or courier services.
The scammers claim that your phone or identity have been used in a crime and will threaten legal consequences unless you make a payment to them.
They can use elaborate methods including calls from multiple people, video calls and appearing to be calling from an official phone number to seem more convincing.
Fee payment scam
We have received reports that Deakin University students are being targeted by a fee payment scam. These scams are designed to take your money in a dishonest way, leaving your university fees unpaid.
The scammers will call, email, message or otherwise contact you, claiming to be associated with a financial institution. They will offer to give you a discount if you pay your student tuition fees through them, rather than paying the university directly.
The scammer may even appear to pay an amount towards your tuition to make the offer appear more genuine, but if you give them your money, they will reverse this initial payment, taking your money and leaving your university fees unpaid.
You should never pay your fees to a third party or agent. Only ever pay your fees through the valid payment options listen on your invoice.
Remember, if something sounds too good to be true, it’s probably a scam.
Fake social media groups
We’ve been alerted that there are a number of social media groups and pages that may be falsely presenting themselves as though they were officially supported by Deakin. Some of these groups may be trying to promote non-Deakin events or even contract cheating, so remain vigilant.
You can find the official social media channels of Deakin listed on our Stay Connected webpage. If you are invited to or come across a page or group not included here, then be wary.
Contract cheating scams
You may come across or be contacted by services offering to complete your assessments for you in exchange for money or for uploading your previous assessments.
Not only is taking up their offer of these services a breach of academic integrity and can put your studies at risk, but you may open yourself up to the threat of blackmail.
Where you can get help
- If it’s an emergency or you are concerned for your safety, contact the police immediately by calling 000.
- To report a crime that is not an emergency, phone 131 444.
- If you have provided any money or think the scammer has your bank account details, contact your bank immediately.
- If you receive a call or message of this nature, report it immediately to Australian Cyber Security Centre (ACSC) and ScamWatch. You can also contact Deakin’s cybersecurity team.
- IDCARE can assist you if you experience scams and fraudulent activity. They can be contacted on 1800 595 160.
- Warn your friends, family and fellow students about these scams.
There are no consequences for reporting a potential scam – it is always better to be safe than sorry.
Some resources on scams
Keep reporting those suspicious emails and continue to stay vigilant for scams! For more information on spotting a scam, visit the cyber security blog.
Stay up to date with the latest known online scams by bookmarking and regularly visiting Deakin’s Online safety and security webpage. You can also find more information about common scams targeting students via Study Melbourne’s website. You can also follow @scamwatch_gov on Twitter and subscribe to ScamWatch radar alerts.
The ACCC’s Little Black Book of Scams is also a handy tool for recognising scams – it is available in various languages including Simplified Chinese on the ACCC.