Blog

We will never, ever ask you for a One-Time-Password!   Doing your banking has become increasingly convenient by utilising online and mobile banking services. However, this convenience also comes with a downside: the rise of sophisticated cybercrimes, such as bank impersonation scams. These scams involve fraudsters who may pretend to represent Horizon Bank or other financial institutions and trick you into sharing sensitive information, including one-time passwords (OTPs). In this blog post, we will explore the dangers of bank impersonation scams and emphasise the importance of safeguarding your OTPs.   Understanding Bank Impersonation Scams Bank impersonation scams typically begin with fraudsters attempting to gain your trust through various means, such as phone calls, emails, or text messages. They may pose as someone calling from Horizon Bank or customer service agents, using convincing tactics to deceive you into believing their authenticity. The scammers often claim that there is a security issue with your account or a fraudulent transaction, creating a sense of urgency and panic.   What is a One-Time-Password (OTP)? One-time passwords are temporary codes sent to your registered mobile number or email address to authenticate your identity during online transactions. They provide an additional layer of security, ensuring that only the rightful account owner can complete the transaction. They should never be shared with anyone. However, scammers have devised cunning ways to trick individuals into sharing their OTPs, compromising their bank accounts.   The Dangers of Sharing Your OTP Sharing your OTPs with anyone, including individuals claiming to be bank representatives, can lead to severe consequences. Here are some risks associated with sharing OTPs:   Unauthorised Account Access: Scammers may be able to gain access to your online banking account by using the OTPs you provide. Once given access to your account, they can conduct unauthorised transactions, transfer funds, or even change your account details, leaving you financially devastated. Identity Theft: OTPs are a valuable piece of information for cybercriminals seeking to commit identity theft. By obtaining your OTPs, fraudsters can use them to verify their identity and gain access to other sensitive accounts, leading to potential financial loss and reputational damage. Malware and Phishing Attacks: Scammers often employ sophisticated techniques, such as phishing emails or text messages, to trick you into disclosing your OTPs. Clicking on malicious links or downloading attachments from these messages can infect your device with malware, allowing criminals to steal your personal information.   Protecting Yourself from Bank Impersonation Scams To safeguard yourself from falling victim to bank impersonation scams, follow our essential tips:   Verify Caller Identity: If you receive a call from someone claiming to be a Horizon team member or representative, don't share any sensitive information. Instead, hang up and contact us directly. This way you can verify the legitimacy of the call before proceeding. Be Wary of Unsolicited Emails and Messages: Exercise caution when receiving emails, text messages, or social media communications requesting your OTPs. Legitimate banks and financial institutions will NEVER, EVER ask you to provide your OTPs or any other insecure communication channels. Educate Yourself: Stay informed about the latest scams and fraud techniques. Banks often issue security advisories and updates on their websites or through mobile banking apps. Read these alerts to familiarise yourself with common fraud tactics and learn how to protect your personal information. We recommend staying updated via the Horizon Bank Facebook page and by visiting ScamWatch. If you’d like to learn more about how we at Horizon safeguard your banking visit our security page. If you suspect you have been a victim of a scam, contact us immediately on 1300 366 565 or fill out this form so we can secure your accounts and assist you further. Horizon Bank has a branch network spanning the NSW South Coast and Illawarra. Horizon Bank branch locations: Albion Park, Bega, Bermagui, Berry, Merimbula, Moruya, Nowra, Thirroul, Ulladulla & Wollongong.

Data from Scamwatch reveals that scammers’ favourite tools are text messages, emails and phone calls, these are the top three ways scammers are contacting victims to obtain their sensitive information. “Phishing scams are a constant threat, and the only way to truly protect yourself is to remain vigilant with any type of unsolicited contact. Don't be fooled by seemingly trustworthy entities; legitimate companies will not ask you to provide sensitive information through unsolicited texts, emails, or calls,” COBA Chief of Financial Crimes and Cyber Resilience Leanne Vale said. COBA’s Financial Crimes and Cyber Resilience team have provided some top tips to help you outsmart phishing scams and prevent you from falling victim. What is phishing? Phishing is when scammers impersonate trusted entities, targeting individuals through phone calls, emails or text messages. They have impersonated banks, telecommunication companies & government agencies such as the ATO or myGov for example. The websites & emails that the scammers use are designed to mirror the branding and logos of the company or institution they’re imitating so that they look legitimate. Their aim is to extract personal information from you such as credit card details, usernames, codes and passwords. Common tactics they use include: The ‘technical error’: The scammers may claim there has been a system error or glitch that has erased customer data and urge you to re-enter your details. The ‘security update’: You’ll be asked to update your details for ‘security reasons’. The ‘unauthorised activity alert’: Scammers may raise alarms about some suspicious activity or transactions on your account and ask for your details so they can investigate further. How can you spot phishing attempts? Scammers use phishing scams to obtain your personal information and often will include malicious links they want you to click. When it comes to spotting phishing attempts, we suggest that you always stop & think before you click, and if you’re unsure if it’s legitimate, contact the company directly. When doing so, use their official website, phone number or mobile app so you can try verifying the request you received and never use the contact details that are within the call, text message or site you receive. Here are some red flags to look out for: Suspicious sender: Although the message or email may appear to be from a known and trusted company, the number or email address can be unfamiliar or not match the official contact details. Urgent language: Look out for the sense of urgency in the language. Scammers will often use language such as ‘Your account is locked!’, ‘Payment overdue’ or ‘Immediate action required!’ to try to pressure you into acting quickly and without thinking. Suspicious links: Stop, think & don’t click! Never click on links within unsolicited text messages or emails. As mentioned earlier, it’s best to go directly to the company’s website or app, or contact them by phone directly. Requests for personal information: Legitimate companies don’t ask you for personal information such as passwords, codes or credit card numbers via a text message or phone calls. Suspicious attachments: Be careful not to open any attachments you receive from unknown senders or suspicious senders. They may contain harmful malware. What should you do if you spot a phishing scam? Reporting a phishing scam is crucial, even if you’ve managed to avoid falling victim to one or losing money. By reporting the scam and sharing your story you can help protect others and stop the criminals. Report the scam to National Anti-Scam Centre - Scamwatch. If you’d like to learn more about how we at Horizon safeguard your banking visit our security page. If you suspect you have been a victim of a scam, contact us immediately on 1300 366 565 or fill out this form so we can secure your accounts and assist you further. Customer-owned banks are dedicated to safeguarding their customers from scams and fraud. In November 2023, 55 mutual banks and credit unions demonstrated this commitment by joining forces to launch the Scam-Safe Accord. This industry-wide initiative represents a united front against scammers and reinforces the banking sector's determination to strengthen consumer protection. Find out more about the Scam-Safe Accord here. Protect your personal information from phishing scams. If you suspect a phishing attempt, report it immediately to help prevent further cybercrime. For more resources and assistance, visit Horizon Bank and learn how we can support your cybersecurity efforts and scam prevention. Horizon Bank has a branch network spanning the NSW South Coast and Illawarra. Horizon Bank branch locations: Albion Park, Bega, Bermagui, Berry, Merimbula, Moruya, Nowra, Thirroul, Ulladulla & Wollongong.

We know that navigating tax season can be daunting but throw in the increasing threat of tax scams and it’s even trickier. By remaining vigilant and informed, you can protect your personal information and financial security. Below are 10 simple tips you can follow which will help you recognise common scams and how to avoid them. These 10 practical tips to identify phishing emails & reporting suspicious activity will enable you to safeguard your identity & prevent any financial losses during this upcoming tax season. 1. Beware of phishing emails: Phishing emails are frequently being sent out by scammers, in this instance they will be pretending to be from myGov or other related government agencies. Often phishing emails ask for you to provide personal information & other sensitive details such as your myGov username and password. 2. Verify email sources: A quick and easy way to help determine if an email from myGov or government agencies is legitimate before responding, is to always double check the sender’s email address. Typically, any official emails from myGov will come from addresses ending in @my.gov.au 3. Avoid clicking on links: Think before you click! Be cautious of any links that are included in emails that are allegedly from myGov. Instead of clicking links, you’re best to manually type in the myGov website address to your browser to access your account. 4. Watch for urgency or threats: Often phishing emails will create a sense of urgency or be threatening to try coercing you into taking immediate action. Always be sceptical of emails that claim your myGov account could be suspended or you may face penalties if you don’t respond to the email promptly. The same goes with offers of refunds or overpayments. 5. Never share personal information: Remember that official representative of myGov or government agencies won’t ever ask you to provide them with personal information via email. This includes your password, tax file number or banking details. If you receive unsolicited emails, avoid sharing this information in response. 6. Report suspicious emails: It’s important that if you receive any suspicious emails claiming to be from myGov or other government agencies, you report them to the Australian Cyber Security Centre (ACSC) or even the myGov help desk. If the email you receive is regarding taxation, you can forward the email to the Australian Taxation Office (ATO). To do this you can: Phone the ATO on 1800 008 540. Forwarding the scam email to ReportScams@ato.gov.au Take screenshots of fake social media posts and email them to ReportScams@ato.gov.au 7. Use two-factor authentication: A good safeguard of your myGov account is to enable two-factor authentication if possible (2FA). By adding 2FA you add an extra layer of security by requiring a second form of verification in addition to your password when logging in, such as a code sent to your mobile phone. 8. Stay informed: Keeping up to date with the latest scam alerts and security advice from the ATO, myGov and any other relevant government agencies. Often these organisations will provide information around common scams and ways to protect yourself against them. 9. Educate others: Tell your friends, family and colleagues about myGov phishing scams so you can spread awareness. Encourage them to also be vigilant and to report any suspicious emails they receive. 10. Regularly monitor your accounts: Keep a close eye on your account activity on your myGov account and linked services such as the ATO, Centrelink, Medicare or Department Veterans Affairs. If you notice any suspicious or unauthorised activity, or changes to your account, report it immediately.  You can review further information about active scams and examples of myGov impersonation scams on their website. By making sure you’re aware of the risks associated with the myGov phishing emails, and making sure you are proactive in taking measures to protect your account, you’re able to safeguard your personal information and minimise the risk of falling victim to a scam. Horizon Bank has a branch network spanning the NSW South Coast and Illawarra. Horizon Bank branch locations: Albion Park, Bega, Bermagui, Berry, Merimbula, Moruya, Nowra, Thirroul, Ulladulla & Wollongong.

We are seeing money mule scams become more common in Australia, with victims being recruited by criminals through fake job ads and romance offers. We’ve put together some tips so you can keep yourself safe. Movies and crime TV shows might be the place you’ve seen the work of ‘money mules’, but we’ve seen real-life examples of this illegal activity popping up in the Australian retail banking space in recent months. Simply put, money mules will transfer the money of crime – such as fraud or scams – into a third party’s bank account to hide it from the authorities. These scams are disguised as an employment opportunity or even a new romance, so unsuspecting victims sometimes get caught up in it all. Here’s how people get caught out and how you can stop it from happening to you. How money mule scams work Money mules are the middle-men that act on behalf of other criminals that are trying to hide or launder money derived from crime. In order to cover their tracks, the money mules will try to recruit new people to get involved in the transfer of large sums of money. A common way of new people being recruited is under the guise of a legitimate employment opportunity, where the employee can earn sums of money quickly by making transfers.  Another common way is through a romance scam, where a potential partner will ask their online love interest to transfer money for them. Shielding yourself from a money mule scam It can be tricky to spot these scams, as they are quite sophisticated with the fraudsters creating legitimate-looking email addresses or websites, so they don’t have as big a chance of being detected – however even if they do a good job of disguising themselves there are often some red flags. Here are some tips that might help: The old saying, “if it sounds too good to be true, it probably is”, definitely applies to money mule scams. Being offered large sums of money for minimal and easy work, is a big red flag, so beware. If you get a job offer, make sure you do your research on the company. Things to look for are their ABN, how long the company has been registered and who the directors/owners are. Be extra cautious of businesses that are listed overseas. If something feels a bit off, ask a trusted family member or friend for some advice. Another perspective is always handy as they may pick up on things you missed. If you haven’t met someone in person, or you don’t know the person, don’t send them money. Always protect your banking details and make sure you’re updating your passwords periodically. Always think before you click any links in emails or text messages. What if you think you’ve already been scammed? If you believe you’ve fallen victim to a money mule scam, it’s very important you report it to your bank as well as the police as soon as possible. The sooner you get in touch with your bank, the more likely it is that they’ll be able to stop the transactions. It is important to note however, some transactions aren’t able to be stopped – such as wire transfers. After you speak with your bank, we’d recommend contacting IDCARE – which is the national identity and cyber support service – on 1800 595 160. As money mule scams can involve identity theft, IDCARE can help you come up with a plan if that is a risk you’re facing. You can also report the scam to Scamwatch.   It is vital that you stay vigilant against Australian banking scams. By staying alert and recognising red flags, you can protect yourself against falling victim to these scammers. Money mule scams are on the rise in Australia, so be wary of any “too good to be true” opportunities or offers and keep your banking details safe. Everyone is vulnerable to scams, so everyone needs information about how to identify and avoid being scammed.  You can find more information on scams awareness on our website. Horizon Bank has a branch network spanning the NSW South Coast and Illawarra. Horizon Bank branch locations: Albion Park, Bega, Bermagui, Berry, Merimbula, Moruya, Nowra, Thirroul, Ulladulla & Wollongong.

With technology always changing, and scammers becoming even more clever and cunning, It’s important to stay on top of the latest scam and fraud tactics used by scammers. By keeping your personal details safe and staying on top of the latest scams that are circulating, you can effectively protect yourself from scams and avoid being a victim. How to stop a scammer from scamming you How to stay safe from online scams Reduce your risk of being scammed and pay close attention to the content of text messages or emails. Before making a payment, always check for a padlock symbol in the URL bar, on the left hand side. This indicates that you’re on a secure website. Any time you log on to online banking or shop online, make sure that the websites you visit has the correct website address in the address bar, which should include the correct extension (such as ‘.com.au’) .au indicates an Australian website. If you receive a spam email, avoid opening it. If you do open it, never click on any links or open any attached files. Emails or links may contain malicious software (also known as malware) that can infect your computer or device and steal your information over time Avoid responding to text messages or missed calls that come from numbers you don’t recognise. Keep your personal details like name, address, date of birth, license number, tax file number, bank account numbers and online banking passwords safe. Never give these things out willingly. Remember an organisation may ask for things like name, address or date of birth  in an attempt to identify you over the phone, which should only happen if you have called them. You should rely on reputable sources for scam information, and how to protect yourself online. These websites may also include the latest scams that are circulating. Scamwatch Services Australia – Australian Government ACCC Australian Cyber Security Centre How to spot a fake message Scammers will use content that mimics the look and feel of official messages – scammers will use official company names and logos in communications, leading you to believe the message is legitimate. Spelling mistakes and incorrect grammar is a key indicator of a scam message. Other things to look out for include a generic rather than a personal greeting, the names of made up organisations that don't exist, poorer quality presentation, overly official or forced language. Be cautious if you're being asked to forward money or if you're told you've won a prize. Another tactic is to threaten you with arrest, even though you have done nothing wrong. Any email or text that asks you to confirm, update or share personal or banking information has been sent from a scammer. Legitimate communications from banks, internet and phone providers will never ask you for your personal details via email or text message. If there is an urgent call to action, such as asking you to unlock or verify an account, claim a prize or log in to a site and pay an infringement notice or outstanding debt. Protect your money and bank details Never give money, credit card details or online account details to anyone you don’t know and trust Keep your receipts for a period of time as proof of transactions Check your bank account and credit card statements regularly. A good way to do this is every time you get paid, receive government benefits or other income to your accounts Report any unexplained transactions to your bank. Keep your Visa cards safe and never hand them over to anyone else to use. Make sure nobody else knows your PIN number. You can usually reset your PIN at an ATM supported by your bank, by visiting a branch or if you bank with Horizon, you can do this from within our app. Simply log in, click on cards > change PIN. Don’t keep old cards or chequebooks lying around. Return them to your financial institution to be destroyed and to ensure they are no longer active. Avoid being a victim of identity fraud - cut up expired cards through the magnetic strip and chip. Cut through the card numbers and dispose of the pieces in different bins so they cannot be pieced back together. How to protect yourself - Don’t Click On That Link! Press and hold a link on a smartphone to inspect it first if you’re unsure whether you should click on it. Contact the business or organisation using a phone number from their website before you reply to any suspicious looking emails or text messages. If you receive a suspicious email or text message and haven't engaged with its contents, such as clicking a link or replying to it, report it to Scamwatch and the relevant organization then delete the message. If you have provided your online banking password to a scammer, give us a call immediately so we can assist you. If it is on the weekend, you can reset your password using the password reset link on the Online banking login page. If you have a Visa card you should report it to the Visa Hotline and also mark your card as lost or stolen in our app, as presumably the scammers will attempt to use it. If you've clicked a link or opened an attachment from a scam email, close your browser, empty your browser cache and clear your browser history. Then perform a virus scan on your computer using anti-virus software. If you're on a mobile device, make sure you have updated your operating system, and run an antivirus scan if one is available on your device. If you receive a call from a scammer posing as someone from a reputable organization, do not give access to your computer. Remote access means the scammer can look at your personal information and even install malware on your computer. Getting support after being scammed If a scam has caused you problems with debt, talk to a financial counsellor. They can help you get your finances back on track. If you think someone has stolen your identity, you can contact iDcare - a free government-funded service which will work with you to develop a specific response plan to your situation and support you through the process. You can apply for a Commonwealth Victims' Certificate - which helps support your claim that you've been the victim of identity crime.    Protecting Yourself & Your Data Online If you use the online world for shopping, banking or using social media, it’s important that you do this safely. Visit Scamwatch for more tips on staying safe online and how to spot a fake scam. The team at Horizon Bank are always here to help and answer any questions. Get in touch with us today and let’s work together to create a safer online experience. Horizon Bank has a branch network spanning the NSW South Coast and Illawarra. Horizon Bank branch locations: Albion Park, Bega, Bermagui, Berry, Merimbula, Moruya, Nowra, Thirroul, Ulladulla & Wollongong. The content in this article has been prepared by Horizon Bank for general information only and it is not intended to be professional advice. It does not take into account your objectives, financial situation or needs. You should seek your own legal, accounting, financial or other professional advice where appropriate, and consider the relevant General Terms and Conditions before deciding whether to acquire any products or services offered by Horizon Bank and/or its affiliated partners. We do not recommend any third party products or services referred to in this article unless otherwise stated and we are not liable in relation to them. Any links to third party websites are for your information and we do not endorse any content on those sites. Horizon Credit Union Ltd ABN 66 087 650 173 AFSL and Australian Credit Licence Number 240573 trading as Horizon Bank.