How to Protect Yourself From Scams

According to data released by the Australian Competition & Consumer Commission’s National Anti-Scam Centre, Australians were defrauded of almost $2.2 billion in 2025 via a range of different types of scams.

These included investment scams that saw almost $840 million stolen from personal savings accounts and where individuals were enticed to transfer funds from their superannuation account into bogus products.

Investment scams see cyber criminals impersonate legitimate investment and finance companies, usually promising high returns with little or no risk.

Regulators are also actively monitoring activities where super members are approached directly, or encouraged indirectly, to move their super to another provider or to withdraw some of their super on compassionate medical grounds.

For example, the Australian Securities and Investments Commission (ASIC) has warned Australians to beware of high-pressure sales tactics aimed at getting people to switch superannuation providers, sometimes into risky or unsuitable schemes.

Separately, the Australian Taxation Office (ATO) and the Australian Health Practitioner Regulation Agency (Ahpra) have warned about “dodgy super dental offers” where some health practitioners and registered tax agents entice individuals to use their super to pay for overly expensive or unnecessary medical treatments.

We’re committed to helping you protect your super and identity, and our cyber security operations are an integral part of our business. We have a range of information on our website to help you. Click here.

Reduce your risk of being scammed

Phishing scams, where scammers attempt to extract personal information, account for a high percentage of scam activity. The National Anti-Crime Centre says close to $100 million was lost in 2025 to phishing scams linked to fake emails, texts, messages and websites.

If you receive an unexpected email, text, or phone call, it’s important to be on the alert for potential scammers and take precautions. Pause and check before taking any action.

Below we outline some of the scams you should watch out for as well as some simple steps you can take to avoid them.

Look out for scam emails

Scam emails can look just like legitimate emails and typically pretend to be sent from government agencies or real businesses.

They can be very convincing, but there are a few telltale signs that can help you to spot a scam email.

Check for any spelling or grammatical errors in the email text as well as in the sender’s email address. Another sign can be if there is no official branding on the email, or if any logos used look incorrect in any way.

Be cautious if an email asks you take urgent action, perhaps on a “special investment opportunity” or to update your information and avoid clicking on any hyperlinks and attachments.

Clicking on fake links embedded in emails and texts can result in your computer, phone and other devices being hijacked by criminals, who may then be able to access your personal information and account passwords so they can steal your identity and money.

If you are in doubt about whether an email is real or fake, contact the organisation or business using the contact details they have on their official site. 

Beware of SMS scams

Similar to scam emails, scam SMS messages are sent to your mobile phone and can look like they have been sent from a government agency or a real business.

They may seem very official and often ask you to take quick action. These text messages typically contain one or more links designed to take you to a scam website, where the scammers will attempt to take your personal information so it can be used to steal your money or commit fraud in your name.

To counter this activity the government has now made it mandatory for all text messages received from a business or organisation to be branded with their name in the sender ID. If you think you have received a scam message you can report it to ScamWatch.

Be alert to phone scams

While emails and texts are the most common avenues used by scammers, direct phone calls are another preferred method.

Calls typically involve scammers claiming to be from well-known organisations or businesses, who may try to get you to provide personal information including your name, address and banking details.

They may also try to convince you to give them remote access to your computer.

If someone calls asking for personal details, don’t provide any information. It is best to end the call quickly and visit the organisation’s website yourself and call the support number listed there.

Social media scams

Social media has become a core online tool for many businesses to advertise their services.

Sophisticated scammers are also increasingly tapping into social media channels. They do this by setting up fake websites and profiles, messaging platforms and apps, to reach mass audiences in a bid to build trust and lure vulnerable individuals seeking out investment and other opportunities.

Just like scam emails, texts and phone calls, it’s important to be vigilant at all times. Be suspicious of online offers and being contacted directly by people you don’t know wanting to connect with you so they can offer their services.

Strengthen your digital defences

Make your accounts harder to hack:

• Use unique passwords or passphrases for every account.
• Enable multi-factor authentication (MFA) wherever possible.
• Consider using a password manager and a secure MFA app.
• When logging into your Member Online account, you’ll receive a one-time code via SMS from OKTA. If you receive a code you didn’t request, contact us immediately.

At legalsuper, we’re constantly monitoring for threats and improving our systems. While we work behind the scenes, your awareness plays a critical role in keeping your account secure.