Scammers impersonating the ASD's ACSC

The ASD's ACSC is aware of cybercriminals claiming to be us through emails and phone calls, as well as falsely claiming our endorsement of products or services.

The content of the scam emails and phone calls vary, but typically ask you to give personal information (such as passwords or bank details), money or ask you to download software.

The scam emails and phone calls also create a sense of urgency to try and pressure you into doing something quickly. Often, this will include threats that if you do not act now, something terrible will happen.

The nature of the fake endorsements claim that we have helped develop or fund products or services, which are typically not aligned with what we do. For example, social media advertisements promoting crypto trading platforms.

To make these scams appear legitimate, cybercriminals have been using the ASD’s ACSC logo and/or signature block, and often alongside other trusted organisations’ branding.

ASD will never:

• Ask for your personal information such as your passwords, bank details or answers to your security questions.
• Send you an email with a link to ‘antivirus’ software or remote access applications such as ‘AnyDesk’ or ‘TeamViewer’.
  • If you click on a link sent by a cybercriminal, there is potential that malicious software could be downloaded and installed to your computer.
• Ask you to purchase gift cards or cryptocurrency.
  • ASD’s ACSC does not charge money for our services.
  • If you receive a call from someone claiming to be us regarding money or requesting you move your money out of your bank account, assume you have been contacted by a cybercriminal.
• Tell you that your IP is being used to access illegal websites or facilitate illegal activities, such as child exploitation material or money laundering.
• Stop you from hanging up the phone.
  • We will never threaten or pressure you to stay on the line.
  • A real ASD’s ACSC employee will always encourage you to hang up and call 1300 CYBER1 to confirm you are speaking to us.

How do I stay secure from impersonation emails?

If you receive an email or phone call from the ASD’s ACSC and you wish to verify that it is legitimate, please contact us on 1300 CYBER1 (1300 292 371). We will never give you an alternative phone number to contact.

If you have received a suspicious email, do not click on links within the email. Call ASD to check it with us, then report it to ScamWatch and block the sender.

If you have clicked the link, require assistance, or if you’re not sure whether it’s a real email from ASD’s ACSC, call us on 1300 CYBER1 (1300 292 371). We will never give you an alternative phone number to contact.

Further advice can be found on our website on how to identify phishing emails. Please continue to report scams to ScamWatch.

How do I stay secure from impersonation phone calls?

If you receive a phone call from someone claiming to be from ASD’s ACSC and you’re not sure if it is legitimate, do not to give out any of your personal information.

Hang up the phone and call us on 1300 CYBER1 (1300 292 371). Our team will be able to confirm whether we have been trying to reach you.

How do I stay secure from fake endorsements?

ASD’s ACSC does not endorse specific products or services. This includes entities, products, and services linked or referenced in our publications.

Where we collaborate with partners on cyber security guidance and advice, we will promote this over our official website, cyber.gov.au, and social media channels. You can follow us on Facebook, Instagram, LinkedIn or X.

Read our tips on how to recognise scams, and if you encounter a fake endorsement, report it to Scamwatch or ReportCyber.

Where can I go for help?

ASD’s ACSC is continually monitoring for ASD’s ACSC impersonation or endorsement scams and is able to provide assistance and advice as required. Organisations or individuals that have been impacted or require assistance can contact us via 1300 CYBER1 (1300 292 371).