What is phishing? Phishing is a way cyber criminals trick you into giving them personal information. They send you fraudulent emails or text messages often pretending to be from large organisations you know or trust. They may try and steal your online banking logins, credit card details or passwords. Phishing can result in the loss of information, money or identity theft. Spear-phishing is when these emails and text messages are highly targeted to the recipient. An icon to indicate an area of information See if you can spot a phishing scam. Spotting phishing attempts can be harder than you think. Take the quiz now to see how you do. Think you've been targeted by a phishing attack? Read on to understand the steps you should take. If you think you've received a phishing email or text message but haven't clicked on it If the phishing was via email, contact your email provider for advice on how to block future phishing emails. If the phishing was via text message, report the attempt to your telecommunications provider. Visit the Australian Communications and Media Authority (ACMA) Phone scams page for more information. If the phishing attempt was via a social media, report the attempt to the platform. Report the scam via Scamwatch. Visit our Emails and texts information page for more details on how to identify and report phishing attempts. If you think you've installed malicious software (malware) from a phishing email or text message Run anti-virus or security scan software on your devices to remove any malware. See our step-by-step guide Performing a malware scan using Microsoft Defender Antivirus for Windows 10. If you use another anti-virus product, refer to their instructions. For extra peace of mind, consider saving important files on an external storage device (such as a USB) and performing a factory reset of your device. Contact an IT professional if you are unsure how to do this. Report the incident to us through ReportCyber. Visit our Malware information page for details on how to identify, protect yourself and recover from malware. If you think you've lost money through a phishing email or text message Immediately report the transaction(s) to your bank or financial institution. Change your online banking passwords to secure your online accounts. You may also need to close any unauthorised accounts that have been opened in your name. Refer to idcare.org for advice on securing your online accounts. Contact your email, telecommunications or social media provider for advice on how to block future phishing attempts. Report the incident to us through ReportCyber. If you think you've revealed personal information through a phishing email or text message Contact your bank or financial institution to secure your financial accounts. Contact any other services where the personal information could be used to access accounts. For example, the ATO or Services Australia. Change the passwords to any accounts which may be accessed. This could include banking, superannuation, MyGov and email accounts. Report the incident to us through ReportCyber. Contact a credit reporting agency to see if any attempts have been made to open accounts in your name. Contact your email, telecommunications or social media provider for advice on how to block future phishing attempts. Refer to idcare.org for a list of checks to complete to minimise the effects of identity theft. Content complexity Simple This rating relates to the complexity of the advice and information provided on the page.