Scammers need your login credentials (username, password, PIN), personal details (name, DOB, address), account numbers, and sometimes one-time passcodes (OTPs) or remote access to your device, often obtained by tricking you through phishing, malware, or impersonating legitimate institutions like your bank to steal this info directly or via fake links. They exploit trust or urgency, asking for info they claim is for verification or security but is actually for unauthorized access.
In many cases, a thief needs additional details to move money. If a scammer has both your bank account number and the financial institution name or routing number, the threat level rises significantly. Routing numbers are public information and can be found easily if you know the name of the financial institution.
Yes, someone can potentially take money using just your BSB and account number, primarily through setting up unauthorized direct debits (if they get past security checks) or combining them with other personal info for more complex fraud, but it's much harder to withdraw funds like an ATM withdrawal without your PIN or login details; the main risk is setting up recurring payments or using them with other stolen data like your driver's license, so always share details with trusted entities and monitor your statements closely.
Generally, it is safe to share your account number and sort code for legitimate purposes, such as receiving payments or setting up direct debits with trusted companies. However, while these details alone cannot be used to directly withdraw money, they can be exploited in fraud attempts.
Initiate an electronic funds transfer to steal money from your account. Make unauthorized online purchases. Deposit money into your account with the intention to launder it. Commit identity theft by opening a new credit card or bank account in your name.
Change Your Password Immediately: Pick a new, strong password. Look at Your Transactions: Check your recent transactions for any signs of theft. Lock Your Card: Ask your bank to freeze your debit or credit card. Keep a Record: Write down what you see and save any strange messages.
If a criminal has both your routing number and account number they can potentially steal money from your account through fraudulent ACH transfers and payments.
Generally, a hacker would need a combination of personal data. It includes date of birth, Identity Number, PIN, full name, address, the full card number on the front of the card, its expiry date, and CVV number at the back to make payments fraudulently with your credit or debit cards.
Use two-factor authentication
In addition to requiring a username and password when logging in, your bank likely has two-factor authentication (2FA), which adds an extra layer of protection to your account. This involves getting a one-time code sent via email or text message to complete the login process.
Contact your bank and let them know. You may have received messages sent from your account that you don't recognise, or you may have been locked out of your account, refer to our guidance on recovering a hacked account. Contact your IT department and let them know.
Can I run a test to see if my phone is hacked? Yes, running an antivirus scan using a mobile security app like Norton 360 Deluxe can help you identify malware infections that could be granting hackers access to your device or data.
Can someone set up a direct debit without my permission? Not legally – direct debits should only be set up with your permission, but fraudsters can sometimes still manage it by using stolen personal details. That's why it's so important to protect your information and keep a close eye on your account.
The safest way to receive money from a stranger is to use secure tools that offer transaction protection and do not require sharing private banking details. Methods like payment links or accepting transfers through verified contact information are generally safer.
Yes, someone can potentially take money using just your BSB and account number, primarily through setting up unauthorized direct debits (if they get past security checks) or combining them with other personal info for more complex fraud, but it's much harder to withdraw funds like an ATM withdrawal without your PIN or login details; the main risk is setting up recurring payments or using them with other stolen data like your driver's license, so always share details with trusted entities and monitor your statements closely.
Common scammer phrases create urgency, promise rewards, threaten consequences, or build fake intimacy, using language like "Act Now," "You've Won," "Problem with your account," "Soulmate," "If you love me," "Would you kindly," or "Don't tell anyone" to manipulate victims into revealing personal info or sending money. They often use awkward grammar, unusual spelling (like "British English"), and demand secrecy to bypass critical thinking and isolate you.
Consider these seven ways to help you outsmart scammers:
Credit and debit cards may offer some protections that can help you recover your money for purchases you don't receive. If you pay with a credit card, your bank will likely reimburse you if you don't receive the goods. If you pay with a debit card, your bank will try to recover your money from the scammer's bank.
5 Ways to Stop Fraudsters From Taking Over Your Account
Did a scammer make an unauthorized transfer from your bank account? Contact your bank and tell them it was an unauthorized debit or withdrawal. Ask them to reverse the transaction and give you your money back.
Identity theft occurs when scammers use someone's PII or financial information to commit fraud. Most forms of identity theft require access to sensitive information that isn't available to the public — like your SSN, medical records, or financial account credentials.
If someone has access to both your bank account and routing number, they could make fraudulent ACH transfers and payments out of your account. In other words, you could wind up being scammed. That's why it's so important to understand this aspect of your personal finances and protect your money.
Fraudsters can still use your debit card even if they don't have the card itself. They don't even need your PIN—just your card number. If you've used your debit card for an off-line transaction (a transaction without your PIN), your receipt will show your full debit card number.
In fact, bank phishing scams have become one of the most common types of criminal activities on the internet. In addition to stealing login credentials for bank accounts, cybercriminals also steal credit and debit card information for their own financial gain.
Call and write your bank or credit union
Tell your bank that you have “revoked authorization” for the company to take automatic payments from your account. You can use this sample letter . Some banks and credit unions may offer you an online form.
The Apple Pay system itself has never suffered a hack, but if your device is compromised through phishing, weak passcodes, or malicious apps, someone could potentially use it fraudulently. That's why it's essential to secure your device with strong authentication and keep your software up to date.