Skip to main content Skip to main navigation
Skip to access and inclusion page Skip to search input


I received an email from Westpac. How do I know if it is legitimate or fake/scam/spam/hoax?


Scam emails (also known as ‘phishing’) are designed and written to look as though they come from legitimate businesses. They often contain a corporate logo and link to a fake copy of the website.

Through this deception they trick people into giving out personal or banking details.

Remember, Westpac will never ask you to update, verify or correct any Online Banking details directly into an email reply.

5 ways to spot a scam email

  • Does it instruct you to click on a link to Westpac’s Online Banking sign-in page, open an attachment or call a number?
  • Does it ask for sensitive financial information or for you to confirm the security of Online Banking?
  • Does the email have poor grammar and punctuation?
  • Check the sender’s email address; does it appear to come from a legitimate source?
  • Familiarise yourself with some of latest scam emails.

Reporting scams is really important as it allows us to quickly investigate and potentially minimise the chance of others being affected. Here’s what to do:

  • Forward the suspect email to This inbox is monitored 24/7; you’ll receive an auto-reply to confirm we’ve received it
  • Delete the fake email from your inbox, sent and trash folder.

If you believe the email was a hoax and you’ve responded to the email, clicked on the link, provided sensitive financial information or downloaded any attachments, it’s possible that your security could’ve been compromised.  In that case, or if you notice a transaction you did not make, contact us immediately on 132 032.