How scam emails work
Scam emails tend to follow the same basic structure. They open with something plausible - a missed delivery, a billing problem, a tax refund - then add a nudge of urgency to get you moving before you've had a moment to think. Phrases like 'action required' or 'final reminder' are designed to feel routine while quietly pushing you toward a quick response. The goal is always the same: get you to click a link, open an attachment or enter your details.
Why they're harder to spot these days
Modern scam emails can look almost identical to genuine ones - same logos, same layouts, same tone. They're also well-timed, often arriving around tax season or busy shopping periods when you're expecting that kind of message anyway.
Small signs worth noticing
The clues are often subtle. It's worth pausing if you receive a delivery notice for something you didn't order, a prompt about an account you haven't used recently, or an unexpected request to update your payment or personal details. Emails that push you toward a link or attachment rather than your usual login process are also worth treating with caution.
Three habits that make a real difference
Avoiding scams isn't about being constantly on guard. Before acting on any email, take a moment to ask whether it actually makes sense. If you need to check something, go directly to the website rather than clicking through from the email. And if something feels off, use a phone number or contact address you've found yourself rather than one provided in the message.
If something feels wrong, trust that instinct
You don't need to prove an email is a scam - you just need to avoid engaging with it. Log in to your account directly or contact the organisation through a number you already trust. Suspicious emails can also be reported to WA ScamNet, Scamwatch or the Australian Cyber Security Centre, which helps track scam activity more broadly.
If you've already responded to something suspicious
The most important thing is to act quickly and calmly. Contact your bank straight away if any financial details were involved, change your passwords - especially if you use the same one across multiple accounts - and enable multi-factor authentication wherever possible. These steps can significantly reduce the impact.
Sources:
