It starts with a call from someone claiming to be your bank. They know your name. They know your bank. They even know your credit card number. There’s been “unusual activity” on your account, they say – and they just sent you a one-time passcode to verify your identity so they can assist.
You read out the code and feel reassured. Moments later, your funds are gone and the bank refuses reimbursement, citing a breach of terms because you voluntarily shared your passcode.
This is not a niche or isolated scam. It’s part of a growing pattern we’re seeing across Australia and beyond: cyber criminals are merging digital and real-world tactics in ways that make these frauds more convincing, harder to stop, and far more damaging.
