Don’t get caught out by a phishing scam

Scammers are deploying increasingly sophisticated phishing attacks, so it’s important to ensure that you’re aware and remain vigilant.

What is phishing?

Phishing is a fraudulent attempt to obtain sensitive information from you, such as your bank account numbers, credit card details, usernames and passwords. Scammers use this information to carry out fraudulent activity, for example, using your credit card or stealing money from your bank account.

How do phishing scams work?

Scamming occurs when scammers try dishonest approaches to steal your personal information or money. They may attempt to gain this information by impersonating a legitimate business and contacting you via email, text message, phone or through social media. Scammers use a legitimate company’s brand and logo to make it appear authentic, and then direct you to a fake website.

If someone is asking for your personal details, take a moment to consider the source and don’t feel pressured to pass on information there and then. Instead, you can go directly to the company via a source you trust (e.g. visit their website via Google, and check that the URL makes sense) and ask if they have approached you in this way.

Email phishing scams

Scammers often try to get you to click on a link or open an email attachment. Here are some ways that they may encourage you to click:

• • By attaching a fake invoice
  • By telling you they’ve noticed suspicious activity
  • By telling you that you owe money and give you a link to click
  • By claiming there is a problem with your account

Tips to help you stay safe from email scams

• • Don’t click on links unless you’re sure the email is authentic
  • Use security software on your computer, and regularly update your system software
  • Protect your accounts using two factor authentication (2FA)
  • Use a password manager
  • Always remember to back up your phone and computer data

Make sure your Shell Energy correspondence is authentic

• • Our invoices are sent out from your dedicated account manager’s email address – [email protected]. Please check these details carefully.
  • We do not use text messaging for collecting invoice payments.
  • If we change bank accounts, you can expect to receive extensive communication about this change directly from us. If you notice the bank account details on your invoice have changed and you have not been well-informed in advance, please contact your Account Manager.
  • Any request to change important information will be sent from your Account Manager. If you receive requests from other email addresses, please contact your Account Manager.
  • Check that the website address is correct. Our official website is www.shellenergy.com.au.
  • If in doubt, contact your dedicated Account Manager.

What to do if you suspect a scam or fraud

• • Do not provide any personal information or transfer any money.
  • Contact your Account Manager or call us immediately on 13 23 76.

For more information on scams, visit the Australian Competition and Consumer Commission website.