Five phone scams targeting Australian seniors in 2026 — and how to spot them
The five scam patterns Scamwatch is reporting most heavily in early 2026, what each one sounds like on the phone, and the simple questions that trip every one of them up.
Phone scams targeting older Australians have evolved fast over the past two years. The crude, broken-English calls of a decade ago have been replaced with polished impersonations of the ATO, Centrelink, the major banks, and — increasingly, using AI-generated voice — even family members.
According to the ACCC's 2025 Targeting Scams Report, Australians aged 65 and over were the single hardest-hit age group: they make up about 17 per cent of the population but account for 26.5 per cent of all losses reported to Scamwatch. In dollar terms, Australians 65+ reported $88.8 million in scam losses to Scamwatch alone in 2025. Phone calls are no longer the most common contact method overall — online channels and social media have overtaken them — but they remain one of the highest-loss methods per incident, with $25.8 million in phone-scam losses reported in just the first four months of 2025.
This is what's actually happening on the line right now. We've broken down the five patterns we hear most often, what each one tries to get your parent to do, and the one question that almost always trips them up.
1. The "Hi Mum" / "Hi Dad" scam (also called the family-impersonation scam)
What it sounds like — the original version. A text message, usually on WhatsApp, from a number the family doesn't recognise: "Hi Mum, I've lost my phone. This is my new number. Can you save it?" A few minutes later: "I'm in trouble — can you transfer some money urgently? I'll explain when I get home." The Hi Mum scam was originally a text-based scam and exploded in Australia in 2022, when more than 1,150 Australians lost a combined $2.6 million in just seven months — and 95 per cent of those losses were reported by people over 55.
What it sounds like now — the voice version. Banks including NAB have warned that the same scam is now being run as a phone call, using AI voice-cloning. A scammer takes a short audio sample from a child's social-media video or voicemail greeting, clones the voice, and calls the parent in a panic: "Mum, I'm in trouble, I need you to send money urgently." CHOICE Magazine and the University of Melbourne's Centre for AI and Digital Ethics have both warned the technology is becoming "almost indistinguishable" from a real voice. Reports of AI-voice scams to Scamwatch are still rare in absolute terms, but every major Australian bank now lists them as a top emerging threat.
Why it works. It bypasses the obvious "is this a scam?" check because the opening is emotional, not financial. By the time money is mentioned, the parent has already mentally accepted that they're talking to their child.
How to spot it. Always call the original number back. Not the new one. If your son or daughter has genuinely lost their phone, they'll have access to a friend's, a hotel reception's, a workmate's — the original number doesn't have to ring through, but the new number should never be trusted as the verification path. Agree on a family code word that real family members will know on demand. "What was the name of our first dog?" is better than "is this really you?"
2. The ATO tax-debt scam
What it sounds like. Recorded voice or live operator: "This is a final notice from the Australian Taxation Office regarding outstanding tax debt. A warrant has been issued for your arrest. To avoid further action, press one to be connected to a case officer."
Why it works. Authority pressure plus fear of arrest. Real tax debts feel embarrassing to discuss with family, so the target often handles it alone. The scammer typically demands payment via gift cards, cryptocurrency, or transfer to a "secure ATO holding account."
How to spot it. The ATO will never threaten arrest, demand gift cards, or ask for payment in cryptocurrency. They will never call you out of the blue without a prior letter. If you're worried you really do have a tax debt, hang up, then call the ATO directly on 13 28 61 for individual enquiries — this is the official number printed on the ATO's website. If you want to report a scam call, the ATO's dedicated scam-reporting line is 1800 008 540. Never use the number the caller gave you.
3. The bank fraud-alert scam
What it sounds like. "I'm calling from the Commonwealth Bank fraud team. We've detected a suspicious transaction of $2,800 on your account. To verify it wasn't you, I'll need to confirm your account details and send you a one-time code."
Why it works. The premise is plausible — banks really do call about fraud. The scammer then walks the target through "verification" steps that hand over enough information (account number, login, one-time code) to drain the account, often within minutes.
How to spot it. No bank will ever ask you to read out a one-time code over the phone — those codes exist because they're meant to stop someone else from authorising a transfer using just your password. If you're unsure whether a fraud-team call is real, hang up and call the number on the back of your bank card. The real fraud team will be happy for you to do that.
4. The NBN / Telstra disconnection scam
What it sounds like. "This is the NBN Co technical team. We've detected illegal activity on your internet connection and your service will be disconnected within 24 hours. Press one to speak to a technician." The technician then asks for remote access to "fix the problem."
Why it works. Loss of internet feels urgent, and most older Australians don't know that NBN Co doesn't sell directly to consumers — they only sell wholesale to retail providers like Telstra, Optus and TPG. The scam ends with either remote access being granted (so the scammer can install malware or transfer money from a banking app) or "verification fees" being requested.
How to spot it. NBN Co does not cold-call retail customers to sell services or threaten disconnection. As NBN Co's own scam-warning page makes clear: "NBN Co is a wholesale-only company and does not sell services directly to the public. We will never make unsolicited calls or door knock to sell broadband services." NBN Co also confirms it never makes automated robocalls about disconnections. If your home internet is genuinely going to be disconnected, it's your retail provider — Telstra, Optus, etc. — who'd contact you. If anyone asks you to install software like AnyDesk or TeamViewer to fix a problem they've called you about, hang up immediately.
5. The Centrelink "overpayment" scam
What it sounds like. "This is Centrelink calling about an overpayment on your pension. There's an outstanding balance of $1,840 that needs to be repaid today, or your payments will be suspended. We accept payment via gift card or bank transfer."
Why it works. Pension reliance plus fear of payment suspension. Many older Australians are on tight budgets where even a brief gap in pension payments would be a real problem, and the scammer leans on that anxiety hard.
How to spot it. Services Australia's own guidance on Centrelink impersonation scams puts it plainly: "we'll never ask you to transfer money on the phone … we won't make unexpected phone calls threatening to arrest you … we also won't ask you to pay with gift cards or digital currency … if you do owe money, we'll write to you via post or your myGov inbox to let you know." Hang up, then log into myGov yourself (don't use any link the caller sent you) and check your inbox.
The single question that trips up almost every scam
If you only remember one thing from this article, remember this: before doing anything the caller asks, hang up and call the organisation back on a number you found yourself. Not the number the caller gave you, not a number from a recent text message — a number from the official website, the back of your card, or your most recent bill.
Real organisations are happy for you to do this. They expect it. A real ATO call centre worker, a real bank fraud team, a real Centrelink officer will all say "yes, please do call us back on 13 28 61 / the number on your card / 13 23 00 — we'll be here."
A scammer will tell you that's not necessary. Or that the matter is urgent. Or that they'll have to escalate it if you do. That escalation pressure is itself the giveaway.
How FamilySentry helps
FamilySentry sits between unknown callers and your parent's phone. Every unknown call is screened in real time by AI configured to recognise the scam scripts being run in Australia right now — the exact ones above and dozens more. If the caller starts walking through the ATO arrest script or the NBN disconnection script, your nominated family members get an instant SMS or push alert while the call is still happening, with a summary of what's being said and the option to end the call remotely.
Calls from doctors, family, and your parent's known contacts ring through normally — the protection only applies to numbers your parent doesn't already know.
If you'd like to be among the first families using it when we launch publicly, you can join the founding-member waitlist — the first 100 families get three months free at launch, plus 20% off the subscription forever.
Further reading
- Scamwatch (ACCC) — official scam reporting service. Report scams online or call 1300 795 995.
- IDCARE — free national identity and cyber support service for Australians who've been the victim of a scam. Call 1800 595 160.
- eSafety Commissioner — guidance on online and phone safety for older Australians.
Found this useful? Share it.