It seems like every other week there’s a new scam doing the rounds, and this time, it’s Commonwealth Bank customers who are in the crosshairs.

If you’ve received a text message claiming your Award points are about to expire and urging you to click a link to redeem them—stop right there! This is the latest trick in a mass text message 'campaign' by fraudsters, and it’s already catching out unsuspecting Aussies.

The Commonwealth Bank has issued a fresh scam alert after fraudsters launched a mass text message ‘campaign’ targeting unsuspecting Aussies. So far this year, scammers have pocketed a staggering $119 million—with phishing scams seeing the biggest surge in losses.

The latest scam involves a fake text message claiming your Award points are about to expire. The message urges you not to ‘miss out’ and includes a dodgy link to click in order to ‘redeem your points’.

Commonwealth Bank has warned Aussies about a mass text message scam claiming their Award points are about to expire and urging them to click a suspicious link. Image source: AFP News Agency / Youtube.

According to Commonwealth Bank, the fraudulent SMS may also encourage you to call a number, reply to activate a link, or hand over sensitive details – including your banking credentials.

‘These messages might seem legitimate, and may even show up in the same thread as real messages from us, however, they are not from CommBank,’ the bank warned.

‘We will not ask you to redeem points via a link in an email or SMS message.’

The bank urged all customers to only use the official CommBank app or go directly to the Commonwealth Bank website when doing online banking, never via a link sent in a message.

‘Be suspicious of any message that asks you for sensitive information, or to complete tasks like updating software, or giving remote access via email or text,’ the bank advised.

If you're ever in doubt, the safest move is to visit the official CommBank website or contact them directly.

Scamwatch figures from the National Anti-Scam Centre reveal that Australians lost $119 million to scams in just the first four months of 2025. While the total number of reports dropped by 24% to 72,230, the total amount lost actually rose by 28% compared to the same period last year.

Also read: Scammers took $66.6 million from seniors—could this 30-minute tip stop them?

Phishing scams, where criminals pose as trusted organisations like government departments or major banks, caused the sharpest rise in losses: $13.7 million this year, up from $4.6 million in early 2024.

‘Scams are affecting Australians of all ages, often beginning with an unprompted or unexpected contact via social media and other digital platforms,’ said ACCC Deputy Chair Catriona Lowe.

To help reduce losses, banks have started rolling out a ‘confirmation of payee’ feature. This alerts customers when a recipient’s name doesn’t match the account number, offering another layer of protection.

How to protect yourself from text message scams

• Never click on links in unsolicited messages—even if they appear to come from your bank.
• Don’t share personal or banking information via text, email, or over the phone unless you’re certain who you’re dealing with.
• Use official apps and websites to access your accounts.
• Be wary of urgent language. Scammers often try to create a sense of panic or urgency.
• Report suspicious messages to your bank and Scamwatch.

Read more: Is the ATO messaging you more than usual? Here are some things to watch out for during tax season

Key Takeaways

• Commonwealth Bank has warned Aussies about a mass text message scam claiming their Award points are about to expire and urging them to click a suspicious link.
• The scam messages may appear in the same text thread as genuine CommBank messages, but the bank says it will never ask customers to redeem points via a link in an email or SMS.
• Aussies have lost $119 million to scams so far in 2025, with phishing scams – where scammers impersonate banks and government agencies, causing the biggest rise in losses.
• Commonwealth Bank urges customers to only access their banking via the official CommBank app or website, and to be wary of messages asking for sensitive info or prompting software updates or remote access.

Have you received a suspicious message lately? Or maybe you’ve got a tip for spotting a scam? Share your experiences in the comments below!

 

[7777]

Don't reply to any bank text messages urging you to respond immediately, the same applies to banks who call you on the phone. When you see or hear anything, with reference to a bank attempt to communicate with you, via phone or text or email, don't respond, but instead, call your bank and ask is there anything that they need to talk to you about, specifying that you received a suspicious call, text or email, claiming to be the bank. Never rush to answer calls or text messages from the bank. Always stay calm, call the bank and stay safe and stay happy.

 

[Floozelle]

I have received this text. I don’t have an account with CBA so deleted it and reported it as scam

 

[Littleboy8]

Ha! I knew it was a scam as soon as I got it yesterday so I deleted and reported it. Idiots.

 

[Cheezil]

Hhmm always getting suss mail- today's was actually from Commbank, but they were asking if I'm ready for tax time- opened the email but too chicken to click on any links etc so it got deleted regardless whether it was legit or not!
Can't trust anyone or anything these sad times!