Centrelink Scam 2026 — Fake SMS Messages Stealing Australian Payments
Fake Centrelink and Services Australia SMS messages are one of the most common scams targeting Australian households in 2026. These messages are sent to millions of Australians, and because Centrelink provides payments to millions of people, a significant proportion of recipients are genuine Centrelink customers — making the scam effective at scale even with a low response rate.
What the Fake SMS Looks Like
The scam SMS typically reads something like: "Services Australia: Your payment has been suspended due to an unverified identity check. Click here to verify your identity and avoid a payment pause." The messages appear to come from "Services Australia" or "Centrelink" in your message thread — criminals can spoof the sender name on SMS messages, which means the fake message may appear in the same thread as genuine messages from Services Australia that you have received previously.
The Technical Trick — SMS Sender Spoofing
Most Australians do not realise that SMS sender names can be faked. A text message can be sent with "Services Australia" as the sender name by anyone — you do not need to be Services Australia to do this. This means that a fake SMS can appear alongside genuine messages in your messaging thread, lending it significantly more credibility than it would have as a standalone message. Banks, government agencies, and parcel delivery services are all commonly spoofed using this technique.
What Happens If You Click
The link takes you to a fake myGov or Services Australia website that asks for your myGov login credentials. Once you enter these, the scammers immediately access your real myGov account and change your payment bank details to their account, capturing your next Centrelink payment. They may also access linked tax accounts and submit a fraudulent tax return to redirect any upcoming refund.
Other Centrelink Scam Variants
Phone calls claiming to be from Centrelink are also common — callers say there is a fraud investigation involving your account, your payments are about to be stopped, or there is an overpayment you must repay immediately. These calls use urgency and authority to prevent you from thinking carefully. A genuine Centrelink call will never demand immediate payment by gift card, cryptocurrency, or bank transfer to a new account.
How to Respond
Do not click any link in an SMS claiming to be from Centrelink or Services Australia. If you are concerned about your payments, call Centrelink directly on 136 240 or log in to myGov by typing my.gov.au yourself. If you have already clicked a link and entered your details, change your myGov password immediately and call Centrelink to report potential fraud on 136 240. Enable MFA on your myGov account to prevent future unauthorised access even if your password has been compromised.
Protecting Family Members Who Receive Centrelink Payments
If you have family members who receive Centrelink payments — parents, young adults, or others — ensure they know about this scam specifically. Older Australians receiving age pension, and young people receiving Youth Allowance, are specifically targeted due to their dependence on the payments and potential unfamiliarity with SMS spoofing. The simple message to share: any SMS claiming to be from Centrelink that contains a link is a scam. Centrelink does not send links in SMS messages requiring action. Share this article with them, or have the conversation directly.
Centrelink's Genuine Communication Channels
Genuine Services Australia communications use specific channels: your myGov inbox for formal notices; SMS messages that say "Services Australia" and contain only information (not links requiring action); and phone calls from 136 240 for payments-related matters (though you should call them back on this number rather than trusting an inbound call). If you are ever unsure whether a communication from Centrelink is genuine, log in to myGov directly at my.gov.au and check your inbox — all genuine notifications from Services Australia will also appear there. IntrusionX provides security awareness education for individuals and families — contact us for support in setting up the right protections for your household.
Need help protecting your business or home?
IntrusionX provides independent cybersecurity for Melbourne businesses and families. Free consultation, no lock-in contracts.