Security and privacy

First, take a moment to breathe. It’s not your fault that you were targeted, and there’s no need to be ashamed.

Next, gather as much information as you can about the scam. 

This includes:

• What happened?

• When did it happen?

• Who contacted you?

• How did you respond?

Once you have this information file a report at ReportCyber. 

If you’ve supplied financial information (including credit card details, bank account, or debit card information), or believe that a third party may have gained access to your financial information, contact your bank immediately. 

To help inform others about new and emerging scams, report to Scamwatch.

For further support reach out to:

Beyond Blue
1300 22 4636 or online chat (24 hours a day, 7 days a week)

Lifeline
13 11 14 or online crisis support chat (24 hours a day, 7 days a week)

If you've clicked on a suspicious link, it's important to act quickly. 

Here’s what you can do:

• Disconnect your device from the internet. This may help to prevent any malware (malicious software) from spreading to other devices on your network or stealing your personal information.
• Scan your device for any viruses or malware (malicious software) that may have been downloaded when you clicked or tapped on the suspicious link. (You may need to download and install an antivirus program to do this if you don’t have one already.)
• Change your passwords for all of your online accounts, including your My Medibank account.
• Monitor your bank account for any suspicious activity. 
• File a report at ReportCyber.

We'll never contact you to demand money, ask for your password or sensitive information, or call you outside our business hours unless we’ve previously arranged it with you. (If you have previously placed a security question or PIN on your Medibank account, we’ll use this to confirm your identity every time you contact us.) 

Some more tips: 

• If the caller is threatening you or pressuring you to make a decision, hang up the phone. 
• Never let anyone control your accounts or devices remotely unless you have verified their identity. 
• If the caller makes an offer that sounds too good to be true, it probably is. 
• If you’re unsure about the identity of the caller, hang up and call us directly on 132 331. 

If you’re ever unsure about who’s calling you, don't answer. They can leave a voicemail if it’s important.

Visit our How to protect yourself for more information.