Telstra Scam: Fake Calls, Remote Access Tricks and Billing Emails

A Telstra scam is a call, text or email from criminals pretending to be Telstra, usually claiming your internet has been hacked, your service is about to be cut off, or your bill payment failed. The goal is to get remote access to your computer, your banking login or your card details. If someone claiming to be Telstra asks for any of these unexpectedly, hang up or delete the message, then check your account through the official My Telstra app or Telstra’s website, which you reach by typing the address yourself.

Telstra is one of Australia’s biggest phone and internet providers, so a message with its name on it looks routine to a lot of people. Scammers use that trust. If you let someone onto your computer or paid a fake bill, you’re not foolish: these callers work from practiced scripts and often sound calm, patient and technical. What matters now is acting quickly.

Common versions of the Telstra scam

Most Telstra scams fall into three groups: impersonation calls, remote access scams and fake billing emails or texts.

Version	How it usually looks
“Your internet has been hacked” call	A caller says hackers are using your connection or IP address, and they need to check your computer to fix it.
Disconnection threat	A recorded message or caller says your phone or internet will be cut off today unless you press a key, pay or confirm details.
Remote access “tech support”	The caller asks you to install an app or type a web address so they can “fix” a problem, then takes control of your computer.
Fake refund	You’re told you’ve been overcharged and are owed a refund, then the scammer “accidentally” sends too much and asks you to pay it back.
Fake bill or payment failed email	An email with Telstra branding says a payment was declined or your account is overdue, linking to a fake payment or login page.
Rewards or loyalty text	A text offers points, a gift or a discount and asks you to sign in or pay a small fee through a link.

Scammers also pretend to be the NBN or other internet companies with the same scripts. The pattern is the same whichever name they use. Texts asking for a small fee through a link also borrow Australia Post’s name, as our Australia Post scam guide explains.

How remote access scams work

The remote access version does the most damage, so it’s worth understanding in general terms. The caller creates a problem, such as hackers, a virus or a compromised connection, and then offers to fix it. They talk you through installing a legitimate remote access program, which lets them see and control your screen.

Once connected, they may show you fake “evidence” of hacking, ask you to log in to online banking to “check for fraud” or to receive a refund, and then move money while your screen is hidden or they’re keeping you talking. Some install software that lets them return later. They often ask you to stay on the phone for a long time and not to talk to anyone else, including your bank.

The same technique shows up in Microsoft scams and other tech support impersonation. Our guide to vishing covers phone scams more broadly, and the ATO scam is another common Australian impersonation call. Callers also pose as bank fraud teams and ask for remote access, as our Westpac scam guide shows. Fake bill texts and SIM swap attempts also use other telcos’ names, as our Optus scam guide explains.

Warning signs of a Telstra scam

• An unexpected call about a technical problem you didn’t report.
• Any request for remote access to your computer or phone, or to install an app during an unexpected call.
• Requests to log in to online banking while someone watches, or to read out one-time codes.
• Threats of immediate disconnection, fines or legal action.
• A “refund” that’s too large and needs paying back, often by gift card, crypto or bank transfer.
• Links in emails or texts that go to web addresses that aren’t Telstra’s, even if the page looks right.
• Caller ID showing a real-looking number. Numbers can be spoofed, so caller ID proves nothing.

Telstra’s own scam guidance describes these patterns and explains how it does and doesn’t contact customers. Check its official website for the current advice, since the details change over time.

What to do right now

1. End the contact. Hang up, don’t reply to the message and don’t click links. If you’re connected to a caller, say you’ll call back and end the call.
2. If someone has remote access, disconnect the computer from the internet straight away by turning off Wi-Fi or unplugging the cable. Uninstall the remote access program, and have the device checked or reset before you use it for banking again.
3. Call your bank immediately using the number on your card or in your banking app. Tell them you’ve been scammed and ask them to stop payments, block cards and check for new payees.
4. Change your passwords from a different, clean device, starting with email, banking and your Telstra account, and turn on two-factor authentication. Our guide on what to do if your account was hacked goes account by account.
5. Check your Telstra account through the official My Telstra app or website for anything you didn’t request, such as new services, SIM changes or orders.
6. Protect your identity if you shared ID documents, your date of birth or your driver license. IDCARE, Australia and New Zealand’s not-for-profit identity and cyber support service, can help you work out what to do.
7. Save evidence: the phone number, email address, messages, screenshots and payment details.

Where to report a Telstra scam in Australia

• Scamwatch: report the scam to Scamwatch, run by the National Anti-Scam Centre, which uses reports to warn the public and disrupt scams. Our guide on how to report a scam to Scamwatch explains what to include.
• ReportCyber: if you lost money or data through a cybercrime, such as remote access to your computer, report it through ReportCyber, the Australian Government’s online cybercrime reporting service.
• Telstra: its official website explains how customers can report scam calls, texts and emails. Use the contact details you find there, not any in the scam message.
• Your bank: report it as fraud even if you haven’t lost money yet, so it can watch your accounts.

For every reporting route in one place, including other countries, see our guide on how to report a scammer.

Can you get your money back?

It depends on how the money left your account and how quickly you act.

• Card payments: ask your bank about a chargeback or fraud claim as soon as possible.
• Bank transfers: your bank can try to recall the money, but this works only sometimes, and usually only if you’re very quick.
• Gift cards and crypto: contact the card issuer or exchange straight away, but these payments are often impossible to reverse.
• If your bank says no: you can make a complaint to the bank, then take it to the Australian Financial Complaints Authority (AFCA), which is free.

Watch for anyone who contacts you afterward offering to recover your money for a fee, sometimes posing as Telstra, the police or a lawyer. These are recovery scams.

A worked example

This is an illustrative scenario, not a real case. Margaret, who is retired, gets a call one morning from a man who says he’s from Telstra’s technical team. He tells her that hackers are using her internet connection and her bank account could be at risk. He asks her to go to her computer and type in a web address so he can “secure” it.

1. Margaret starts to follow along, then remembers her daughter mentioning calls like this. She says she’ll call Telstra back herself and hangs up.
2. She opens the My Telstra app, which shows no faults or messages on her account.
3. She calls her bank on the number on her card to say what happened. Because she didn’t install anything or log in, the bank simply notes it on her account.
4. She reports the call to Scamwatch and tells her friends at her walking group.

If Margaret had given remote access and logged in to her bank, the right order would have been: disconnect the computer, call the bank, change passwords from another device, then report to ReportCyber and Scamwatch.

How to protect yourself next time

• Use the official My Telstra app or website to check bills, faults and messages, rather than links in emails or texts.
• Make a family rule: nobody gets remote access to a computer after an unexpected call.
• Turn on two-factor authentication for email and banking, and use a password manager.
• Keep your device updated and use reputable security software.
• Learn to read links. Our guide on how to spot a phishing email shows how to check where a link really goes.
• Talk to older relatives, who are often targeted by remote access scams.

If scammers are using your business name in fake support calls and angry posts are appearing when people search for you, our personal reputation management team can help you see what’s showing up and what can be corrected.

Common mistakes to avoid

• Staying on the line “just to see”. Scammers are skilled at keeping people talking.
• Calling back the number that called you. Use contact details from Telstra’s official website or app.
• Using the same computer for banking before it’s been checked after remote access.
• Paying back a “refund”. The extra money you see is usually your own, moved between your accounts.
• Keeping it to yourself. Banks and support services deal with these cases every day and won’t judge you.

Frequently asked questions

Does Telstra call customers about hacked internet connections?

An unexpected call saying hackers are using your internet, especially one that asks for remote access or your banking login, is a common scam pattern. Hang up and check your account through the My Telstra app or Telstra’s official website.

What should I do if I gave a Telstra scammer remote access?

Disconnect the device from the internet, remove the remote access app, call your bank on the number on your card, and change passwords from a different device. Then report it through ReportCyber and to Scamwatch.

How can I tell if a Telstra bill email is real?

Don’t use the link. Open the My Telstra app or type Telstra’s website address yourself and compare. If the bill or payment issue isn’t there, the email is fake.

Where do I report a Telstra scam?

Report it to Scamwatch, and through ReportCyber if you lost money or data to a cybercrime. You can also tell Telstra through its official website. IDCARE offers free support if your identity details were exposed.