The text appeared in the same thread as my real bank codes. Is it real?

No! Scammers can spoof 'Caller ID' to make their fake SMS appear in your legitimate Commonwealth Bank message thread. This is called SMS spoofing.

What should I do if I suspect my account is compromised?

Call the Commonwealth Bank immediately using the phone number printed on the back of your debit or credit card. Never use a number provided in a text message.

Will the bank ask for my NetCode to stop fraud?

NEVER. A NetCode authorizes an action (like sending money or changing a password). The bank already has access and will never need your code to 'stop' a transaction.

Commonwealth Bank Scam Checker

Commonwealth Bank scam checker for fake security and payment alerts.

Got an SMS from 'CommBank' warning about a blocked card or suspicious login? Pause. This is a common tactic to hijack your NetBank account. Verify the alert safely with our scanner.

Security Insight

Bank impersonation fraud is devastating. Scammers use fake fraud alerts to cause panic, manipulating victims into handing over their physical NetCode SMS tokens.

Instant risk analysis

No signup required

Scans links & sender identity

Check CBA Message on Homepage Run Advanced SuperScan

Spotting a fake CommBank alert

The Commonwealth Bank will never text you a link asking you to log in to 'cancel' a transaction. Protect your funds by recognizing these critical attack patterns.

Fraud alert urgency messages

Scams frequently claim suspicious transactions to trigger panic and immediate compliance.

Fake account-verification requests

Messages may ask for credentials, one-time codes, or personal details under the guise of account protection.

Payment-redirection instructions

Scammers can push payment changes or card updates to attacker-controlled destinations.

SMS-first phishing workflows

Many campaigns start by text and then move to fake portals or callback scams.

What IsThisSpam checks before you trust a sender

Quick verdicts are useful, but the real value is understanding why something looks safe, uncertain, or risky.

Identity and channel mismatch

Message branding can be copied, but sender and destination consistency are harder to fake well.

Credential and OTP capture behavior

Requests for access codes or sign-in details are high-risk in unsolicited contact contexts.

Pressure-based account narratives

Threats of lockout or fraud escalation are common social-engineering tactics in banking scams.

Transaction-authority spoofing

Scammers impersonate trusted institutions to push payment or verification actions quickly.

Related guides

Use the checker for the fast answer, then read the deeper guidance for recurring scam patterns.

MyGov Scam Checker

Companion Australian distress-intent page for government-themed impersonation messages.

Read the guide

Scam Education

Review common scam categories and prevention patterns.

Read the guide

FAQ

These are the questions people usually ask right before they click, reply, or pay.

Free scan first, deeper analysis when you need it

Check the sender before you trust the message.

Start with a fast scan, then move to SuperScan when the message involves money, account access, or sensitive documents.

Check CBA Message on Homepage Run Advanced SuperScan