blog image
How to identify and protect yourself from phishing emails
Author image
Ailo
14 October 2024
Online scams and fraud are designed to trick you into disclosing your personal information or giving away your money. Anyone can be targeted, so it’s important to always remain vigilant.
We are aware of a current email phishing campaign targeting Australian renters. The email claims to be from the recipient’s real estate agency and asks the recipient to change the account details into which they are paying rent.
We know of renters, and non-renters, who have received versions of this email claiming to be from various real estate brands across Australia.
If you have received one of these emails, you should ignore it and report it to your real estate agency.

What is phishing

Phishing is a common way scammers try to trick you into giving them personal information such as username and passwords, verification codes, and bank account details. Phishing attempts come via email, where scammers use different social engineering tactics to impersonate reputable senders, like your bank or real estate agency.

How to protect yourself from phishing

Knowing how to protect yourself from phishing can go a long way toward helping you protect your personal information. Here are four easy steps you can take today:
  1. Use strong passwords
  2. Turn on multi-factor authentication when logging into an online service or account (including your personal email address)
  3. Update software and turn on automatic updates
  4. Learn how to recognise and report phishing scams (more info below on this)
More tips on how to secure your email and stay safe online can be found at cyber.gov.au.

How to spot phishing scams

Here are some tell-tale signs of a phishing email, along with an example of a current email phishing campaign targeting Australian renters:

Sender address

This might be unusual, misspelt or slightly different from the correct email address.

Generic greetings and sign offs

Phishing emails are sent out to hundreds of people at once, so use generic greetings and sign-offs. They often don’t include contact details. In the example below, the email does not include the renter’s name, the rental property address, or the name of the property manager.

Poor grammar and spelling

This can be a tell-tale sign, but it isn’t always the case. In the example below, ‘property management’ is misspelt.

A false sense of urgency

Phishing emails will often encourage you to click a link or download an attachment to avoid a problem to create a sense of urgency.
Image block
Pictured above: An image of a phishing email that is currently circulating in Australia.

How to report suspicious emails

If you are unsure, verify the request for information from the sender by using a phone number or email address you know to be correct. Do not use the contact details you have been sent via email.
If you are concerned that have been a victim of a scam, please report it to the Australian Government's Scamwatch.
If you receive a suspicious email or see a transaction in your Ailo account that you are unsure of, please report your concerns to Ailo by emailing hello@ailo.io.
For more information on Ailo’s security and how we safeguard your data, please visit ailo.io/security.