Step 1 — read the format
The shape of the number narrows down what kind of caller you are dealing with before you know anything else.
- 04xx xxx xxx: an Australian mobile. A person, a small business, or a dialler using a mobile range.
- (02) (03) (07) (08) + eight digits: a geographic landline tied to a state, though the caller need not be there.
- 1300 / 13 xx xx: a business or government local-rate line. Leased, so it proves nothing about legitimacy.
- 1800: freecall, used heavily by banks and agencies — and therefore imitated.
- 190x: premium rate. Never call one back to 'sort out' anything.
Step 2 — read the reports
Automated diallers call in bulk, so by the time a number reaches you, others have usually already met it. Look for volume and consistency rather than a single angry comment: ten reports describing the same script is strong evidence, and one report describing a rude courier is not.
Recency matters too. Numbers get recycled between businesses, so reports from years ago describe a different tenant than reports from last week.
Step 3 — discount what cannot be verified
Caller ID is supplied by the calling network, not verified by your phone, so a number that matches a bank's published line proves nothing. A professional-sounding voice, hold music, a reference number and a 'call centre' background are all trivially staged. Knowing your name and suburb proves nothing either — that information is in circulation.
Step 4 — verify out of band, always
The rule that makes the previous three steps safe: whenever a caller wants money, credentials, a code or access to a device, end the call and contact the organisation on a number you found yourself. A genuine caller loses nothing by you calling back. A scammer loses everything.
Where to report it in Australia
Reporting a call twice — once officially, once publicly — is what stops the next person answering it.
- Scamwatch (run by the National Anti-Scam Centre) at scamwatch.gov.au collects scam reports and publishes national trends.
- The Australian Cyber Security Centre at cyber.gov.au handles cybercrime reports, including phishing links sent by SMS.
- Your bank's fraud line, immediately, if any account, card or code was discussed.
- The number's page on NumberCheck, so the next Australian who searches it sees your experience straight away.