Cyber security - staying safe online
Advice to on how to stay safe online. Be alert to scams, and take extra care to protect your information.
How to spot a scam
Scammers often use tactics designed to create panic or urgency, hoping you'll act before you have time to think. Messages sometimes copy the brand logo, font or colours to seem more believable.
Common signs of a scam may include
Urgent threats or messages claiming your power will be disconnected within 24 hours unless you act immediately.
Requests for personal information like emails or calls asking for your password or banking details.
Suspicious email addresses - Powershop will only ever contact you from an email ending in @powershop.com.au.
Unusual payment method requests, asking for payment via gift cards, cryptocurrency, or unfamiliar platforms.
What we will never do
We will never ask for your password.
We will never ask for your credit card number.
We will never threaten to disconnect your power within 24 hours.
We will never contact you from an email address that doesn’t end in @powershop.com.au.
What you can do
Pause and think, don’t let urgency cloud your judgment.
Check the source, and look closely at email addresses and caller IDs.
Never share your password, not with anyone, not ever.
Enable multi-factor authentication on your Powershop account.
When in doubt, call us. If something doesn’t feel right, give us a call directly using the contact details on our website.
Common scam tactics
Scammers often try to:
Create urgency
Making you feel like you don’t have time to think or check.
“URGENT: Your Powershop account is overdue. Your electricity will be disconnected within 24 hours unless payment is made immediately. Click here to pay now."
Offer fake rewards or refunds, too good to be true
“Congratulations! You’ve been selected to receive a $200 Powershop energy credit. Click the link to claim your reward before it expires!”
Impersonate authority
Pretending to be from Powershop or another trusted organisation.
“This is Sarah from Powershop’s billing department. We’ve detected suspicious activity on your account. Please confirm your identity by providing your date of birth and account password.”
Information Familiarity
Unfortunately, data breaches do happen, and some of your personal information may already be in the hands of scammers. They can use this information to make their messages seem more convincing and legitimate.
“Hi Alex, we noticed unusual usage at your address on Smith Street. Please log in to your Powershop account using the link below to verify your recent activity.”
Building rapport
Scammers will sometimes take a friendly tone, engaging in casual conversation to gain your trust before asking for sensitive information.
“Hey there! I’m just doing a quick check-in from Powershop to make sure everything’s going smoothly with your service. By the way, we’re updating our system — can I grab your login details to confirm your account?”
Use fake links and attachments
Emails or texts (SMS) may contain links that look real but lead to fake websites designed to steal your login details or install malware.
Scammers may attempt to use similar looking domains such as povvershop.com.au for example, using two v's instead of a w.
“Your latest Powershop bill is ready. View it here: powershop-billing.com.au/invoice”.
At first glance, this might look real — but it’s actually a scam. The website address (or “link”) is fake. Scammers create addresses like powershop-billing.com.au to trick you into thinking it’s from Powershop, when it’s not. Always double-check the link and remember, real Powershop addresses end with powershop.com.au.
Call ID Spoofing
Scammers can make the incoming phone call appear to be from a local number even though it is not.
“Hi, this is Powershop. We’ve detected a billing error and need to verify your credit card details to issue a refund. Can you confirm your card number now?”
If in doubt, end the call and call Powershop back on the numbers listed on our website.
Be aware that Scammers may combine the above tactics, such as calling from a spoofed phone number, building rapport and weaving in personal information to gain trust, before requesting you "confirm" your email address so they can send you an email with a malicious attachment to gain access to your computer and monitor your activities and guiding you to make a payment to them.
What to do if you think you've been targeted by a scam
If you’ve been targeted by a scam, you’re not alone
Scams today are more sophisticated than ever. They’re designed to look and sound convincing — often mimicking real companies like Powershop with professional-looking emails, realistic caller IDs, and even personal details to build trust.
If you’ve been caught out by one of these scams, please don’t feel embarrassed or ashamed. These tactics are designed to trick people — and they work on people from all walks of life, every single day.
Think you’ve been scammed? Here’s what to do
If you believe you’ve been targeted by a scam or may have accidentally shared personal or financial information, it’s important to act quickly.
1. Stop all contact with the scammer
Cease communication with the suspected scammer immediately. Don’t respond to further emails, texts, or calls — even if they seem helpful or apologetic.
2. Contact your bank immediately
If you’ve shared any banking details or made a payment, contact your bank or financial institution straight away. They may be able to stop a transaction, secure your accounts, or help recover funds.
3. Contact Powershop
If the scam involves someone claiming to be from Powershop, call us directly using the contact details on our website. We’ll help you verify the communication and support you through the next steps.
4. Change your passwords
If you’ve shared your Powershop login or any other sensitive information, change your passwords immediately. Use strong, unique passwords for each of your accounts and ensure you’ve enabled multi-factor authentication on your account.
5. Report the Scam
• To Powershop: Let us know so we can investigate and help protect others cyber@powershop.com.au
• To Scamwatch: Report the incident at scamwatch.gov.au/report-a-scam
6. Suspect Identity Theft? Contact IDCARE
If you think your identity has been stolen or misused, contact IDCARE — Australia and New Zealand’s national identity and cyber support service. They’re a free, government-funded service that can help you develop a tailored response plan.
• Visit idcare.org
• or call 1800 595 160
7. Stay Alert
Scammers may try again. Be cautious of follow-up messages or calls, especially those claiming to help you recover lost money.