---
title: "Heads-up: Your Westpac account hasn’t really been locked"
description: A low-tech phishing attempt is currently targeting Westpac customers.
---

[MailGuard Blog — Breaking alerts, news and updates on cybersecurity topics ](https://www.mailguard.com.au/blog)

# [Heads-up: Your Westpac account hasn’t really been locked](https://www.mailguard.com.au/blog/your-westpac-account-hasnt-really-been-locked)

 Written by [Jaclyn McRae](https://www.mailguard.com.au/blog/author/jaclyn-mcrae) | 07 June 2017 05:25:49 Z

 A low-tech phishing attempt is currently targeting Westpac customers.

The email scam, with the subject line ‘Your account is locked’ has been distributed to a relatively small number of recipients. It says the person’s account has been temporarily locked “as a result of technical issues detected”.

Recipients are told to click a link to unlock their internet banking access.

The link takes victims to a replica of the Westpac banking website, hosted on the unrelated domain of a Tanzanian guesthouse, which was likely compromised in an earlier cyber hack.

Here, they’re told to enter their customer ID and password. This is a ploy by the cybercriminals behind this campaign to steal and record log-in information, allowing them to access victims’ accounts and transfer money into their own hands.

While the fraud email contains many indications it is a scam, the fact it’s sent from the forged address ccapplications@westpac.com.au may trip up some recipients.

**Signs this is a scam**

- The plain-text email has no branding or customised information. It starts with a generic ‘This is to inform you’ message
- Words are inconsistently capitalised (see Locked/locked and RESOLVE IT HERE).
- Real banks never direct their customers to click a link to sign in to resolve an issue
- By hovering over the link you can see where it really takes you – in this case an accommodation provider based in Tanzania
- On the fake Westpac site’s URL you’ll see a padlock with a red line through it, which indicates the website is not secure.
- The real Westpac site, [https://www.westpac.com.au/](https://www.westpac.com.au/), has a green padlock, indicating it is safe to use.

**How to spot a phishing scam**

- A heightened sense of urgency in the email
- Bad grammar, poor spelling, misuse of punctuation
- An attempt to ‘verify’ your information such as user name or password
- Illegitimate links (hover over them and you can tell straight away)
- Generic throughout, with no use of personalisation
- Obscure sending addresses
- Distorted logos or poor-quality graphics in the email body.

*For a few dollars per staff member per month, add MailGuard's cloud-based email and web filtering solution to your business security. You’ll significantly reduce the risk of new variants of malicious email from entering your network.*

 

[^ Back to Top](https://www.mailguard.com.au/blog/your-westpac-account-hasnt-really-been-locked?hs_amp=true#top)

[View full post](https://www.mailguard.com.au/blog/your-westpac-account-hasnt-really-been-locked)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Jaclyn McRae"
  },
  "dateModified" : "2017-06-07T05:57:58.613Z",
  "datePublished" : "2017-06-07T05:25:49Z",
  "headline" : "Heads-up: Your Westpac account hasn’t really been locked",
  "image" : {
    "@type" : "ImageObject",
    "height" : 953,
    "url" : "http://www.mailguard.com.au/hubfs/Westpac%20phishing%20scam%20MailGuard.jpg",
    "width" : 1346
  },
  "mainEntityOfPage" : "https://www.mailguard.com.au/blog/your-westpac-account-hasnt-really-been-locked",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/441818/images/MailGuard_AMP_60x60.png",
      "width" : 60.0
    },
    "name" : "MailGuard Blog"
  }
}
```