Stop. Check. Protect: the refreshingly simple guide to staying scam-safe

Nobody starts their day thinking, "Yep, today feels like a great day to get scammed. Unfortunately, scammers are hoping you won't see them coming. The good news? You don't need to be a cybersecurity expert to stay one step ahead. A few simple habits can go a long way…

Here's the thing about scams: they're not really about technology. A dodgy text, a fake "missed delivery" notice, a phone call that sounds urgent… they're all designed to do one thing: get you to act before you've had a chance to think. And while the tactics keep evolving, the goal stays the same. That's why taking a moment to stop, check and think before you act is so important.

We're always looking for ways to keep security refreshingly simple. From multi-factor authentication (MFA) to verified SMS sender IDs and ongoing scam prevention initiatives, we're continually working behind the scenes to help keep your account and personal information secure. Add a few smart habits on your side and you'll be in a much stronger position to spot scams before they become a problem. It all comes down to three words: Stop. Check. Protect.

✋ Stop

Scammers love a countdown. "Your account will be suspended." "Pay now or lose your parcel." "Offer ends in 30 minutes." The pressure is the point. When something demands you move fast, that's your cue to do the opposite, slow right down. No legitimate company will punish you for taking five minutes to check.

If a message makes your heart race a little, that's not a reason to hurry. It's a reason to pause. Not sure if something's genuine? Here are a few red flags to look out for:

🔎 Check

Once you've taken a breath, verify before you do anything else.

Go direct, not through the link. Was that "problem with your account" text really from us? Don't tap the link to find out. Open your saved bookmark or type the address in yourself.

Read the whole message, especially when codes are involved. Not all codes do the same thing. Some are for logging in to your account, while others may be used to help confirm your identity when you're speaking with our team. So before you read out or enter any code, take a second to read the full message. It will tell you what the code is for and whether it should be shared with Tangerine. If the message says not to share it, don't. And if someone is rushing you, pressuring you or something feels a bit off, hit pause and contact us directly through the details on our website.

Weird payment request? Walk away. Gift cards, crypto, or a sudden new account to pay into are red flags every single time.

Not sure it's really us? Hang up or close the message, then get in touch using the contact details on our website. Taking a moment to pause and verify can make all the difference.

🛡️ Protect

A few minutes of setup today could save you a major headache tomorrow.

• Turn on Multi-Factor Authentication (MFA) everywhere. We've rolled MFA across our Self Care Portal and the Tangerine App, so getting into your account takes more than just a password. To learn how to turn on MFA please click here.
• It's also a great idea to add MFA to your email account. Your inbox is where password resets and codes land, so if it's locked down, so is everything connected to it.
• Use strong, unique passwords for each account. The same password everywhere means one leak unlocks the lot. A password manager remembers them all, so you don't have to.
• Keep your devices updated. Those update reminders you keep swiping away? A lot of them are quietly patching security holes. When those update reminders pop up, give them a tap.
• Be choosy on public Wi‑Fi. Free airport Wi‑Fi is great for scrolling, less great for logging into anything sensitive. Save that for a network you trust.
  
  

We're Doing Our Bit, Too

While a few good habits go a long way, staying safe online shouldn't be something you have to tackle alone. That's why we're continually investing in practical security improvements (as shown below) that are designed to help make online safety a little easier:

Think You've Been Caught Out?

It happens to switched-on people all the time, the important thing is to act quickly:

1. Change the passwords on any affected accounts.
2. Call your bank or financial institution if any financial details might be exposed.
3. Keep an eye on your accounts for anything odd.
4. Report it to ScamWatch at scamwatch.gov.au.
5. Reach out to our Customer Support Team.

Scammers might change their disguises, but their playbook stays pretty much the same: rush you, worry you or tempt you into acting before you've had time to think.

So next time a text, an email or a call feels a little off, trust your instincts. Take a breath and Stop. Check. Protect. It might not be the most exciting life hack you'll ever learn, but it could be one of the most valuable.

Keen to Learn More About Staying Safe Online?

Head over to our Online Safety & Cyber Security page and squeeze the most out of our security tips and resources.