Centrelink Issues Urgent Warning After 270000 Australians Targeted in Email Attack Linked to Medicare Super and Tax Benefits

A major alert has been issued across Australia after Centrelink confirmed that more than 270000 people have been targeted in a coordinated email attack designed to steal sensitive information linked to Medicare superannuation and tax benefits. Many Australians say the messages appear so authentic that they feared their accounts were already compromised.
Brisbane resident Alison Kerr said she received an email claiming her Medicare details were suspended and that her Centrelink payment would be stopped unless she updated her information. She explained that the message looked identical to a real Services Australia notification and included her full name. She said she felt panicked until a family member told her to check her myGov inbox instead of clicking the link.
Here is what Australians need to know about the large scale email attack.

Nature of the Scam Targeting Australians

Centrelink has confirmed that the email attack uses fake Medicare and myGov styled messages to trick people into providing login details and banking information. The emails direct recipients to a false website that collects personal data before redirecting them to unrelated pages.
Officials say this is one of the most widespread scam attempts seen this year and that attackers are using details stolen from unrelated data breaches to make the messages appear legitimate.

What the Scam Emails Look Like

The emails closely imitate official correspondence from Services Australia. Many include digital letter templates reference numbers and government style wording.

Key Details at a Glance

• Emails warn that Medicare details need urgent verification
• Some claim a tax refund or superannuation adjustment is ready for release
• Several messages claim Centrelink payments will be suspended
• All contain links directing users to fake login portals
• Some include personal data to make the message appear real
Officials are urging Australians to ignore any email claiming urgent action is required to prevent account cancellation.

Real Stories Behind the Warning

Case Example Alison from Brisbane
Alison said she almost clicked the link because the email looked identical to the digital letters she normally receives. She shared that she only realised it was fake when her myGov inbox showed no messages from Medicare or Centrelink.
Case Example Brian from Newcastle
Brian receives JobSeeker and said he felt alarmed when he received a message stating his payment would stop immediately. He explained that he relies completely on his fortnightly support and worried something had gone wrong. After contacting Centrelink he learned the email was part of the widespread scam.

Government Statements on the Attack

Government representatives say the scale of the attack is unusually large and designed to overwhelm people with alarming messages. Officials emphasised that no internal system has been breached and that myGov remains secure.
A spokesperson explained that scammers are using external data leaks to personalise messages and increase the likelihood that people will respond. They reminded Australians that the agency does not request urgent verification through email links.

Comparison Table Real Centrelink Messages Versus Scam Messages

Feature	Real Centrelink Message	Scam Message
Source Address	Services Australia or myGov secure domain	Unfamiliar or foreign domain
Tone and Style	Clear structured and consistent	Often contains errors or unusual wording
Action Required	Log in manually through the official site	Click inside the email to fix an issue
Threats	Rare and never immediate	Frequent warnings of suspended payments
Personal Data	Limited and secure	May use leaked information

What You Should Know

Australians are urged to delete suspicious messages immediately and report them if possible. People who believe they entered information into a fraudulent website should change their login details and contact their bank.
• Real updates from Centrelink appear only in the myGov inbox
• Email links should never be used to access government services
• Users should type the myGov address manually into their browser
• Scam emails may install harmful software if files are opened
• Anyone noticing unusual activity should report it to Services Australia
Officials say staying alert is essential as scammers continue adjusting their methods to appear more convincing.

Questions and Answers About the Scam Warning

1. What is the purpose of the scam emails
   They aim to steal myGov login details bank information and personal identification.
2. Are the messages from Centrelink
   No. They are sent by scammers pretending to be Centrelink Medicare or the ATO.
3. How many Australians were targeted
   More than 270000 people have received the fraudulent messages.
4. Can Centrelink suspend payments by email
   No. Centrelink does not suspend or cancel payments through email links.
5. How do I confirm if a message is real
   Check your myGov inbox directly by logging in manually.
6. Should I click any link in a suspicious email
   No. Delete the message immediately.
7. What should I do if I already clicked a link
   Change your myGov password and contact your bank.
8. Can scammers access my payment information
   They may attempt to if they obtain your login credentials.
9. Why does the email include my name
   Scammers may use information taken from unrelated data breaches.
10. Will Centrelink call if there is an issue
    They may call in certain cases but they do not request passwords or financial details.
11. Can these emails infect my device
    Some scam emails may contain unsafe files or malware.
12. Are seniors more at risk
    Yes. Older Australians are frequent targets due to their regular use of government services.
13. Can I report a suspicious message
    Yes. You can contact Services Australia or forward the email to the reporting service.
14. Are SMS scams also increasing
    Yes. Officials report a rise in both email and text based scams.
15. Does interacting with the email automatically compromise my account
    Not unless information is entered or unsafe files are downloaded.