Scammers are targeting NDIS participants and providers. Do not be fooled by emails asking you to update your bank details. This article outlines what to watch for and how to protect yourself.
What Is the NDIS Scam About?
A new scam is circulating, targeting Australians connected with the National Disability Insurance Scheme (NDIS). Victims are receiving fake emails that appear to be from the NDIS or an associated provider, asking them to update their bank details via a link.
These emails are carefully designed to look legitimate, but they are part of a phishing scam intended to steal your login credentials and financial information.
How the Scam Works
These scam emails typically:
- Appears to come from an NDIS-affiliated source
- Include official-looking logos or branding
- Claim urgent action is needed to prevent payment delays
- Link to a fake sign-in page resembling the real NDIS portal
Once recipients click the link, they are prompted to enter sensitive data such as personal details, NDIS login credentials, or bank information, which scammers then use for fraudulent purposes.
Who Is Being Targeted?
Scammers are targeting a broad range of people connected to the NDIS:
- NDIS participants
- Carers and family members
- Registered providers
- Support coordinators
Even those indirectly involved with the NDIS may be at risk if their contact information has been shared with service providers.
Why This Is So Dangerous
Falling victim to this scam can result in:
- Compromised personal and financial information
- Unauthorised access to bank accounts
- Changes made to NDIS plans without permission
- Identity theft and long-term data misuse
What the NDIS Will Never Do
To help you identify fraudulent communications, be aware that the NDIS will never:
- Ask for your bank account details via email or text
- Send links asking you to update your details through unofficial platforms
- Use free email domains such as Gmail, Yahoo, or Outlook
- Pressure you to act immediately or threaten loss of service
All official communication is delivered via secure portals like myplace or through trusted service providers.
What to Do If You Receive a Scam Email
If you believe you have received a scam email:
Step-by-step response:
- Do not click any links or download attachments.
- Do not respond to the message.
- Take a screenshot of the email for your records.
- Forward the email to: scams@ndis.gov.au
- Delete the message from your inbox and junk folder.
What If You Already Clicked the Link?
Take immediate action:
- Change your passwords for the NDIS portal, email, and banking services.
- Notify your bank to secure your accounts.
- Report the incident to the NDIS Fraud Reporting and Scams Helpline.
- Seek further support through IDCARE: https://www.idcare.org/
How to Report NDIS Scams
You can report suspicious activity to the NDIS via the following channels:
- Phone: 1800 650 717 (Fraud Reporting and Scams Helpline)
- Email: fraudreporting@ndis.gov.au
- Online Form: NDIS Fraud Page
How to Identify Scam Emails
Stay alert for common warning signs:
- Unusual or unofficial email addresses
- Poor grammar and spelling errors
- Requests for urgent or immediate action
- Suspicious links that do not match official NDIS URLs
- Requests for login credentials or financial information
Always visit the official NDIS site by typing the web address directly into your browser: www.ndis.gov.au
Stay Informed and Protect Your Information
Scams are becoming increasingly sophisticated, but awareness is the best defence.
To stay safe:
- Bookmark and use only official NDIS websites and apps
- Educate your family and support workers
- Report any suspicious communication immediately
- Subscribe to updates from ndis.gov.au
Summary Table
| What to Do | Recommended Action |
| Suspect a scam email? | Do not click or reply |
| Already clicked the link? | Change passwords and contact your bank |
| Unsure about a message? | Verify directly with the NDIS or provider |
| Want to stay safe long term? | Report scams and educate your support network |
You can read the official notification here.
