Scam Protection at Home: Set Up Your Phone, Email and Bank Before a Scammer Calls

Most advice about scams focuses on spotting them. That matters, but it puts all the pressure on you to get it right every single time, often when you are tired, busy or caught off guard. A better approach is to set things up in advance so that a scam has fewer ways to reach you, and so that one mistake does not turn into a disaster.

This guide is about practical scam protection. It covers the settings, habits and safety nets worth putting in place on your phone, email, bank accounts and computer, with simple steps you can do over a cuppa this weekend. If you would rather have someone do it with you, we explain how our on-site safety check works at the end.

Think in layers, not in perfection

No single tool stops every scam. Security professionals talk about layers, meaning several small protections that work together. If one layer fails, the next one catches the problem. A scam protection plan for a household has four layers:

Fewer scams reach you. Filters, blocking and privacy settings reduce the number of calls, texts and emails.
You pause before acting. Simple house rules slow you down at the critical moment.
Your accounts are hard to break into. Strong passwords and two-factor authentication stop a stolen detail from being enough.
The damage is limited. Bank limits, alerts and backups mean a mistake costs less.

You do not need to do everything at once. Start with the layer that worries you most.

Layer 1: Reduce what reaches you

Phone calls and texts

Do not answer unknown numbers by default. Real callers leave a message. If it matters, you can ring back using a number you have found yourself.
Use your phone's blocking and spam filters. Both iPhone and Android can silence unknown callers and filter suspicious messages. Turn these on.
Block and report as you go. Every blocked number helps, and reporting to Scamwatch helps others.
Ask your phone provider what scam call and text blocking they offer. Most major providers now have some form of it.

Email

Keep the spam filter on and check junk mail only occasionally.
Use separate email addresses if you can: one for banking and important accounts, another for shopping and sign-ups. Scammers cannot guess an address you have never shared.
Be careful what you post publicly. Birthdays, phone numbers, your pet's name and holiday plans give scammers material to make their story convincing.

Layer 2: Build a pause into your routine

Scams work by rushing you. The cure is a rule you follow every time, so you do not have to decide in the moment. Here are four rules worth agreeing on, especially in a household with older relatives.

Hang up and ring back. If someone calls claiming to be from your bank, the tax office, your internet provider or the police, end the call. Then ring the organisation on a number you find yourself, from a statement, a card or their official website. Wait a few minutes first, or use a different phone, in case the line is still held open.
No urgent payments. Any demand to pay immediately, especially by gift card, cryptocurrency, bank transfer to a new account or a payment app, is a scam. Real organisations do not work that way.
No remote access for strangers. Never let someone who contacted you take control of your computer or phone. A common script is a caller who says there is a virus and asks you to install a program.
Tell someone first. Before you send money or share any code, tell a family member, a friend or your bank. Scammers hate this step, because a second person is often enough to spot the problem.

A family code word is another simple tool. If someone texts or calls claiming to be a child or grandchild in trouble, ask for the word. A scammer will not know it.

Layer 3: Make your accounts hard to break into

Even a careful person can have details stolen in a data breach or a convincing fake website. What matters is whether those details are enough to get in.

Use a different password for each important account. If one is stolen, the others stay safe. A password manager makes this realistic. We cover this in our guide to how to secure your passwords.
Turn on two-factor authentication for email, banking, myGov and social media. This asks for a second proof, such as a code or an app approval, so a stolen password alone is not enough.
Secure your email first. Your email account can reset almost every other password, so it is the one to protect most.
Never share a one-time code. If anyone asks you to read out a code that was just sent to you, it is a scam.
Check your recovery details. Make sure the backup phone number and email on your key accounts are current and are yours.

Layer 4: Limit the damage if something goes wrong

Bank settings

Turn on transaction alerts so you receive a message for each payment or transfer.
Lower your daily transfer limit to something that suits your normal use. You can raise it temporarily when you need to.
Know who to call. Save your bank's fraud number in your phone, from the back of your card, so you can act fast.
Review statements regularly, even if it only takes a minute a month.

Devices and backups

Keep phones, tablets and computers updated. Updates close the security holes scammers use.
Use reputable security software on your computer, and avoid installing programs from links in messages.
Back up your files. If something does lock or damage your computer, a backup means you lose time rather than memories. See our guide on how to back up your photos.
Check your credit report occasionally for accounts you do not recognise. In Australia you can request a free report from the credit reporting bodies.

Common scams worth knowing about

Knowing the pattern helps the rules above click into place. The types we hear about most from clients in the eastern suburbs include:

Bank impersonation. A call or text says your account has been compromised and you must move your money to a "safe" account. Your bank will never ask for that.
Delivery and toll texts. A link to pay a small fee or fix an address. The aim is to capture your card details.
Remote access and tech support. Someone claims your computer has a virus and asks to connect to it.
Investment and romance scams. Slow, friendly contact that eventually leads to a request for money.
Fake invoices and payment redirection. An email appears to come from a trades person or business with new bank details.
Family emergency messages. A text from an unknown number claims to be a child with a new phone who needs money.

For a quick checklist on messages, see our post on the five signs of a scam email or text.

What to do if you think you have been scammed

Contact your bank immediately, using the number on your card. The sooner they know, the more they can often do.
Secure your accounts. Change passwords, starting with your email, and turn on two-factor authentication.
Check your devices. If you gave someone remote access or opened a suspicious file, your computer needs a proper check. Our virus and malware removal service can help.
Report it. Use Scamwatch for scams and ReportCyber for cybercrime.
Get support. IDCARE offers free help if your identity details have been exposed.

Do not be embarrassed. Scammers are professionals, and reporting quickly is the most useful thing you can do.

Get a scam protection safety check at home

Doing all of this alone can feel overwhelming, and it is easy to miss something. Our scam awareness and online safety service includes a one-on-one safety check at your home. We go through your phone, email, passwords and key accounts with you, turn on the protections that suit you, and explain each step in plain English so it makes sense.

It is particularly helpful for older relatives. Our computer help for seniors service is patient and jargon-free, and family members are welcome to sit in.

We come to homes across Balwyn, Kew, Camberwell, Doncaster, Box Hill, Blackburn and the surrounding eastern suburbs. Call 0400 771 828 or send a message to book. We work Monday to Saturday, 8am to 8pm.