The NDIS has issued a warning about a fraudulent email that looks like it came from an NDIS provider newsletter.
The scam asks participants to click a link and “update your bank account details” in the NDIS portal—only the link leads to a fake site designed to steal your login info.
How to spot it:
- An unexpected email or text urging you to update NDIS or bank details.
- Links that don’t point to or the official myNDIS app.
- Generic greetings, spelling mistakes or urgent “act now” messages.
What to do if you get a dodgy message:
- Don’t click the link. Always sign in via myGov (type into your browser) or the official myNDIS mobile app.
- If you’ve already clicked, log in properly and change both your NDIS and myGov passwords immediately.
- Check your bank details, phone number and email in your portal—correct anything that’s wrong.
- Report the scam: call the NDIS Fraud Reporting and Scams Helpline on 1800 650 717 or the National Contact Centre on 1800 800 110 for help and advice.
- Stay alert—never share passwords, and treat any request for personal info via links with suspicion.
Stay informed, keep good records and always double-check before you click. Your plan—and your peace of mind—depend on it.
To find out more details, the NDIS post can be found here – https://www.ndis.gov.au/news/10699-scam-alert-beware-emails-asking-you-update-bank-details