Richmond District Police are warning of a new phishing scam from 'Commbonk'.

Police reported that the scam starts as an email using various display names, each containing the word ‘CommBank’.

Unsuspecting recipients who click on the link to view ‘transaction details’ are each led to a different page which redirects to a page using the domain 'commbonk'. 

According the security company, MailGuard, this is a phishing page masquerading as a fake Commonwealth Bank sign-in page.

"Don't click on the link and delete email immediately," Richmond PD reported.

Mailguard reported on its website that whilst MailGuard is stopping this email scam from reaching Australian businesses, “we encourage all users to be extra vigilant against this kind of email and whatever happens, do not respond to it”.

“Commonwealth Bank is one of Australia’s best known and most trusted brands, so it is irresistible to phishing scammers as it widens their victim base,” the website reported.

“The hallmark of this scam lies in its ability to trick users by ironically using a security alert. 

“Verifying irregular transaction activity is a common trait of well-established banks like Commonwealth and it’s this focus on security that cybercriminals behind this scam leverage on.”

For more information on this scam, visit https://www.mailguard.com.au/blog/commonwealth-bank-impersonated-in-phishing-scam-email-asks-users-to-confirm-card-activity

For more information about phishing, visit https://www.scamwatch.gov.au/types-of-scams/attempts-to-gain-your-personal-information/phishing