Protecting yourself against phishing

Check the URL

Phishing websites often imitate URLs to create the illusion that you're on a legitimate website. To check if a website has a legitimate URL, look for slight variations, misspellings or additional characters in the URL. For example, my0b.com or rnyob.com instead of myob.com.

You can also check for the secure HTTPS connection. To check the HTTPS connection, click the padlock symbol in the top left corner of your browser. You should see a URL that matches the legitimate website and a message about a secure connection:

You shouldn't see this (connection not secure):

Examine the website design

Compare the design and layout of the website with the official website. Look for inconsistencies, such as variations in colours, fonts, logos or overall design. Phishing websites may have poor-quality graphics, distorted images or irregularities that indicate a fraudulent copy.

Beware of urgent requests

Phishing websites and emails often use alarming messages to create a sense of urgency. They may claim your account has been compromised or that immediate action is required. Be cautious of such requests and independently verify the legitimacy of the message through trusted channels, such as your usual method of navigating to your MYOB application or contacting customer support. Here's an example of a fake MYOB email asking for immediate action:

Be wary of unsolicited emails or messages

Phishing attempts often begin with unsolicited emails, text messages or social media messages. Be sceptical of any message that asks for personal or sensitive information, especially if it redirects you to a website. If they give you a link, you can check the URL for where it'll take you by hovering over it (without clicking on it). Instead of clicking on provided links, you can manually type the URL of the website you wish to visit into your browser or use bookmarked links.

Here's an example of a fake MYOB email that appears to be linking you to MYOB, but it is taking you to another website:

Trust your intuition

If something feels suspicious or too good to be true, it probably is. Trust your instincts and exercise caution when interacting with websites that raise doubts. If you have any concerns about the legitimacy of a website, refrain from providing any personal information and report the suspicious activity to your organisation's IT or security team.