AGL Energy (AGL) is warning people of an AGL branded email scam which contains malicious malware that has potential to access personal information.
The scam presents as an e-Account and asks readers to click on a link.
AGL advises it will never send an email asking for personal banking or financial details.
AGL has reported the scam to numerous authorities including ScamWatch, the ACCC and the AFP.
Anyone who receives a suspicious email should delete it immediately, or if opened, not click on any links.
Here is a sample of the AGL email which has many variations:
The scam email appears to be from AGL, advising the recipient of their current bill. The email is personalised for each recipient and provides a link for the recipient to view their electricity bill online.
Here is a sample of the first page recipients are directed to:
How can I protect myself from email scams?
To reduce the risk, you should be suspicious of and immediately delete any email that:
- Instructs you to download a file or click on a link to access your account or other information
- Is purporting to be from a business you know and trust, yet the language is not consistent with the way they usually write (and may contain multiple grammatical errors)
- Asks you to click on a link to access their website. If unsure call the company directly to confirm whether the email is legitimate
If unsure, do not click links or download files contained within the email and contact the purported sender directly to verify the authenticity of the email. Furthermore ensure that you keep your IT department (firstname.lastname@example.org or 1300 033 300) aware that you have been receiving these emails to ensure the problem is adequately addressed.