How to Spot Fake Charitable Donation Requests and Disaster Relief Scams Targeting Australian Small Businesses

Summary

This guide helps you troubleshoot and resolve: How to Spot Fake Charitable Donation Requests and Disaster Relief Scams Targeting Australian Small Businesses. Follow the steps below to fix the issue.

Common Causes

Scammers frequently exploit natural disasters and community crises to trick Australian small businesses into sending money to fake charities. These messages often arrive via email, SMS, or social media and mimic legitimate organisations. This guide walks you through the key indicators of fraudulent donation requests and shows you how to verify a cause before you give.

Quick Fix Steps

1. Pause – Do not click any links or reply to the message until you have verified the source.
2. Check the sender – Look for mismatched email domains, generic greetings, and urgent language.
3. Search the charity – Use the ACNC Charity Register or the ABN Lookup to confirm the organisation exists and is registered.
4. Visit the official site directly – Type the charity’s known web address into your browser rather than following a link in the message.
5. Report the message – Forward suspicious emails to [email protected] and SMS scams to 0429 999 888 (ACCC’s Scamwatch).
6. Open a ticket if you need further assistance – Open a Ticket.

Detailed Instructions

Identify Red Flags in Emails and SMS

• Sender address vs. displayed name – The display name may read “Red Cross Australia” while the email comes from [email protected].
• Generic greetings – “Dear Customer” or “Hello” instead of your name or business name.
• Urgency and threat – Phrases like “Immediate action required” or “Donate now before it’s too late”.
• Poor grammar, spelling, or formatting – Look for unusual capitalisation, misspelt words (e.g., “donatation”), or mismatched fonts.
• Requests for unusual payment methods – Gift cards, cryptocurrency, wire transfers, or direct bank deposits to personal accounts.

Verify the Charity’s Legitimacy

1. Open a new browser tab and go to the ACNC Charity Register.
2. Enter the charity’s name or ABN in the search field.
3. Confirm the status shows “Registered” and note the ABN and address.
4. Cross‑check the ABN on the ABN Lookup to ensure it matches the charity’s public details.
5. Visit the charity’s official website (type the URL manually) and look for a Donate page that uses HTTPS and displays a valid SSL certificate (padlock icon).

Check the Website and Contact Details

• Hover over any link in the message (don’t click) to see the true destination URL. Does it match the charity’s known domain?
• Look for a physical Australian address, phone number, and a privacy policy on the site.
• Search for reviews or news articles about the charity – reputable organisations usually have media coverage.
• Use whois lookup tools (e.g., who.is) to see when the domain was registered. Recently created domains (weeks old) are suspicious.

Report the Scam and Protect Your Business

1. Forward the suspicious email to [email protected].
2. For SMS scams, forward the message to 0429 999 888 (Scamwatch).
3. Delete the message from your inbox and the “Deleted Items” folder.
4. Run a phishing‑awareness refresher for staff – remind them to verify before clicking.
5. Enable multi‑factor authentication (MFA) on all business email accounts.
6. Consider a managed email‑security service that scans for spoofed domains and malicious attachments.

Troubleshooting

I’ve Already Clicked a Link – What Now?

• Close the browser tab immediately.
• Run a full antivirus/anti‑malware scan on the device.
• Change passwords for any accounts you may have entered credentials into.
• Monitor bank statements for unauthorised transactions.
• If you supplied financial details, contact your bank’s fraud team right away.

The Message Appears to Come from a Known Contact

• Contact the person or organisation through a known, trusted phone number or face‑to‑face.
• Check whether their email account has been compromised (look for unusual sent items).
• Advise them to reset their password and enable MFA.

Recurring Scam Messages Despite Filtering

• Ensure your email gateway’s spam and phishing rules are up to date.
• Add the sender’s domain to your blocklist if it’s clearly malicious.
• Report each instance to Scamwatch – aggregated reports improve national filtering.
• Engage your MSP to review and harden your email security posture.

Staying vigilant and verifying every donation request protects your business and ensures your generosity reaches genuine causes. For any doubts or to strengthen your defences, Open a Ticket with our support team.

Still Having Issues?