Current figures, last updated 2026-06-12
A real retailer never asks for: your account password or a one-time code (OTP).
Disconnection: follows written notice and a regulated process, never "within minutes" by phone.
Rebates: applied to your account, not "claimed" via an urgent link.
Report scams: to Scamwatch (scamwatch.gov.au); contact your bank if money or card details were shared.
Sources: ACCC Scamwatch; Australian Energy Regulator (AER) disconnection rules.
Why these scams feel normal
Most scam advice assumes the fake is obviously fake: bad grammar, a strange number, a wild story. Energy scams are dangerous precisely because they are none of those things. They describe a real offer, reference a real rebate, and use the same language your retailer uses. They feel normal because they are copies of normal. Pattern-matching for "something feels off" fails when the scam is engineered to feel familiar.
So memorising warning signs is the wrong defence. A better one is structural: there are specific things a legitimate energy process never needs from you, no matter how genuine it sounds. The fakes survive only as long as you focus on the story instead of the request.
Why red-flag lists fail
The usual checklist, "watch for urgency, check the sender, do not click links", breaks down against a good scam. Real retailers also create urgency around offers. Real emails also contain links. Real rebates also sound too good. A list of surface signals trains you to spot bad scams and leaves you defenceless against polished ones.
The deeper problem is that the lists never explain how the legitimate process actually works, so you cannot tell when something has crossed a line that the real process never crosses. Without that baseline, every interaction becomes a coin toss.
The tells that actually work
Credentials a real process never needs
A legitimate retailer authenticates you; it never needs you to reveal a secret that authenticates as you. That means your account password and any one-time code sent to your phone are off-limits, always. No real switching, billing or rebate process requires them. The moment a caller or email steers toward an OTP or password, the story stops mattering. That request alone is the scam.
How money really moves
Genuine energy payments go to the retailer through normal, reversible channels and never depend on gift cards, cryptocurrency or an urgent transfer to a personal account. Rebates flow to you, applied to your account, not collected from you via a claim link asking for card details. If the direction or method of money is unusual, the interaction is not what it claims to be.
The rhythm of real disconnection
Disconnection is a slow, regulated process: written notice, defined timeframes, and hardship protections that pause it if you engage. It is structurally incapable of happening "in the next ten minutes unless you pay now". Any threat compressed into minutes is exploiting the fact that you do not know the real timeline. Knowing it makes the threat collapse.
Scam or legitimate? A quick check
Tick anything the call, text or email did. Each item is a line a real energy process does not cross. The verdict updates as you tick. The same checks are listed in the points below.
Verdict
Looks legitimate so far
Nothing ticked yet. A genuine offer survives a hang-up-and-call-back. Verify on the number from your bill or the retailer's official site before acting.
Definite scam: asked for a password or OTP, or wanted gift cards, crypto or a transfer to a personal account.
Almost certainly a scam: threatened disconnection within minutes, or sent a rebate "claim" link asking for card or login details.
Strong warning: refused a hang-up-and-call-back, or pressured you to act before verifying.
Safe move every time: hang up and call your retailer on the number from your bill or its official website.
How people actually get caught
The victims are rarely naive. They are often people mid-way through something real: they had been meaning to switch, or had heard rebates were available, so a call about exactly that lands as a coincidence, not a threat. The scam succeeds by arriving at the moment the story is most plausible. That is why "I would never fall for it" is itself a vulnerability; it keeps your guard focused on the story rather than the request.
The second trap is sunk-cost momentum. Once you have spent five minutes on a call and shared a little information, walking away feels like wasting effort, so people press on past the point where they should have stopped. A real process is indifferent to that momentum; a scam depends on it.
The insider detail: your details were probably already bought
When a scammer knows your name, address, and that you are with a particular retailer, it feels like proof they are genuine. It is not. That kind of information is routinely traded after data breaches and through marketing lists, and scammers buy it to make the opening line convincing. Knowing your details is the cost of entry to the scam, not evidence of legitimacy. Treat any unsolicited contact that "already knows you" with more suspicion, not less, because that knowledge is exactly what a polished energy scam is built on.
What to actually do
Adopt one rule that beats every checklist: end any unsolicited contact and re-initiate it yourself. Hang up, then call your retailer on the number from your latest bill or its official website, never a number the caller gave you. A real offer or rebate will still be there; a scam evaporates the moment you control the channel.
Never share a password or one-time code, and never pay by gift card, crypto or transfer to avoid a disconnection. If you have already shared details or money, call your bank straight away, change any exposed password, secure your account with your retailer, and report it to Scamwatch. The first hour matters far more than perfect hindsight.
Why this matters now
With energy prices in the headlines and successive rounds of government bill relief, the legitimate cover story for energy scams has never been richer. Every real rebate announcement is a fresh script for a fake one. As the genuine offers multiply, the only reliable defence is structural, knowing the lines a real process never crosses, because the surface will keep looking more convincing, not less.
Frequently Asked Questions
How can I tell if an energy call or email is a scam?
Check the structure, not the story. A real retailer never needs your account password or a one-time code, never demands urgent payment by gift card or transfer to avoid disconnection today, and never sends a link to "claim" a rebate that is actually applied automatically. Any of these crossing points means scam.
Do energy companies really call to offer better plans?
Yes, which is exactly why scams imitate them. A genuine offer survives scrutiny: you can hang up, call the retailer back on the number from their official website or your bill, and verify it. A real offer never depends on you acting before you can check.
Are government energy rebates claimed through a link?
Generally no. Concessions and bill relief are applied to your account through your retailer or your state scheme, not "claimed" by clicking a link and entering card or login details. A rebate that requires an urgent online claim is a classic scam pattern.
What should I do if I think I've been scammed?
Contact your bank immediately if you paid or shared card details, change any password you revealed, and call your retailer on its official number to secure your account. Report it to Scamwatch. Acting in the first hour limits the damage more than anything else.
Why do scammers threaten immediate disconnection?
Because urgency disables judgement. Real disconnection follows a regulated process with written notice and hardship protections; it never happens within minutes over the phone. A "pay now or be cut off today" threat is manufactured pressure, not how the system works.