A new warning has been issued to Woolworths customers about their Everyday Rewards accounts.
The alert comes as a new scam text targeting the supermarket’s Everyday Rewards members has begun circulating.
The message is similar to one sent to Coles shoppers in recent weeks, claiming their rewards points are about to expire.
Know the news with the 7NEWS app: Download today
Coles customers were immediately wary of the message, given the retailer doesn’t have a Coles-branded rewards or loyalty program.
However, given Woolworths has more than 14 million Everyday Rewards members, account holders are at a much higher risk of falling victim to the savvy hoax.
The scam text, which appears to have been sent by the supermarket giant, reads: “Woolworths rewards: Your account has 3022 points expiring in 3 business days. Redeem via https://news.google.com/rss/articles/CBMid2h0dHBzOi8vN25ld3MuY29tLmF1L2xpZmVzdHlsZS91cmdlbnQtd2FybmluZy1mb3Itd29vbHdvcnRocy1zaG9wcGVycy1jaGVjay15b3VyLWV2ZXJ5ZGF5LXJld2FyZHMtcG9pbnRzLW5vdy1jLTE1MDYxMjE20gEA?oc=5 ASAP.”
The link includes the words “Everyday Rewards SMS” — and has been confirmed to be a scam.
Now, Woolworths customers are being encouraged to avoid clicking on any links sent in the correspondence.
“Smishing or SMS scams are a popular way online criminals persuade you to tap on a link,” Woolworths said.
“SMS scams are often specifically crafted to look like they are from a legitimate organisation and encourage you to verify your details to claim a prize by tapping a link contained within the message.
“The link may take you to a website that asks you to verify your account details by entering them on the website, or even compromise the information on your phone by downloading malicious software.”
What to look out for
Woolworths shoppers have been urged to be suspicious of messages that:
- Contain instructions to click on a link, pop-up, or attachment
- Create a sense of urgency by attempting to rush, scare or entice you
- Request sensitive, personal and/or financial information
- Are from individuals or organisations that don’t usually contact you
In doubt?
If you receive any suspicious communications that appear to be from Woolworths, please forward them directly to hoax@woolworths.com.au for further investigation by its Cyber Security team.