Stay safe with Stake

Our focus

Scams are unfortunately on the rise in Australia, especially across financial services. Our number one priority is always the safety of our customers.  

A recent trend across the country has investment scammers targeting people through group chats, social media and other messaging apps. 

They’re using terms like ‘get rich quick’, ‘inside information’, or sharing screenshots of fake profits to pressure people into transferring funds, sharing account details or gaining remote access to devices. 

The impact can be serious, but there are practical steps you can take to help protect yourself and your account.

Act quickly, remain calm and follow these steps:

1. Cease communications with the suspected scammer. Block the sender or leave 
the group. In short: don’t reply.
2. Take screenshots of messages, posts, profiles, payment instructions and links.
3. Secure your Stake account:
• Change your password
• Enable two-factor authentication (2FA)
• If you can’t access your account, request an account lock 
via Stake-supported channels
4. Contact your bank or card issuer’s fraud team and ask them to freeze 
or trace any payments
5. Report the scam to local police, ReportCyber and ScamWatch. 
Ensure to keep the incident number/log handy for future developments
6. Report the scam to us directly via the Contact Us form found here. 
Please include screenshots, transaction details and any social account 
information of the person(s) involved.

Use social media, group chat, SMS/MMS or personal message to ask you to:

• Transfer money or move funds to another bank account, individual or ‘safe’ account.
• Provide your Stake account password, PIN or one-time verification codes (OTPs)
• Share your screen, install remote-access software or grant remote control 
of your device
• Log in to your Stake account via a link in an email, SMS, DM or group chats
• Send account balances or transaction confirmations from an unverified 
personal account 
• Access products or services through private messages or group chats

If you receive a message that feels fishy: stop, take screenshots, leave the chat, 
block the sender and report it to us.

Check back regularly for updates on recent instances popping up across 
the investing space. 

There are reports of scammers adding people to group chats without permission before posing as analysts, traders or market experts. 

Using this authority, they promote a stock, crypto asset or ‘foolproof’ or ‘special’ strategy 
as a guaranteed winner. 

They build trust using falsified social proofing mechanics such as generated screenshots of returns, trading dashboards or made-up testimonials.

Often, they will pressure you to buy now and avoid consulting with your bank, adviser or investment platform (such as Stake).

1. You’re added to a group chat without consent
2. Someone is claiming to be an analyst, expert or senior trader without context or warning
3. A stock, crypto asset or strategy is described as a ‘guarantee’ or ‘100% risk-free’
4. Members sharing screenshots of excessive profits and/or trading dashboards
5. You’re being pressured to act quickly and/or encouraged to act without 
consulting your bank, adviser or Stake
6. Someone is asking for your login details, verification code, or to have remote 
access to your device

If you spot any of these happening, stop engaging and report it.

It’ll often start with an intriguing/tempting investment ‘opportunity’. Something once-in-a-lifetime that sounds professional, is time-sensitive and a guaranteed winner.

Scammers prey on behavioural triggers like FOMO to spark an emotional and often irrational response. 


Some examples can be:

“I’m an analyst with 20 years of experience, give me your Stake login 
and I’ll show you how to action the strategy"

"Send $3,000 to this account to buy in – I’ll deposit $5,000 after the pump!"

"Don’t risk getting left behind, buy now before it’s too late"

Their tactics often follow certain patterns with telltale signs to watch out for.

Be alert for messages asking you to:

• Transfer money to unlock or access a return
• Share your Stake login or verification code 
• Invest in a stock, crypto asset or platform through a private group
• Download files or click links from someone you don’t know
• Grant remote access to your device for ‘investment assistance’

If you’re being hit with any of the above, take snapshots, step back and report it.

Small measures make a big difference on and off Stake. Here are a few healthy 
habits to keep top-of-mind. 

• Think before clicking links in emails or text messages
• Be wary of suspicious emails, especially unexpected payment instructions 
from unfamiliar sources
• Verify unusual requests through official institutional channels. For Stake, use this portal
• Don’t ignore browser security warnings
• Use strong, unique passwords and avoid reusing the same ones across 
multiple accounts/platforms
• Consider using an authorised password manager
• Turn on two-factor (2FA) or three-factor authentication (3FA) wherever possible 
• Use trusted mobile apps only and always lock your electronic devices when 
you’re not using them
• Keep software and operating systems up to date. Switch on auto-update 
whenever possible. 

If you think you’ve been/currently being scammed, act as soon as possible. 

• Contact your local police branch and lodge a formal report
• Make a report to ReportCyber on 1300 292 371 or via their website
• Submit a report to the National Anti-Scam Centre via ScamWatch
• If the scam was actioned on Stake. 
Alert us immediately via the Contact Us page

• Bank account details you transferred funds to, if applicable
• Dates and sums involved
• Social media accounts you communicated with 
• Email addresses and/or phone numbers of the suspected scammer
• Screenshots of conversations, profiles, payment instructions or links
• If crypto was involved: wallet addresses and transaction hashes

Review positions immediately. Scam-focused investments are often highly volatile, easily-manipulated or fraudulent. Consider seeking advice from a licensed financial adviser about your next steps.

Fraudsters are likely to target you again or sell your details to other criminals. The follow-up scam may be completely separate or related to the previous fraud, such as an offer to get your money back or to buy back the investment after you pay a fee.

We build security into our products and platform. We're committed to giving you the safest possible investing experience and employ enhanced security measures.

This includes encryption of data in transit, strong authentication mechanisms, secure infrastructure and regular independent security assessments and penetration testing.

When customers update key personal details such as linked bank accounts, contact details or addresses, we conduct further due diligence and verification checks.

We are committed to protecting your personal information. We comply with applicable data protection laws where we operate, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Where we process personal data of EU residents, we comply with the General Data Protection Regulation (GDPR). For full details, see our Privacy Policy.

Give your account an added layer of security that requires a code sent to you via SMS 
or an authenticator app.

Once 2FA is enabled, entering that verification code becomes a mandatory step before access to your account is granted.

Scammers are increasingly turning their focus onto self-managed super fund (SMSF) trustees in an effort to encourage large super withdrawals to back/invest in fraudulent ‘opportunities’.
These scams often promise high or guaranteed returns, creating urgency to act quickly. Losses can be significant and recovery is often difficult.
If you’re a Stake Super customer, it’s vital you stay vigilant and aware of what scammers 
are capable of, and how to protect yourself from being targeted.

Scammers favour SMSF trustees because:

• They can withdraw and control their investments directly
• May be seeking higher returns
• Fewer safeguards in place compared to institutional super funds

If you or a loved one are Stake Super customers or SMSF trustees in general, you should be aware of the common scams plaguing the industry.

Fake investment platforms

FX, crypto or other ‘AI trading’ platforms with no verifiable underlying investments. For example, scammers may claim ‘My AI FX platform is used by multiple SMSF investors’.

Impersonation scams

Fake websites, documents or messages that use trusted brands to appear legitimate. 
Often using trademarked branding elements to appear genuine. 

Social media/Celebrity scams

Ads using public figures are running rampant at the moment, usually utilising ads with personalities to direct people to scam websites or groups. 

Account takeover attempts

Requests for login details, verification codes, remote access or screen sharing is commonplace.

Recovery scams

Scammers could offer to recover lost funds for a fee, often used to retarget people 
who have already been scammed in the past.

Protecting your account

• Enable two-factor authentication (2FA)
• Use strong, unique passwords or passphrases that are hard to guess
• Never share your login details

Protecting your investments

• Be mindful/wary of unsolicited investment ‘opportunities’
• Avoid acting under pressure or urgency
• Seek advice from a licensed financial adviser before making decisions related 
to your SMSF balance/investments


Staying alert online

• Don’t click unknown links or download files from unverified sources
• If you receive communications from an unknown source, check for authenticity 
through official channels
• Do not grant remote access to your device(s)