A professional-looking contract can make an online offer feel settled before you have checked who is behind it. Scammers can copy a business name, use an Australian registration number and send convincing documents. The moment before signing is a useful pause to verify the identity, the offer and the payment arrangements separately.

These common mistakes apply to people engaging a supplier, booking a service or entering a business arrangement in Australia. They are practical checks for suspicious offers; they do not replace legal advice about a genuine contract’s terms.

Mistake one: treating an ABN as a trust guarantee

An ABN can help identify a registered entity, but it does not establish that the person contacting you represents that entity or will perform the work. A copied number can appear beside a copied logo on a fraudulent proposal.

The ACCC’s business verification guidance says registrations and identification do not guarantee legitimacy or trustworthiness. Check the entity details and relevant licences through official sources, then confirm that the contact person and contract are actually connected to the business.

Ask: which legal entity is entering the contract, who is authorised to act for it, and how can I independently confirm that relationship? A trading name alone may leave you unclear about the contracting party.

Mistake two: checking through the same suspicious channel

Replying to an email to ask whether that email is genuine does not independently verify it. Nor does calling the number printed only in an unexpected proposal. If a scammer controls the communication, they can provide a reassuring answer.

Find contact information through a source you have reason to trust, such as your established records or an independently located official website. Be cautious with sponsored search results and lookalike addresses. Explain what you received and ask the business to confirm the staff member, proposal and payment instructions.

For an existing supplier, use the contact method you already know. A familiar email thread can also be compromised, so a message appearing in an old conversation is not conclusive evidence.

Mistake three: letting urgency replace questions

An offer that requires immediate signature, secrecy or a rushed deposit deserves closer examination. A genuine deadline can exist, but it should not prevent you understanding the arrangement. Ask what creates the deadline and whether the offer can be provided in writing for review.

Do not sign because someone claims your account, domain or service will disappear unless you act immediately. Check the existing agreement and renewal date through the service you already use. Unsolicited renewal documents may concern a different service or an offer you never requested.

  • Did I initiate this purchase or expect this renewal?
  • Does the proposed service match my actual requirement?
  • Can I review the full terms before committing?
  • Why is an unusual payment method or immediate transfer being requested?

Mistake four: checking the contract but overlooking the payment

A real business relationship can still be targeted by payment redirection. Scamwatch’s fake invoice warning explains how criminals impersonate suppliers or compromise email accounts, changing banking details while preserving a convincing appearance.

Confirm payment details independently before transferring funds, particularly when an account changes or a substantial deposit is involved. Your bank’s available name or account checking tools can contribute to the process, but do not treat any single screen as proof that the whole arrangement is genuine.

In a business, require a separate approval for changing supplier banking details. Record who verified the change, when and through which established contact. Avoid asking a colleague to simply approve the same unverified email.

Mistake five: sending identity documents too early

Some legitimate services require identity checks, but an unexplained request for extensive documents should prompt questions. Ask why each document is needed, who receives it, how it will be protected and whether there is a verified secure submission method.

Do not provide account passwords, one-time authentication codes or remote access to your device merely because a supposed provider says it is necessary to sign. Pause if the process suddenly shifts to unrelated software, a personal messaging account or a different organisation.

Keep the information you do share proportionate to a verified purpose. A completed form can expose more than a signature, including financial information, contact details and copies of identification.

Mistake six: waiting for certainty after something goes wrong

If you have transferred money or shared banking information and suspect a scam, contact your bank or financial institution immediately using a trusted channel. Prompt action may help, but recovery is not guaranteed. Preserve the contract, messages, payment records and relevant website details.

Report the incident to Scamwatch and the relevant platform, and secure any affected accounts. If you signed a document and are unsure of your obligations, seek appropriate legal or consumer advice rather than assuming the signature can simply be ignored.

Before signing any unfamiliar online arrangement, make the verification process visible: confirmed entity, confirmed representative, understandable terms and independently checked payment instructions. A short pause at each stage makes it harder for urgency and convincing design to substitute for evidence.

By