Cyber criminals have gained access to some NDIS accounts through myGov, prompting the National Disability Insurance Agency (NDIA) to warn participants about phishing and impersonation scams. Criminals may pose as staff members to obtain login details and passwords, or send fake emails and text messages directing people to fraudulent login pages.
The NDIA is reviewing affected accounts and will contact account holders where there is evidence of a compromise. In the meantime, participants are encouraged to regularly check their NDIS and bank accounts for unusual transactions, remain cautious of unexpected messages or calls, and never share passwords, SMS authentication codes or personal information with someone they do not know or trust. The NDIS also recommends using multi-factor authentication where possible.
Participants concerned about their information can access official guidance on recognising NDIS and myGov scams, phishing attempts and steps to take if they believe they have been affected.
Read the full NDIS notice for the latest information and recommended steps to protect your account.