Home loan enquiry scams in Australia — how to spot a fake offer after you hit ‘submit’

A few weeks ago a client forwarded me a screenshot that looked, at first glance, like Westpac had approved her refinance overnight. The logo sat in the corner, the colours were right, and the dollar figure matched what she had hoped for. The only odd part was the reply-to address: a Gmail account with an extra digit in the name.

She had lodged a generic “compare my rate” enquiry through a comparison site two days earlier. The scam message arrived before I had even opened her file in the CRM. That sequence — enquiry first, “approval” second, urgency third — is exactly what ASIC describes in its public warnings about fake loan offers following online interest.

This piece is general information, not legal advice. If you have already sent money or identity documents to someone you now doubt, skip to the “If you have already paid” section and ring your bank on the number printed on your card, not a number from the message.

---

1. Why this scam is having a moment

Households are shopping for refinance and first-home finance in the same channels they use for everything else: search ads, social lead forms, aggregator emails, and broker contact pages. The enquiry itself is harmless — it is usually just a name, phone number, and a rough loan size. The weakness is what happens next: cold contact that arrives faster and slicker than a human broker could realistically respond, often with a PDF attachment or a link to a payment page.

ASIC has specifically warned that scammers pretend to be legitimate lenders (banks and credit unions) and that this often occurs after the consumer completes an online enquiry form expressing interest in a loan. That is not a fringe footnote; it is the regulator describing the dominant pattern. See ASIC’s news item Beware of loan offers from scammers impersonating lender (primary source — read the bullet list once and you will recognise half the messages in your spam folder).

Moneysmart’s guide to banking and credit scams adds the consumer-facing layer: loan scams may arrive after you have filled out an online loan enquiry form, and they lean on guaranteed approval, no credit check, or up-front insurance or tax before funds are released.

Put simply: the enquiry creates a signal that you are in-market. Criminals buy, harvest, or intercept that signal. Licensed brokers do not operate that way — more on that in section 4.

---

2. Red flags ASIC and Moneysmart agree on

You do not need to memorise a long list. If two of the following show up, treat the approach as suspicious until proven otherwise:

• Up-front fees for “insurance” or “tax” before any loan funds exist — ASIC calls this out explicitly in the impersonation-lender warning above.
• Pressure to move today — fake offers almost always invent a deadline. Real credit assessment does not work on a twelve-hour clock.
• Payment to a person’s name rather than the lender’s legal name you can verify on ASIC’s register (more below).
• Free webmail (Gmail, Outlook, Yahoo) supposedly representing a major bank’s credit department. Banks use controlled domains; they do not run “pre-approval teams” out of anonymous inboxes.
• Requests for photos of your ID paired with a request for a selfie “for compliance” before you have chosen a product or met anyone on video. Identity harvesting is a parallel profit line for the same crews.
• A website that looks right but sits on the wrong URL — ASIC maintains a running list of scams impersonating ASIC and Moneysmart because cloned sites are now routine. Their hub Scams impersonating ASIC explains how to verify you are on a genuine .gov.au domain before you type anything sensitive.

Moneysmart also reminds readers that all Australian consumer lenders must hold an Australian credit licence from ASIC. If the “lender” cannot be found on the register, you should not deal with them — and you can report that to ASIC. The same page links through to ASIC’s Professional Registers Search (use the “Credit Licensee” filter when checking a company you have never borrowed from before).

---

3. How this differs from a licensed mortgage broker workflow

When someone enquires through this practice, the first outbound touch is boring on purpose: we confirm who we are, who we represent, and what we need next — usually a short call or a reply that references something specific from their message (suburb, employment type, target purchase date). We do not ask for up-front fees to “unlock” a rate. Commissions in residential broking are overwhelmingly paid by the lender at settlement, which is why the economics of “send $800 to release your approval” never line up with legitimate broker conduct.

Brokers who provide credit assistance in Australia also sit under the National Consumer Credit Protection Act 2009 framework and ASIC’s Best Interests Duty for mortgage brokers (RG 273). That does not make every broker perfect, but it does mean there is a disciplined paperwork trail: credit guide, needs analysis, written recommendations where required, and identifiable Australian Credit Licence / credit representative numbers you can verify.

If your “broker” will only speak on WhatsApp, refuses a fixed Australian business address, and cannot point you to a verifiable ACL or credit representative entry, slow down.

---

4. Two-minute verification anyone can run

1. Google the business name + “ASIC” + “credit representative”. Legitimate practices show up on professional registers with matching numbers.
2. Call the lender’s public switchboard (from the bank’s own website, typed by you — not from the message) and ask whether a file exists in your name from that broker or referrer. Banks will not give detail, but they can sometimes confirm whether outbound contact is genuine.
3. Check domain age and HTTPS if you are sent a portal link. Moneysmart’s banking-scam page repeats the basics: look for https, padlock, and type the institution’s URL yourself rather than following a hotlink.
4. Cross-read the BID credit guide any broker should send before you hand over payslips or tax files. If someone is collecting documents before identity checks and before you know which licensee they represent, that is backwards.

---

5. If you have already paid or sent ID

ASIC’s guidance is blunt: report quickly. Practical order of operations:

1. Your bank — call the number on your physical card. Ask them to block further debits and to trace where the money went. Time matters for chargebacks and recovery windows.
2. IDCARE — if identity documents left your hands, the free government-funded IDCARE service helps with response plans (they will not cold-call you; initiate contact yourself).
3. Scamwatch — report to the ACCC’s Scamwatch so the pattern feeds national statistics and warnings.
4. ReportCyber — for online-enabled fraud, Cyber.gov.au is the Australian Government’s reporting channel.
5. ASIC — misconduct reports for unlicensed credit activity or impersonation sit with ASIC; their scams hub above links reporting paths.

If a bank mishandles your fraud claim, AFCA is the external dispute resolution scheme for participating firms — but AFCA is not a substitute for calling your institution in the first hour.

---

6. What this means if you are still shopping for a real loan

None of the above is an argument against using online enquiry forms. It is an argument for controlled follow-up:

• Prefer the broker’s own site or a known aggregator over random landing pages with a single mobile number.
• Keep a paper trail of who you contacted and when.
• Treat unexpected inbound as guilty until verified — even if the branding looks perfect.

If you want a second pair of eyes on a message thread before you reply, you are welcome to call Azure Home Loans or use the enquiry form with “possible scam — forward attached” in the subject line. I cannot investigate criminal networks, but I can usually tell in one pass whether something matches how licensed credit assistance actually works in Australia.

For straight borrowing mechanics once you are dealing with real parties, our guides on how borrowing capacity really works and preparing a home loan application stay the better technical reads.

---

7. References (read the originals, not just this summary)

• ASIC — Beware of loan offers from scammers impersonating lender
• ASIC — Scams impersonating ASIC (cloned websites, fake Moneysmart pages, recovery scams)
• ASIC — Regulatory Guide 273 — mortgage brokers: best interests duty
• Moneysmart (ASIC) — Banking and credit scams (loan scam signs; licensee check)
• Moneysmart (ASIC) — What to do if you’ve been scammed
• Australian Cyber Security Centre — ReportCyber
• ACCC — Scamwatch — report a scam
• IDCARE — idcare.org
• Australian Financial Complaints Authority — afca.org.au
• Federal Register of Legislation — National Consumer Credit Protection Act 2009 (statute text for readers who want the legal backbone)

---

Broker disclosure: Bishnu Adhikari is a credit representative (Credit Representative 538895) of Vow Financial / Yellow Brick Road (Australian Credit Licence 390261). Azure Home Loans receives commission from lenders when loans settle. This article is not legal or fraud-investigation advice; if you are in immediate financial danger from a scam, contact your bank and ReportCyber first.