Fake ANZ alert wants your log-in

You could receive an email that looks like it came from ANZ, using the subject "🔒ANZ Security Alert: Your online banking has been suspended!" and a headline about a suspicious login attempt. It is designed to feel urgent and legitimate, telling you your banking access has been paused and pushing you to click a button to access the ANZ portal and start reactivation.

What makes this dangerous is that parts of the email may appear technically clean, which can make it look trustworthy at a glance. But the sender domain is mchamajahadsasa.com, not an ANZ-controlled address, and it was only registered days ago, giving it no established history as a legitimate banking sender. If there is any reply-to mismatch, your response would be routed somewhere other than the apparent sender, which is a strong sign the message is not what it claims to be.

The attacker is after your banking credentials and any other details entered after you click. If you engage, you could hand over account access, expose your business to fraudulent transactions, and give the attacker a foothold for wider compromise.

This campaign has been observed across multiple Microsoft 365 tenants, so you are unlikely to be the only one seeing it. These emails keep appearing because the lure is familiar, the branding is convincing, and newly registered domains can be spun up quickly to support short phishing bursts.