Scams and fraud: protect your super

What is a scam?

How to spot a scam

How to protect your account

Get support

Your super is one of your most important assets and scammers know it. In 2025, Australians lost $22 million to super-related scams. The tricks scammers use are getting harder to spot.

We're committed to protecting our members from scams and fraud. This page tells you what to look for, what we'll never ask you to do, and exactly what to do if something feels wrong.
 

Need immediate help?


If you think you’ve been targeted by a scam or fraud, call us straight away on 1800 682 525 (Mon–Fri, 8am–7pm AEST/AEDT). We can talk you through the next steps and help secure your account where needed. You can also contact IDCARE on 1800 595 160 and report the scam to ScamWatch.

Scams and fraud – what’s the difference?


People often think scams and fraud are the same thing, but there’s an important difference.
 

Scam 


A scam tricks you into doing something – like sharing your personal details, clicking a link, or transferring money. Scammers rely on you taking an action, even when you don’t realise you’re being tricked.

Fraud


Fraud can happen without you doing anything. A criminal uses your stolen personal information – stolen in a data breach or bought online – to pretend to be you and access your account.

Both are serious

Both could target your super. Both can be stopped – if you know the signs.
 

How to spot a scam


Scammers often pretend to be from trusted organisations, including super funds, banks, or government agencies such as the Australian Taxation Office (ATO). They try to rush you into acting before you have time to think.

If something doesn’t feel right it’s okay to pause, slow down and then check with us directly.

Warning signs to look out for


Be careful if an email, message or call:

  • Comes out of nowhere
  • Tries to rush you or increase a sense of urgency to act quickly
  • Asks for your login details, password, or one‑time access codes
  • Includes links or attachments you weren’t expecting
  • Asks you to move or withdraw money urgently
  • Encourages you to set up or transfer your super into a self-managed super fund (SMSF)
  • Offers to help you access your super early
  • Asks you to change your bank account, contact details, or other account details unexpectedly
  • Mentions a rollover, withdrawal or transfer you did not request
  • Looks real but doesn’t feel quite right

If something feels wrong, trust that feeling


Stop, pause, and call us on 1800 682 525 before you do anything. Find out how the most common super scams work - and what to do if you're targeted here.

Mercer Super will never:
 

  • Ask for your password or one time security code
  • Ask for remote access to your computer or device
  • Contact you unexpectedly asking you to urgently change your account details or move your super
  • Push you to set up SMSF or transfer your super into one without your request

If anyone contacts you claiming to be from Mercer Super and asks for any of the above – hang up or ignore the message. Then call us on 1800 682 525 to check.

What to do if you suspect a scam or fraud

Tell us


Contact us on 1800 682 525 (Mon-Fri, 8am-7pm AEST/AEDT).

Act
 

  • Stop all contact with the person or message.
  • Do not click any more links or open attachments.
  • Change your password straight away if you may have shared or exposed it.
  • Check your account details, including your contact details, bank account details, and recent activity.
  • If anything looks wrong - call us immediately on 1800 682 525.

Get support


Call IDCARE on 1800 595 160 - a free service for Australians whose personal information has been stolen or misused.

Report the scam to ScamWatch at scamwatch.gov.au.


How Mercer Super protects your super


Protecting your super is our job - not just yours. 

 

  • Trained staff - Our team is trained to spot and respond to fraud and suspicious activity.
  • Identity checks - We verify who you are before making certain changes to your account, including rollovers, withdrawals, and updates to your personal details.
  • Account monitoring - We monitor for unusual activity on your account, including unexpected login attempts and transactions that don’t match expected patterns.
  • High-risk requests - We apply additional checks to certain higher-risk requests, such as changes to bank details, contact details, rollovers, and withdrawals.
  • Strong authentication - We use multi-factor authentication (MFA) for Member Online and the Mercer Super app.
  • Secure systems - We use current security measures to help protect member information and accounts.
  • Threat intelligence - We monitor emerging threats and work with relevant industry and regulatory bodies to help stay ahead of scam and fraud risks.
  • Ongoing review - We regularly review scam and fraud risks and update our processes, controls, and communications as threats evolve.
  • Global cyber capability - We benefit from Marsh’s global information security capability, including security operations, threat intelligence, incident response, and vulnerability management to help detect, respond to, and prevent cyber threats.


How you can protect your account


Protect your personal information and reduce the risk of financial crime, such as unauthorised access or fraudulent withdrawals, by following the steps below.
 

1

Check your account details regularly

Review your account balance, transactions, and login activity. Report anything unusual to us as soon as possible and keep your contact details up to date.

2

Strengthen your passwords

Use strong, unique passwords and never share them with anyone.

 

3

Secure your online browsing

Avoid public Wi‑Fi when accessing your account or sharing personal information.

4

Manage your social profile

Limit the personal information you share online, as this can be used to compromise your identity.

5

Be careful with links, messages and calls

Don’t click links or open attachments in unexpected emails or text messages. If someone contacts you claiming to be from Mercer Super and you’re unsure, stop and call us on 1800 682 525.

6

Stop and check before you act

Scammers often create urgency to pressure you into acting quickly. If something feels unusual, pause and check with us before clicking links, sharing information or making changes to your account.

Useful resources

These trusted sources can help you stay up to date on the latest scams and protect yourself online.

Report suspicious activity

Does something feel off? Contact us immediately on 1800 682 525, 8am-7pm Monday to Friday (AEST/AEDT), or via the member portal.

Report suspicious activity


If you need extra support


We want every member to be able to get help quickly and easily. Here’s how we can support you.
 

Interpreter services

If English isn’t your first language, we can arrange for an interpreter through Translating and Interpreting Services (TIS) National.

Simply ask our Helpline team for an interpreter when you contact us.

Accessibility support

We offer support for anyone with a hearing or speech impairment through the National Relay Service (NRS). To use the NRS, call 1800 555 660 or register online via www.accesshub.gov.au/about-the-nrs.

NRS Chat users, connect to the NRS then ask for 1800 682 525.
TTY users, phone 133 677 then request 1800 682 525.
Voice Relay users, phone 1300 555 727 then ask for 1800 682 525.

Download our guide

Alternatively, download our Protect yourself and your super from scams guide written in easy-to-follow English.

Download now

Learn more

Common super scams

Find out how the most common super scams work – and what to do if you're targeted.

Common super scamsarrow alt

Online security tips

An easy Do/Don't guide to protecting your super and personal information online.

Download PDFarrow alt

Extra support

Sometimes life can affect your health, your wellbeing, or your finances. When that happens, extra support may be needed – and help is available.

Find out morearrow alt

Frequently Asked Questions

  • How do I know if an email is from Mercer Super?

    Scam emails may contain spelling or grammatical errors, however that isn’t always the case. Scammers can create sophisticated emails with a company logo and similar formatting to what you usually receive from that company.

    Check the sender’s email address carefully and be cautious of messages that ask you to click a link, share personal information, or act urgently. Scam emails may come from unusual or misspelled email domains that don’t match the organisation or super fund they’re claiming to be from. If you’re unsure, don’t click anything, call us on 1800 682 525 using the number on our website mercersuper.com.au.

  • How can I check I’m talking to Mercer Super?

    If you get an unexpected call from someone claiming to be us and they ask you to do something unusual – hang up. Call us back on 1800 682 525. We’ll never ask you to transfer super, share your password, install software over the phone, or ask for one-time codes.

  • What if I've already given someone my details?

    Call us straight away on 1800 682 525. We can review what’s happened with you and, where appropriate, take steps to help protect your account and investigate suspicious activity. Also contact IDCARE on 1800 595 160 if you've shared personal information.

  • What if I don’t recognise a transaction on my account

    Call us on 1800 682 525 and we can provide you with more details about the transaction. If something doesn’t look right, we’ll review it with you and, where needed, take steps to help protect your account and investigate.

  • Can someone access my super without me knowing?

    Yes. This is called fraud. A criminal may use your stolen details to pretend to be you and access your account – without you doing anything. This is why checking your account regularly and keeping your contact details up to date matters so much.

  • Are password managers safe?

    Password managers are an effective way to create, manage and store passwords. You can use them to generate strong and unique passwords, which can help to protect your online security if your username and password are ever exposed in a data breach. It’s also much safer than writing your passwords on paper or storing them on your phone.

    The Australian Cyber Security Centre shares tips on how to choose a reputable password manager.  

  • What if I think my identity has been stolen?

    Contact IDCARE on 1800 595 160. They're Australia's national identity and cyber support service. They'll help you figure out what's happened and what to do next - for free.

  • What is your cyber security approach to protecting my super

    In addition to strong member-facing security, we leverage robust cyber capability from our global parent company, Marsh, which includes:

    • Dedicated team monitoring for cyber threats: A specialised team constantly watches for any signs of cyber threats and responds quickly if any issues arise.
    • Effective response to security incidents: We have procedures in place to handle and recover from cyber attacks or security issues.
    • Investigation of security incidents: When a security issue occurs, we investigate how it happened to prevent similar incidents in the future.
    • Staying ahead of threats: We regularly gather and analyse information about potential cyber threats to identify and prepare for new risks.
    • Regular system checks: We routinely scan our systems for vulnerabilities and fix any potential weaknesses before they can be exploited.

Issued by Mercer Superannuation (Australia) Limited (MSAL) ABN 79 004 717 533, Australian Financial Services Licence #235906, the trustee of Mercer Super Trust ABN 19 905 422 981 (‘Mercer Super’).

Any advice provided is of a general nature and does not take into account your objectives, financial situation or needs. Before acting on any advice we recommend you obtain your own financial advice and consider the Product Disclosure Statement and Financial Services Guide available at mercersuper.com.au. The product’s Target Market Determination setting out the class of people for whom the product may be suitable can be found at mercersuper.com.au/tmd.

‘MERCER’ and 'Mercer SmartPath®' are Australian registered trademarks of Mercer (Australia) Pty Ltd ABN 32 005 315 917.