Scam and Phishing Triage for Sydney Families: A Second Opinion Before You Click, Pay, or Panic

Your mum forwards you a text from “AusPost” saying a parcel is held until she pays a $3.50 redelivery fee. Your teenager shows you a DM offering paid task work for a brand they recognise. Your partner is staring at an invoice from a tradie you actually used last month — except the BSB looks different this time. You are not sure. You do not want to be the family member who told everyone “it’s fine” right before someone lost their savings. Scam and Phishing Triage from Cyber by Exegesis is a same-day expert review of that one message, link, or invoice — with a clear verdict and what to do next.

The problem

ACCC Scamwatch lists scams as the most-reported consumer fraud category in Australia, and the National Anti-Scam Centre’s current alerts read like a tour of the modern family inbox: food delivery impersonation, fake crypto platforms, job recruitment scams via SMS posing as Amazon or YouTube. The mechanics scale with the household. Aging parents are targeted by impersonation scams pretending to be the bank, the ATO, or Australia Post. Kids and teens encounter recruitment, marketplace, and “friend in trouble” scams across the apps they actually use. Shared devices and shared streaming or banking logins mean one bad click can cascade across the family.

The ACSC’s guidance for individuals and families is clear that recognising scams is the first line of defence — but recognition is hard in the moment, especially when the message looks plausible, the timing matches a real transaction, or the person who received it is rattled. Most Sydney families do not have someone they can send a screenshot to and get a real answer in an hour.

What Scam and Phishing Triage does

Cyber by Exegesis runs a fixed-scope triage on a single suspicious item — a message, an email, a link, an invoice, a phone call recap, or a screenshot from one of the kids’ apps:

• A verdict — likely scam, likely legitimate, or inconclusive — with the specific signals we checked (sender domain, URL structure, payment-detail mismatch, known scam pattern, current Scamwatch alert).
• A plain-English explanation you can forward to the family member who received it, written so a parent, a teenager, or a grandparent can follow the reasoning.
• Next-step instructions if you have already clicked, replied, or paid — including how to report to Scamwatch, how to contact your bank, and when to involve the eSafety Commissioner if a child is involved.
• A short checklist of the two or three account hardening steps that would have caught it (MFA on the impersonated account, a callback rule on bank-detail changes, a family rule for marketplace payments).

Cyber by Exegesis is the cyber consultancy line of Exegesis — the same company behind the DRMO live product. Triage is a one-shot engagement. We are not your IT support and we are not your bank; we give you a defensible second opinion before you act.

How it works

1. You submit the suspicious item through the waitlist intake — screenshot, forwarded email (with full headers where possible), or a description of the call.
2. We check the artefact against current ACCC Scamwatch alerts, ACSC scam-recognition guidance, and the technical signals (domain age, link destination, payment-detail consistency, header authenticity).
3. We return the verdict and signal list in writing, usually within one business day.
4. If the answer is “likely scam” and you have already acted, we hand you the specific reporting and recovery steps — Scamwatch, your financial institution, and where relevant the OAIC or eSafety Commissioner.
5. We close with the two or three account changes that would prevent the next one from landing.

Why this matters in Sydney

Sydney households are multi-generational in ways the scam economy actively targets. Parents in their 40s and 50s are running the device fleet for kids in high school and for their own parents in retirement — often across three suburbs and two languages. The current ACCC Scamwatch alerts on food delivery impersonation, fake recruitment SMS, and crypto-platform scams map directly onto the apps Sydney families actually use day to day. A single triage on the right message — the one your mum was about to pay, or the DM your teenager was about to reply to — is often the difference between a story you laugh about and a report to your bank.

Sources

• ACCC Scamwatch (National Anti-Scam Centre): https://www.scamwatch.gov.au/
• ACSC guidance for individuals and families: https://www.cyber.gov.au/protect-yourself
• eSafety Commissioner (for scams involving children, image-based abuse, or online harm): https://www.esafety.gov.au/
• OAIC Notifiable Data Breaches scheme (if a scam exposes personal information held by an organisation): https://www.oaic.gov.au/privacy/notifiable-data-breaches
• Cyber by Exegesis — Scam and Phishing Triage (waitlist)

Join the waitlist

Join the waitlist — first access when Cyber by Exegesis opens Scam and Phishing Triage for Sydney families

We are sequencing triage intake by household type and by artefact format (email and SMS first, marketplace and in-app messages second). Join the waitlist with the kind of message your family is seeing — we will tell you when we are ready to take your first triage.