Scams & Fraud Awareness

Latest scam alerts

Stay informed about the latest scams targeting Tyro merchants. We’ll update this section with emerging threats and practical information to help you recognise and respond to suspicious activity.

Retail refund scam

Tyro has received reports of scammers impersonating bank, IT/support or internal staff and asking businesses to process “test refunds”.

How the scam may work

The caller may:

ask staff to add a digital card to a mobile wallet, such as Apple Pay, Google Wallet or Samsung Wallet
instruct staff to process one or more “test refunds”, claiming this is required to test terminal functionality or validate a system change
direct refunds to cards or accounts controlled by the scammer, which may include overseas accounts.

What to do

Never process a refund or make changes to your payment setup based solely on an unexpected request.

If someone contacts you claiming to represent Tyro, your bank, your head office or another trusted organisation, verify the request using contact details you already know and trust before taking action.

Food delivery impersonation scam

Tyro has received reports of scammers claiming to represent food delivery companies.

How the scam may work

They may offer new equipment, request changes to merchant details or claim they need to integrate with Tyro before asking for a Tyro one-time passcode (OTP).

What to do

Never share a Tyro one-time passcode with an unexpected caller, even if they claim to represent Tyro or another organisation you work with.

If you receive an unexpected request to update your account details, integrate a service or provide an OTP, stop and independently verify the request before proceeding.

Think you’ve been scammed?

If you suspect scam activity involving your Tyro account or service, contact Tyro immediately using our official support channels.

Contact Support

Common scams that may affect Tyro customers

Scammers may target businesses by asking you or your staff to make an urgent payment, change bank account details, share security information or install software that gives them access to a device.

Invoice redirection scams

A scammer may send a fake invoice or alter payment details on a legitimate invoice so that money is paid into the scammer’s account.

Business email compromise

A scammer may gain access to, or imitate, a business email account and send payment instructions that appear to come from a supplier, customer, employee or senior manager.

Supplier payment detail change scams

A scammer may pretend to be a supplier and ask you to update their bank account details. The request may look genuine and may use copied branding, email signatures or invoice templates.

Urgent payment request scams

A scammer may pressure staff to make an urgent payment, often by pretending to be a manager, business owner, supplier or trusted contact.

Phishing scams

A scammer may send an email, SMS or message that includes a suspicious link or attachment. The message may ask you to enter login details, approve a payment, verify account information or download software.

Remote access scams

A scammer may ask you to install software or give them remote access to your computer, phone, tablet or point-of-sale device. This may allow them to view sensitive information or control the device.

Investment or crypto-related scams

A scammer may promote an investment opportunity, cryptocurrency platform or trading service that appears legitimate but is designed to steal money or personal information.

Tyro impersonation scams

A scammer may pretend to be from Tyro and ask for passwords, PINs, one-time security codes, account information or payment approvals.

Warning signs to look out for

Be alert if someone asks you to:

act urgently or keep a request secret;
change payment or bank account details;
share passwords, PINs or one-time security codes;
install remote access software;
approve a payment you do not recognise;
click an unexpected link or open an attachment;
move money to “protect” or “secure” an account.

You should also be cautious of:

unexpected invoices;
unusual email addresses or domain names;
suspicious links;
spelling, grammar or formatting errors;
payment requests that do not follow your usual business process;
pressure tactics or threats;
requests made outside normal communication channels.

What Tyro will and will not ask you to do

Tyro may contact customers via email or phone. However, Tyro will never ask you to:

disclose your password, PIN or one-time security code;
transfer money to “protect” or “secure” your account;
approve a payment you do not recognise;
install remote access software;
ignore security warnings;
share sensitive account information through an unverified link;
log in using your username and password unless logging in is required as part of an activity you have initiated or are expecting;
click on links in SMS messages.

If you are unsure whether a message or call is really from Tyro, stop the interaction and contact Tyro directly using official Tyro contact details.

What to do if you think you have been targeted by a scam

If you think you have been targeted by a scam, act quickly.

Stop communicating with the suspected scammer.
Do not send any more money or information.
Contact Tyro immediately using official support channels if your Tyro account or Tyro service may be involved.
Change any passwords that may have been compromised.
Do not approve any payment you do not recognise.
Save evidence, including emails, SMS messages, invoices, screenshots, phone numbers, payment details and website links.
If you have installed software, clicked a suspicious link or given someone remote access, disconnect the device from the internet and consider enhancing security on your accounts.
Contact your other bank or financial institution if another account, card or payment method may be affected.
Report the scam to Scamwatch.
Contact IDCARE if personal or identity information may have been exposed.
Report cybercrime through Cyber.gov.au where appropriate.

Complaints and escalation

If you are unhappy with how your scam report or related concern has been handled, you can make a complaint to Tyro. We will review your complaint, explain the outcome and let you know what options may be available to you.

If you are not satisfied with the outcome, you may be able to escalate the matter to an external dispute resolution body, such as the Australian Financial Complaints Authority, where applicable.

Submit your feedback