ANZ Bank customers are being lured to click on a malicious email that itself pretends to report a fraud.
The email tells ANZ customers that their online banking account "has been temporarily locked", as first reported by Nine, because "an unauthorised debit" of $300 was detected.
The message claims the $300 was sent to "Energy PRO Australia LTD" then shows a link to click for the customer to supposedly unlock their account.
The link then takes the victim to a phishing page, which harvests personal information or unknowingly installs malicious viruses onto the computer.
Yahoo Finance has contacted ANZ for comment.
The email is even bold enough to quote real ANZ bank telephone numbers to make itself look authentic.
"If you have any questions about your account, please call us on 13 13 14 or International 61 3 8699 6943," it reads.
The latest wave of scam messages follow an attack in March that saw emails pretending to ask security challenge questions to ANZ customers. Challenge questions are the personal questions that users resort to when they forget their password, such as "What's your mother's maiden name?".
ANZ's anti-scam website advises customers that the bank would never send "an email asking for your account details, financial details, or your log in details".
"Be extra diligent if you receive an email that claims to alert you to suspicious activity on your bank account and asks you to log in using a link in the email," the bank stated.
Make your money work with Yahoo Finance’s daily newsletter. Sign up here and stay on top of the latest money, news and tech news.