SIM Box Scam Texts Target Thousands

Detectives from the Crime and Intelligence Command Financial and Cyber Crime Group have charged two people in relation to an online phishing scam where more than 1.7 million fake text messages had been sent.

Investigations by the Cybercrime Unit identified that Subscriber Identity Module (SIM) Boxes, capable of sending bulk text messages across the Australian telecommunications network, were allegedly being used to send out fraudulent links directing victims to fake websites for the purpose of stealing money and identity information.

On March 23, police executed a search warrant at a Southport residence on the Gold Coast where two SIM boxes and a number of SIM cards were located.

As a result of extensive investigations, a man and a woman were arrested at the at the Southport residence on April 18.

Police will allege the SIM boxes were used to send over 1.7 million toll related scam messages, pretending to be from legitimate organisations, over a two-week period in February this year.

A 37-year-old man and a 37-year-old woman, both Chinese nationals, have been charged with one count each of obtaining or dealing with identification information and using a telecommunications network with intention to facilitate the commission of a serious offence.

They are expected to appear in the Southport Magistrates Court today.

Top tips to avoid being scammed include:

  • If you do not know the sender of an email or text message then delete the message.
  • Never click on links in a text message or email.
  • If you were not expecting the email or text message, check with the company via your own internet search.
  • Never send money to a web page or company that originated from a text message.
  • Research the website by using a search engine, look at the URL, see what else is being marketed, don’t be pressured into making a rash decision through fear of missing out.
  • Make sure that the payment details are encrypted – look for the prefix “https” in the URL and a padlock icon in the URL bar and use a secure payment method. Pay by PayPal or your credit/debit card.
  • Use strong passwords.
  • Stop and think before committing to a trade or purchase.
  • If it is too good to be true be then it probably is.

To learn more about scams, visit

If you have been the victim of a cybercrime, you can report online at ReportCyber.

If you have lost money, notify your bank or financial institution immediately.

For support and advice contact

If you have information for police, contact Policelink by providing information using the online suspicious activity form 24hrs per day at

Report crime information anonymously via Crime Stoppers. Call 1800 333 000 or report online at

/Public Release. View in full here.