But it exposes a huge vulnerability in our anti-scammer security systems. That the specific transaction amount a code would approve is missing, is another hole in the protection for consumers. This information alone would usually alert us to something untoward.

Now, to be fair, Westpac swiftly messaged asking if Amanda had authorised a charge of $997.33, but she had unfortunately already entered both codes.

She responded “No” but a block on her card came too late. An hour or so later, someone from the fraud team also called her and took details, saying he would look into it. And that’s where the situation stalled.

A chargeback is now the only way. Your mum has clearly not received what she had “purchased”: the Apple gift card. Well, after my inquiry, Westpac escalated Amanda’s case and assures me that’s exactly what will happen – all charges will now be reimbursed.

A Westpac spokesperson told me: “When a customer transfers or sends their money to a scammer, we work hard to recover the money where possible. If we’re unable to recover the funds, reimbursement is considered on a case-by-case basis with a range of factors taken into account.” So credit to the bank for that.

Loading

It also said: “Stopping scams is one of our highest priorities, and we are investing significantly in scam prevention and detection measures.”

But scams are a story we hear far too often now – both the failure to stop them and their increasingly insidious, cynical design.

In a government crackdown announced on Friday, banks and social media companies could soon be fined up to $50 million for failing to protect customers. And telecommunication companies will also be held accountable, in a departure from the pure-bank-blame approach taken by countries like the UK.

As for this latest Telstra one, your mum’s case serves as a timely warning, the rewards ruse will ‘ring’ true for many Australians as the company has so many customers.

Telstra has previously warned customers about loyalty points and rewards-based SMS scams. It also says it “isn’t uncommon that scammers contact our customers pretending to be from Telstra” and “we block millions of threats across SMS, email and phone calls every month”.

Yes, millions.

So, to safely check your Telstra Plus points, download the My Telstra App. And to help stay safe from scams, never click on SMS or email links in unsolicited messages and don’t feel pressured to share personal information.

Instead, contact the organisation on the official number listed on a website or the phone number in your contacts list … if the person is claiming to be a family member or friend.

Meanwhile, Sarah, please let me know if your mum doesn’t receive her rightful refund.

Nicole Pedersen-McKinnon is the author of How to Get Mortgage-Free Like Me, available at www.nicolessmartmoney.com. Follow Nicole on Facebook, X and Instagram.

Advice given in this article is general in nature and is not intended to influence readers’ decisions about investing or financial products. They should always seek their own professional advice that takes into account their own personal circumstances before making any financial decisions.

Expert tips on how to save, invest and make the most of your money delivered to your inbox every Sunday. Sign up for our Real Money newsletter.