"Hi Mum" Scam: 1,150 Victims and $2.6 Million Lost
The message says "Hi Mum, I've lost my phone." It comes from an unknown number, and the person asking for money is not your child.
By Siddharth ShankarUpdated October 11, 2026The Australian Competition and Consumer Commission (ACCC) said on August 23, 2022 that more than 1,150 Australians had fallen victim to "Hi Mum" scams in the first seven months of 2022, with reported losses of $2.6 million. It said 82% of reports came from people over 55, who accounted for 95% of reported losses. See how scammers get your number.
Scammers start with details that have already leaked. Is your email one of them?
Free · About 30 seconds · No sign-up · Email not stored
Not every incident has a criminal case. Sometimes the story is a pattern that a regulator measures and warns about. The "Hi Mum" scam is a good example of a pattern that is easy to describe and hard to spot when it arrives on your phone.
What happened
The ACCC reported on August 23, 2022 that more than 1,150 Australians had fallen victim to "Hi Mum" scams in the first seven months of 2022, with reported losses of $2.6 million. Most reports came in June and July.
According to the ACCC, 82% of these scams were reported by people over 55, and they accounted for 95% of reported losses. Women over 55 made more than two-thirds of the reports, with losses of more than $1.4 million.
How it worked
Scammers, most often on WhatsApp, pose as a family member or friend who has lost their phone and is now on a new number. They then ask for money, claiming they cannot access online banking.
The ACCC notes that some messages use the impersonated person's name and appear to have some of their contact details. Victims also gave photos, personal information and bank transfers.
What was exposed
The scammers appear to hold names and contact details, though the ACCC does not explain where they came from. What victims gave up was money and, in some cases, personal information and photos.
A message that uses a real first name feels personal even when it is part of a mass campaign.
How it ended
This is not a case with a clean ending. The figures describe reports to the regulator, which are likely to be lower than the true losses. The warning's practical advice is to call the saved number, ask a question only the real person could answer, never send money unless sure and contact IDCARE if you shared personal information.
A timeline of the data
The ACCC's figures cover the first seven months of 2022, with the biggest numbers of reports in June and July. The release came on August 23, 2022, when the scam was still growing.
The pattern is useful for planning. Scams like this one rise and fall in waves, and a quick public warning at the start of a wave can reach families before they receive the message themselves.
Your best defence is knowing what scammers may already have. Check your email free.
Free · About 30 seconds · No sign-up · Email not stored
Key facts at a glance
- Reports in first seven months of 2022: more than 1,150 victims
- Reported losses: $2.6 million
- Peak months: June and July
- Share of reports from people over 55: 82%, accounting for 95% of reported losses
- Women over 55: more than two-thirds of reports, losses over $1.4 million
- Release date: August 23, 2022
Why this case matters
It shows how cheap a mass scam can be to run. A message costs almost nothing, and only a small share of recipients need to reply for it to pay. The ACCC's figures show that those who respond often lose significant sums.
The scam also targets a natural instinct: parents want to help. That instinct is why a code word or a call to the saved number works so well as a defense. It gives the real family member a way to prove who they are.
What you can do
1Call the saved number
Do not reply to the new number, and do not send money first.
2Ask a personal question only the real person could answer
Or use an agreed family code word.
3Never send money unless certain
A genuine family member will understand the delay.
4Report and get help
Report to Scamwatch, and contact IDCARE if you shared personal information.
Starting the conversation at home
Because the scam targets families, the best defense is a conversation that costs nothing. Agree with parents, grandparents and children that anyone asking for money from a new number will be verified by a call to the saved number. Choose a code word that is not guessable from social media.
Reassure older relatives that checking is not rude. A real child who has lost a phone will wait ten minutes for a callback, and a scammer will not.
What the release does not say
The ACCC release does not say who the scammers are or where they operate. For a grandparent-style scam that ended in prison terms, see the Canadian call centres case.
If this case made you want to check your own position, start with these guides on how scammers find your phone number and email, what an exposed phone number means and how to prevent identity theft. You can also try our free phone number exposure check.
Sources
- ACCC: Warning of suspicious messages as 'Hi Mum' scams spike (1,150 victims, $2.6 million, over-55 shares)
Frequently asked questions
What is the "Hi Mum" scam?
A scammer messages, often on WhatsApp, pretending to be a child or relative on a new number after losing their phone, and asks for money.
How much did Australians lose?
The ACCC reported more than 1,150 victims and $2.6 million in losses in the first seven months of 2022.
Who is most affected?
Reports came mostly from people over 55, who accounted for 95% of reported losses.
How can I check a message?
Call the person's saved number, ask a personal question only they can answer, or use an agreed code word.
See if your email has already leaked
- Checks your email against known data breaches
- Shows which sites leaked it, when, and what leaked
- We do not store the email you check
Get alerted when your email leaks
Every NordVPN plan includes Dark Web Monitor, which alerts you if your email appears in new leaks.
See NordVPN →Affiliate link. We may earn a commission at no extra cost to you.
Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.