PayID and instant payments remove much of the delay from sending money, which is useful when splitting a bill, paying a supplier or buying an item. The same speed reduces the time available to correct a mistake. Once a person authorises a payment, recovery can be difficult, especially when a scammer has moved the funds on.
PayID itself is an addressing service linked to a bank account. A mobile number, email address, ABN or organisation identifier can replace a BSB and account number. The safest use still depends on the payer pausing long enough to confirm who is being paid and why.
1. Confirm the request outside the message
A payment request can arrive from a compromised email account, copied social profile or impersonated mobile number. If the amount, account or story is new, verify it through a channel already known to be genuine. For a business invoice, that may mean calling a saved number rather than one printed on the changed invoice.
Urgency is a common warning sign. Claims that an account will be closed, money must be moved to stay safe, or an opportunity will disappear in minutes are designed to prevent checking. A legitimate organisation can explain the request while the customer independently confirms its contact details.
2. Read the payee name and payment details
When a PayID is entered, participating banking services display the name linked to it before authorisation. That is a valuable confirmation step, not a decorative screen. An unexpected name, spelling or business identity is a reason to stop and clarify before sending.
The name match does not prove the transaction itself is legitimate. A scammer may control an account in a plausible name, or the displayed legal name may differ from a trading name. Check the amount, reference and purpose as carefully as the recipient, especially when copying numbers between apps.
3. Treat unexpected links and codes as hostile
PayID will not contact a user asking for an account upgrade or payment to receive money. A buyer claiming that a seller must pay a fee before funds can be released is using a familiar marketplace scam pattern. Emails or texts that imitate PayID branding do not become genuine because they contain a logo.
One-time codes, banking passwords and PINs should not be given to an unexpected caller. A bank impersonator may know personal details and can make a call or message appear to come from a trusted number. End the contact and use the official banking app or a verified number to check.
4. Slow down new and changed payments
For a large first payment, a small test transaction can confirm the destination, followed by independent confirmation that it arrived. Some businesses use approval limits or a second person for changed supplier details. These controls add minutes but can prevent a much larger loss.
Review bank warnings rather than clicking through automatically. They may be based on account patterns or the type of payment being made. No warning system catches every scam, so the absence of an alert is not proof that the recipient is safe.
5. Act immediately if something is wrong
Contact the bank straight away using verified details if money was sent to the wrong person or a scammer. Provide the amount, time, recipient and any messages. Quick action can improve the chance of tracing or recalling funds, but recovery is not guaranteed.
Change compromised passwords, secure email accounts and report the incident through official channels. Scamwatch reports help authorities identify patterns, while IDCARE can assist where identity information has been exposed. Keep screenshots and correspondence because they may support the bank, police or complaint process.
Regular payment hygiene makes these checks easier under pressure. Keep banking apps updated, use a device lock and multi-factor authentication, and review transfer limits before they are needed. Businesses can maintain a verified supplier contact register separate from incoming invoices. Individuals selling online can remember that receiving a legitimate PayID payment does not require clicking a link, entering card details or paying to upgrade an account.
This article provides general information only and is not personal financial or legal advice. Payment services and bank procedures vary, and urgent incidents should be reported directly to the relevant financial institution.