Is Fiskil a scam? How to check a request is legitimate

Seeing an unfamiliar name next to your bank account is a good reason to pause and check — that instinct protects you. Here's how to tell whether a Fiskil data sharing request is genuine.

Fiskil is an accredited, regulated provider under the Australian Government's Consumer Data Right (CDR). Apps use us to connect to your bank or energy provider securely. But like any trusted name, scammers sometimes try to imitate the process — so it pays to know what genuine looks like.

Signs it's legitimate

• You started it. A genuine connection begins when you choose to link your account inside an app or website you're already using.
• You log in with your bank, not with us. You're taken to your bank's own secure login and approve with a one-time code your bank sends you.
• You're never asked for your bank password. Fiskil never asks for it, and the genuine process never needs it.
• It's view-only. Data sharing lets the app see specific information — it can't move your money.

Red flags

• Someone you don't know (a "buyer", "seller", or "support agent") sends you a link or QR code and pressures you to connect your bank account.
• Anything that asks you to type your bank password outside your bank's own app or website.
• Urgency: "do this now or lose the deal/refund/parcel."

Scammers on marketplaces and classifieds sites often send fake payment links or QR codes. If someone else sent you the link, don't proceed.

If you connected under pressure or by mistake

Act quickly — you can shut it down in minutes:

1. Revoke the consent in the Consumer Dashboard, or email support@fiskil.com and we'll revoke it for you straight away. See How do I stop sharing my data?
2. Contact your bank and tell them what happened, especially if you shared any passwords or codes elsewhere.
3. Report it to Scamwatch so others can be warned.

You can also ask us to delete any data that was shared.