Scams, payment redirection and identity fraud for mortgage brokers.
Thirteen lessons on payment redirection, identity fraud and AI-assisted scams for mortgage brokers, credit representatives and their support staff, and a free 25-question practice test. About 2 hours of course time, on your phone or computer, with no account. Pass the test and download a certificate of completion with a QR check and a ready entry for your CPD log for A$39. You pay only after you pass.
- Pay only if you pass
- Retake the test as often as you like
- 2027 edition · no account, no subscription
Try a question from the test
Lesson 2 · Settlement money: payment redirection on a broker’s file
A conveyancer’s email says their bank details have changed for settlement. What does the ACSC advise?
Show the answer
Right answer: B, Confirm by calling the sender’s established phone number, or meet face to face, before sending funds. The advice is to take extreme care to confirm changes by calling the sender’s established phone number or meeting them face to face before transferring any funds. [S11] Read that lesson
Thirteen lessons, about 2 hours.
Each part answers a question from the working day and ends with a summary. Then the test: 25 questions at random, and 20 right (80%) is a pass.
- What your CPD rules ask, and where this course fitsThe MFAA hours, what ASIC expects of your licensee, what counts as CPD, and what to write in your own record for an online course.
- Settlement money: payment redirection on a broker’s fileHow criminals insert new bank details into a property deal, why lenders and brokers are on the target list, and the one check that stops it.
- Doctored payslips, statements and employer lettersWhat AUSTRAC found in mortgage fraud, which brokers ASIC has banned and why, and how forged income documents are spotted.
- Identity checks and impersonation of clients and brokersWhy identity crime matters on a loan file, what the national identity verification services are for, and how impersonators of clients and brokers are caught.
- Patterns across files, and what happens to brokers who miss themWhat AUSTRAC tells lenders to look for, how brokers appear in the data, and what a sensible weekly routine looks like.
- Four files to practise onFour short broker cases built from what AUSTRAC, ASIC and the Australian Cyber Security Centre describe. Decide first, then read the right move.
- Payment redirection and business email compromisePayment redirection is when a criminal gets a business to pay money into the wrong bank account.
- AI-written phishing and impersonation by email, SMS and chatPhishing is when a scammer pretends to be someone you trust to get your money, passwords or details.
- Verification habits that stop most of these scamsThis is the habit that appears most often in the sources behind this course, in one form or another.
- Account takeover, passwords and MFA fatigueAccount compromise means someone gets into your email, bank or other online account without your permission.
- Synthetic identities and fake documentsThe US Treasury's financial crimes unit (FinCEN) defines a synthetic identity as a combination of real and fake personal information used to build a person or business that can pass identity checks.
- Voice clones and deepfake video calls: an emerging riskVoice cloning and deepfake video are real, and the official bodies warn about them, but they are still a small part of the picture.
- When it happens: the first hourIf you think you have sent money or bank details to a scammer, contact your bank or financial institution immediately.
Inside: 13 lessons, 82 parts, 112 practice questions, each explained, and 172 facts, each linked to its source.
How the 2 hours are counted: reading time at 200 words a minute (58 minutes, measured from the lesson text), 1 minute for each of the 39 review questions and for each of the 25 test questions, rounded down to the half hour.
How it fits the MFAA’s CPD rules.
The MFAA sets the membership CPD rules and ASIC sets what licensees must do. This is what they say, and what we do about it.
| Question | What the MFAA says | What this course does |
|---|---|---|
| How many hours do I need? [S1] | MFAA members: 30 CPD hours per renewal year. ASIC expects at least 20 a year from third-party home loan brokers. | The certificate shows the hours counted from the course content, rounded down. |
| Can an online course count? [S1] | The MFAA lists webinars, workshops and online courses. ASIC lists online tutorials and quizzes. | Each lesson has review questions and there is a final test, so it is interactive, not passive reading. |
| Who decides if it is relevant? [S3] | The MFAA says CPD must be relevant to your role. ASIC expects your licensee to decide your training. | We do not decide for you. The certificate has a relevance line you can edit. |
| Is there a limit? [S1] | Courses and workshops count up to 25 hours a renewal year; each self-directed activity up to 6. | The certificate separates reading time from question time. |
| Has the MFAA allocated hours? [S1] | It invites providers to apply for CPD allocation. | This course has not been submitted, so the hours are yours to count. |
Your certificate, as soon as you pass.
Type your name, pay and download it straight away as a PDF: the certificate, a training record and a ready entry for your CPD log.
Certificate of completion
Scams, payment redirection and identity fraud for mortgage brokers and credit representatives (2027 edition)
This is to certify that
Sample Name
has completed the self-paced online course from Aptia Skills and passed its final test with 23 out of 25 right (pass mark 20).
- Your role
- Mortgage broker
- MFAA or credit representative number (partly hidden)
- *****678
- Course hours (rounded down)
- 2 hours
- Study time
- 122 min
- What your CPD rules ask, and where this course fits
- Settlement money: payment redirection on a broker’s file
- Doctored payslips, statements and employer letters
- Identity checks and impersonation of clients and brokers
- Patterns across files, and what happens to brokers who miss them
- Four files to practise on
- Payment redirection and business email compromise
- AI-written phishing and impersonation by email, SMS and chat
- Verification habits that stop most of these scams
- Account takeover, passwords and MFA fatigue
- Synthetic identities and fake documents
- Voice clones and deepfake video calls: an emerging risk
- When it happens: the first hour
This course has not been submitted to the MFAA for CPD allocation, and ASIC leaves training to each credit licensee. You decide, with your licensee, whether it is relevant to your role, and you keep your own CPD records.
- Date issued
- 2 November 2026
- Issued and signed by
- Aptia Skills · Opus Vault
What your certificate includes
- A PDF certificate of completion (A4) with a unique number. Download it straight away. Your name, your role, and your MFAA or credit representative number if you choose to give it (partly hidden).
- A training record. The thirteen lessons with the reading time of each and the kinds of source they draw on.
- A ready entry for your CPD log. The activity, provider, date, 2 hours counted and how, and a line on why it is relevant. You edit it.
- A QR check code. Anyone can check in seconds that it is genuine and still valid.
- A purchase receipt. With the price and what you agreed to before paying.
A$39Australian dollars · one payment
You pay only after you pass. By card, Apple Pay or Google Pay. No account, no subscription. If we get something wrong, we fix it or refund you.
Take the test and get itTraining a team? Coming soon: one link per person and one invoice. Email hello@aptiaskills.com.
Quick answers for mortgage brokers.
Short pages, answer first, each with its sources.
The rules, plainly.
We are a private training provider, not a public body. Tap each answer to see its source.
How many CPD hours do MFAA members need?30 hours per membership renewal year. At renewal you attest that you have done them.
- MFAA members must complete 30 CPD hours each membership renewal year, and at renewal they attest that they have. [S1]
Who decides what training a credit representative needs?The credit licensee. ASIC expects it to be documented, and for third-party home loan brokers it expects at least 20 hours of CPD a year.
- ASIC generally expects a credit licensee to decide what initial and ongoing training its representatives need, and to build it into its recruitment and training systems. [S3]
- ASIC expects representatives who give third-party home loan credit assistance to hold at least a Certificate IV in Finance and Mortgage Broking and to do at least 20 hours of CPD per year. [S6]
Does a self-paced online course count?The MFAA lists webinars, workshops and online courses, and ASIC lists online tutorials and quizzes. You and your licensee decide whether a course is relevant.
- The MFAA says CPD must be relevant to the mortgage and finance industry, your role and your career goals. Webinars, workshops and online courses are listed among the activities that qualify. [S1]
- RG 206 lists completion of online tutorials or quizzes on recent regulatory, technical or professional developments in the industry as an activity that may count towards CPD. [S6]
Has this course been submitted to the MFAA for CPD allocation?No. The MFAA invites providers to apply for allocation; this course has not applied. You count your own hours.
How do I check a changed bank account before settlement?Call the sender’s established phone number, or meet face to face, before transferring any funds.
- If any party to a property transaction says their bank details have changed, confirm it by calling the sender’s established phone number, or meeting them face to face, before transferring any funds. [S11]
What have brokers been banned for?ASIC has permanently banned brokers who were knowingly or recklessly involved in giving banks false payslips, bank statements or employer letters.
- ASIC permanently banned an Adelaide mortgage broker and cancelled his company’s credit licence after finding he was knowingly or recklessly involved in providing false payslips and bank statements to five banks for 11 home loan applications. [S9]
- ASIC permanently banned three Sydney mortgage brokers over false employer letters or payslips given to a bank to support 21 home loan applications; the bank financed over $17M of loans in reliance on false documentation. [S10]
What records should I keep?Your name, the date, the provider, a description and the hours earned, plus the certificate or receipt as proof.
- If you keep your own CPD records, the MFAA says to include your name, the date of the activity, the CPD provider details, a description of the activity and the number of hours earned. [S1]
- The MFAA suggests keeping copies of certificates, receipts, confirmation emails or calendar entries as proof of your CPD. [S1]