I'll go so far as to say that you shouldn't click any links coming from a business via text. Nor should you call a number that starts with anything other than 1300 (again, if solicited by text). Go directly to the banking app or mygov and call the number on the contact/support page.
If the fraud department rings then get the name of the caller, hang up, call the number in their app or on their site and tell them you just had a call. If they don't know you, you just dodged a scam. Otherwise, continue and listen to them. If the fraud department thinks you're being scammed, they're probably right.
Been working on a malware analysis tool called AssemblyLine 4. I'm trying to set it up to collect artifacts from an s3 bucket and trigger alerts if malicious