When you receive a New account sign-in email, you may notice that the location listed is a long way from where you actually are, for example, you are in Darwin, but the message says “near Brisbane.”

This does not mean someone else signed in to your account.

Why does the location appear incorrect:

  • Based on your IP address, not GPS
    The sign-in location is determined from your network’s public IP address, not your physical location. This lookup uses databases that estimate where each internet provider’s addresses are registered.

  • School and ISP routing
    Many schools, organisations, and internet providers route network traffic through data centres or proxies in other cities (for example, Sydney or Brisbane). The sign-in system records the data centre’s location, not yours.

  • Mobile networks and VPNs
    Mobile carriers and VPNs often channel traffic through central hubs, which can make it appear that you signed in from a completely different region.

What this means

If the sign-in alert matches the device, browser, or time you were using, it’s safe to assume it was you. The location shown is simply the point where your internet traffic exited to the wider internet — not your actual position.

If you do not recognise the device, time, or browser listed, you should change your password immediately.