To report a scam in Australia, contact the bank or card provider immediately if money or account details are involved, then use the appropriate reporting route. Scamwatch accepts suspicious contact and activity. Cybercrime involving stolen money, personal information, or extortion can also be reported to police through the official cyber.gov.au reporting page, commonly reached through ReportCyber.
Before helping someone report a scam in Australia, stop further payments. Keep messages, receipts, recipient details, and a short account of what happened. A practical incident log separates the bank request from the agency report and any identity support plan. This helps track each response without assuming that submitting a report automatically stops a payment or resolves an account exposure.
Where to report a scam in Australia
Scamwatch’s reporting page provides a form for suspicious approaches and explains how reports help disruption and public warnings. It is part of the National Anti-Scam Centre’s work. Keep the requested payment separate from the amount actually lost. A report should describe the specific contact, website, or transaction rather than infer that every similarly named business participated in the approach.
The cyber.gov.au reporting page links to the police cybercrime form. Follow its instructions for the incident involved. Someone preparing to report a scam in Australia can keep the police reporting details beside the Scamwatch submission, clearly labelled. Contact the bank separately about the payment, and keep the provider’s reference distinct from any police or other reporting confirmation received later.
| Concern | Official starting point |
|---|---|
| Suspicious approach | Scamwatch report form |
| Cybercrime | Police cybercrime reporting through cyber.gov.au |
| Payment or account exposure | Bank or card provider |
| Identity and cyber support | IDCARE |
| Immediate danger | 000 |
How to report a scam in Australia involving a bank
Scamwatch’s response guidance advises contacting the bank or card provider immediately and asking it to stop transactions. Explain what was paid, when, and to whom, including any credentials shared. A working record should identify each payment separately. Do not combine a website’s claimed investment balance with the amount actually transferred from the affected account during the incident.
Ask the provider which process applies to the transaction and retain its response. Record the requested action and any further documents needed. Scamwatch points to the Australian Financial Complaints Authority if the bank’s handling remains unsatisfactory. Keep the original request beside the response so a later complaint can explain the particular issue with the provider’s handling of the payment.
Protect exposed accounts and identity documents
The official cyber recovery guidance explains that next steps depend on the information shared. List affected accounts and any device access alongside the payment record. The phone verification guide explains why caller ID alone cannot authenticate a caller. Independently open the provider’s established contact route rather than use details supplied by the person whose request is being assessed.
IDCARE offers identity and cyber support, including a tailored response plan for individuals. Its Australian individual helpline is 1800 595 160. Scamwatch describes its planning help as free. Prepare a list of the accounts, identity documents, and communications involved. Keep that support plan separate from the payment provider’s decision about the money already transferred to a recipient during the incident.
Check investments through ASIC Moneysmart
ASIC Moneysmart’s investment checklist recommends checking licensing, independently verifying contact details, understanding the investment, and reviewing offer documents. It also highlights impersonation risks. Match the offered service to the actual provider and relevant permissions. A company name on a message does not establish that the licensed business sent the offer or operates the website requesting money from a prospective investor.
Someone deciding how to report a scam in Australia can keep the investment offer, transfer receipts, and withdrawal messages in separate entries. This suggested filing method helps explain the sequence. Review recovery scam warning signs before responding to a later promise to retrieve funds. Record that new approach separately, including the claimed organisation and any payment requested by the sender.
Scams Prevention Framework status
As checked on 6 November 2026, the ACCC describes staged implementation of the Scams Prevention Framework. Covered banking, telecommunications, and digital platform entities must hold AFCA membership from 1 September 2026. Most framework obligations are scheduled to begin on 31 March 2027. The ACCC also identifies that later date for AFCA’s eligible framework scam complaints process after internal dispute resolution.
Keep the payment date and provider’s written decision in the incident folder so the applicable complaint route can be assessed. This is a practical recordkeeping suggestion, not a guarantee of reimbursement. Use the UK reporting guide or Canada reporting guide when those national systems apply. A cross-border account should distinguish the person’s location, payment provider, and recipient details on receipts.
Questions and answers
Which task should come before completing a scam report?
Scamwatch advises contacting the bank or card provider immediately and asking it to stop transactions. Stop sending further money. Reporting can follow while records are organised, but the provider should be told promptly when money or financial information may be at risk.
Does Scamwatch accept suspicious approaches without a loss?
Yes. Its reporting page invites reports about suspicious contact or activity. Reports can help identify approaches, support disruption, and warn the community. Keep the sender details and request, distinguishing an attempted payment demand from money that was actually sent.
When is the police cybercrime reporting route relevant?
Scamwatch directs victims of cybercrime, including stolen money or personal information and extortion, to the police reporting route on cyber.gov.au. Use the official reporting page to reach the correct form. Contact the bank separately if a financial transaction is involved.
Where can a person get identity support?
IDCARE provides identity and cyber support and develops a response plan for affected individuals. Its Australian individual helpline is 1800 595 160. Scamwatch describes its planning support as free. Keep the affected accounts and documents identifiable when preparing for the conversation.
Who should be called in immediate danger?
Scamwatch says to call 000 if someone is in immediate danger. An online report is a separate task. Once immediate safety needs are addressed, preserve the relevant communications and payment records for the appropriate bank, reporting body, or support organisation.
How should an investment provider be checked?
ASIC Moneysmart recommends checking the relevant licence, independently verifying contact details, reviewing offer documents, and confirming the business is not being impersonated. The registration record and the incoming offer must be matched carefully. Treat a familiar company name alone as insufficient to identify the sender before taking any payment or contact action.
Are all Scams Prevention Framework duties already operating?
The ACCC describes a staged introduction. Required AFCA membership for covered entities began on 1 September 2026, while most obligations are scheduled for 31 March 2027. Check the applicable process with the provider rather than assuming the later framework duties already govern a claim.
What if a new caller promises to recover the money?
Scamwatch warns that people affected by scams can be targeted again, particularly by offers to retrieve lost money. Preserve the new message and check the claimed organisation independently. Do not let a new promise replace follow-up with the original payment provider and official reporting routes.
Sources
- Report a scam · Scamwatch, National Anti-Scam Centre
- What to do if you have been scammed · Scamwatch, National Anti-Scam Centre
- Submit a report · Australian Signals Directorate
- Recover from scams · Australian Signals Directorate
- Identity and cyber support · IDCARE
- Check before you invest · ASIC Moneysmart
- Scams Prevention Framework · Australian Competition and Consumer Commission