Top 10 Scams in Australia 2025
Australians lost $2 billion to scams in 2024. Here are the most dangerous threats you need to know about in 2025.
According to the Australian Competition and Consumer Commission (ACCC) Scamwatch , Australians reported losing $2 billion to scams in 2024, with scam reports falling 17.8% to 494,732. While overall losses decreased by 25.9% compared to 2023, scammers are becoming increasingly sophisticated, using AI, deepfakes, and social engineering tactics.
A critical development emerged in 2025: phishing scams saw the biggest increase in losses
Accounting for $13.7 million in the first four months compared to $4.6 million in early 2024. This threefold increase demonstrates that while some scam types are declining, others are rapidly evolving and becoming more dangerous. Understanding the current threat landscape helps you recognise and avoid these increasingly sophisticated frauds.
The Top 10 Scams Targeting Australians
1. Investment Scams ($192 million in 2024)
Investment scams remain the most financially devastating scam type in Australia. Criminals promise high returns on fake investment opportunities, often involving cryptocurrency, shares, or property. The National Anti-Scam Centre reports that 47% of all investment scam losses involved cryptocurrency.
Warning signs: Promises of guaranteed high returns, pressure to invest quickly before you "miss the opportunity," requests to use cryptocurrency ATMs to make deposits, and fake investment platforms that replicate legitimate financial service websites. Legitimate investments acknowledge risk and give you time for due diligence. Scammers want your money before you realise you're being defrauded. Learn more in our Investment & Ponzi Schemes guide.
2. Romance and "Pig Butchering" Scams ($23.6 million in 2024)
Romance scams, particularly the emerging "pig butchering" variation, involve criminals building romantic relationships online before convincing victims to invest in fake opportunities. The Australian Federal Police (AFP) warned in February 2025 that over 5,000 Australian phone numbers were linked to romance baiting scams. Australians aged over 55 suffered the highest individual losses.
Warning signs: Quick declarations of love from people you've never met in person, requests to move conversations to encrypted apps like WhatsApp or WeChat, investment "tips" from your online love interest who claims to have inside knowledge, and reluctance to meet in person or video call despite weeks or months of chatting. Real relationships progress to real meetings. Scammers always have excuses for why they can't prove their identity while simultaneously asking for money. Read our Romance & Pig Butchering Scams guide.
3. Phishing Scams ($13.7 million in early 2025)
Phishing remains the most reported scam type, with 97,831 reports to Scamwatch in 2024. Scammers impersonate trusted organizations via SMS, email, or phone calls to steal personal information and banking credentials. Losses tripled in early 2025 compared to 2024, making this a critical threat as criminals perfect their techniques using AI-generated content and deepfake technology.
Warning signs: Unexpected messages with links (which legitimate organizations have stopped sending to combat fraud), urgent requests to verify account details that create artificial time pressure, grammatical errors or unusual phrasing, and sender addresses that don't match official domains when examined carefully. The sophistication of these messages continues to improve, making verification more important than ever. Learn more in our guide on how to spot phishing SMS and emails.
4. Government Impersonation Scams (10,000+ incidents)
Services Australia observed over 10,000 unique agency impersonation scams in the last financial year, with 86% referencing myGov. Scammers impersonate the ATO, myGov, Centrelink, and Medicare to steal personal information and money. The trust Australians place in government institutions makes these scams particularly effective.
Warning signs: Emails or SMS with links to "verify" myGov details (which myGov explicitly states it never sends), QR codes in emails that lead to credential-harvesting sites, threats of account suspension or benefit cancellation unless you act immediately, and requests for payment via unusual methods like gift cards or cryptocurrency. Government agencies communicate through official channels and never threaten immediate consequences via text message. Read our comprehensive guide on government impersonation scams.
5. Delivery Scams (Targeting 9 in 10 Australians)
Australia Post research shows 9 in 10 Australians have received scam texts or calls, with three-quarters targeted by fake parcel delivery services. Most alarmingly, 27% suffered financial loss, meaning more than one in four people who received these scams lost money to criminals.
Warning signs: Unexpected delivery fee requests (especially small amounts like $2.50), links in SMS messages claiming to be from Australia Post when the company removed links from notifications in March 2025, urgent language claiming your parcel will be returned within 24 hours, and messages appearing in the same thread as legitimate Australia Post texts through sender ID spoofing. Any SMS with a link claiming to be from Australia Post after March 2025 is definitely a scam. Get full protection tips in our Australia Post scams guide.
6. Remote Access Scams (52% increase, $17,943 average loss)
Remote access scams saw a 52% uptick in 2024, with victims losing an average of $17,943. Scammers pose as tech support from Microsoft, NBN, or Telstra and convince victims to install remote access software like TeamViewer or AnyDesk. This gives criminals complete control of the victim's computer, allowing them to view banking credentials, install malware, or manipulate what appears on screen.
Warning signs: Unsolicited calls about computer viruses or internet issues when you haven't reported any problems, requests to download software that allows remote control of your device, pressure to act immediately to "fix" a problem before your computer is permanently damaged, and claims that you've been charged for services you need to refund. Legitimate tech support doesn't cold-call offering to fix problems you didn't know existed.
7. Banking Impersonation Scams (65% reduction in losses at NAB)
Criminals impersonate Commonwealth Bank, NAB, Westpac, and ANZ via SMS, email, and phone calls. While NAB reported a 65% reduction in losses between 2023-2024 through improved security measures like removing links from SMS messages, these scams remain prevalent. Banks collectively removed 600+ fake websites in 2024, though new sites appear constantly.
Warning signs: Pop-up or "flash" SMS messages that appear on your screen even when your phone is locked, callback requests in messages asking you to call a number to verify account activity (when real banks want you calling the number on your card), fake security alerts about suspicious transactions requiring immediate verification, and links to fake banking websites with URLs that closely mimic but don't exactly match official bank domains. Learn more about banking scams and protection.
8. Cryptocurrency ATM Scams ($3.1 million in 12 months)
From January 2024 to January 2025, ReportCyber received 150 reports of crypto ATM scams with $3.1 million in losses. That's one report every 2.5 days with an average loss exceeding $20,000. Scammers direct victims to deposit cash into cryptocurrency ATMs under the guise of paying fines, taxes, debts, or making investments.
Warning signs: Any instructions to use a Bitcoin or crypto ATM (which should immediately trigger suspicion regardless of who claims to be requesting payment), claims that government agencies accept crypto payments (when no legitimate government agency operates this way), and urgency to pay immediately or face arrest, account closure, or other severe consequences. Government agencies, banks, and legitimate businesses never request payment via cryptocurrency ATM. If someone directs you to put cash into a crypto machine, you're being scammed. Period. Read our cryptocurrency scam prevention guide.
9. Payment Redirection Scams
Payment redirection scams involve criminals intercepting genuine invoices and changing bank details, or sending fake invoices that appear to come from legitimate businesses. This particularly affects property transactions where large sums are being transferred, and business-to-business payments where invoicing is routine and electronic.
Warning signs: Last-minute changes to payment details when a transaction was previously confirmed with different banking information, emails requesting urgent payment to a different account than originally specified, phone calls "confirming" new banking information that contradict what you received in writing, and pressure to transfer money quickly before verifying the change. Always verify banking detail changes by calling the business using a phone number you find independently, not numbers provided in the suspicious communication.
10. Family Impersonation Scams ("Hi Mum" Scams)
"Hi Mum" or "Hi Dad" scams involve criminals messaging parents via WhatsApp or SMS, pretending to be their child with a new phone number. They claim to be in urgent need of money due to an emergency like a lost wallet, urgent bill, or broken phone. Voice cloning technology is making these scams increasingly convincing, with criminals using AI to replicate your child's voice from social media videos.
Warning signs: Messages from unknown numbers claiming to be family members when you have their current contact information, requests for money before verification or proof of identity, urgency and emotional pressure designed to bypass your critical thinking, and reluctance to call or video chat to prove their identity. Establish a family code word that only real family members know, and require it before sending money to any unexpected requests. Protect your family with our Family Protection features.
How to Protect Yourself
SafeAus uses smart detection to identify scams in under 5ms.
Before clicking any link, calling any number, or responding to any suspicious message, check it with SafeAus. Simply paste the message or URL into the app for instant verification. This takes seconds and could prevent thousands of dollars in losses or months of recovering from identity theft.
Never click links in unexpected messages
This simple habit eliminates most phishing, banking, government impersonation, and delivery scams. Instead, go directly to the official website by typing the URL yourself or using a bookmarked link. If there's a genuine issue with your account, you'll see it when you log in through official channels. If the message was a scam, you've avoided the trap.
Verify before you trust
If you receive a suspicious request claiming to be from your bank, a government agency, or a family member, contact the organization or person through official channels you find independently. Call the number on the back of your card, look up the official government website, or call your family member's known number. This verification takes minutes and prevents devastating losses.
Use multi-factor authentication (MFA)
On all important accounts, especially banking and myGov. Even if scammers steal your password through phishing, MFA prevents them from accessing your account. Use authenticator apps rather than SMS-based MFA when possible, as SMS codes can be intercepted through SIM swapping attacks.
Be skeptical of urgency
Scammers create false emergencies to bypass your critical thinking. Claims that you must act within 24 hours or face account closure, arrest, or other consequences are designed to panic you into compliance. Legitimate organizations give you reasonable time to respond. Real emergencies can be verified through official channels.
Never provide remote access to unsolicited callers
Legitimate tech support doesn't cold-call offering to fix problems you didn't report. Microsoft, NBN, Telstra, and other major companies don't work this way. If someone you didn't contact asks to remotely access your device, hang up. Protect elderly family members by setting up SafeAus Family Protection to monitor scam threats together. Many successful scams target older Australians who are less familiar with digital fraud tactics. Learn more about Family Network.
What to Do If You've Been Scammed
If you've fallen victim to a scam, immediate action can limit the damage and potentially recover some losses. Time is critical in scam response.
Contact your bank immediately
Call the number on the back of your card and explain exactly what happened. Many banks have fraud teams that can reverse transactions if contacted quickly enough. The faster you report, the better your chances of preventing or reversing fraudulent charges.
Report to authorities
Report to Scamwatch and ReportCyber so authorities can track patterns, warn other Australians, and potentially shut down scam operations. Your report contributes to databases that help protect others and may provide evidence for law enforcement investigations.
Contact IDCARE for identity theft support
Call 1800 595 160 if personal information was compromised. They provide free specialist assistance for identity crime victims and create personalised response plans based on what information the scammers obtained. They can help you place alerts on your credit file, monitor for misuse of your identity, and take action if your identity is used fraudulently.
Change passwords and enable MFA
On all affected accounts. If you reused the compromised password elsewhere, change it on every account. Use unique, strong passwords for each service. Report to police via your local station or online for cyber crimes. While international jurisdiction makes prosecution difficult, police reports create official records that may be necessary for insurance claims, bank disputes, or credit report corrections.
Stay Protected in 2025
Scammers are constantly evolving their tactics, using AI, deepfakes, and sophisticated social engineering to bypass traditional defences. While overall scam losses decreased in 2024, certain scam types like phishing are surging in 2025 with losses tripling in the first four months. The sophistication of fake websites, voice cloning, and impersonation techniques means you can no longer rely on "obvious" signs of fraud.
The best protection is awareness, verification, and using tools like SafeAus to check suspicious messages before you engage. Never let urgency override your critical thinking. Real organizations, real family members, and legitimate emergencies can wait the few minutes it takes to verify through official channels. Scams cannot withstand scrutiny, which is why criminals create artificial time pressure.
For more information and the latest scam alerts, visit Scamwatch.gov.au and follow the National Anti-Scam Centre .