What to Do If You've Been Scammed in Australia
Time is critical. If you've fallen victim to a scam, the next few hours determine whether you can recover your money and protect your identity. Here's exactly what to do right now.
The first few minutes after realizing you've been scammed are crucial.
Quick action can mean the difference between recovering your money and losing it permanently. Every minute counts. The faster you respond, the better your chances of limiting damage and getting help.
This isn't the time for blame or shame. That comes later, if it needs to come at all. Right now, you need to move through these steps methodically and quickly. Read this guide, then act immediately.
Step 1: Stop All Contact with the Scammer
Cut Off Communication Immediately
Stop sending money, regardless of any threats or promises they make. Scammers will try to keep you engaged with urgency, fear, or hope of recovery. Ignore it all. Block their phone numbers, email addresses, and social media profiles. Do not respond to any further messages, calls, or emails under any circumstances.
Threats Are Fake
If the scammer threatens legal action, arrest, or physical harm, know that these threats are fake. Scammers use fear to prevent you from thinking clearly and seeking help. Real authorities don't threaten people via text message or demand immediate payment to avoid consequences.
Watch Out for Recovery Scams
After you've been scammed once, criminals may contact you again claiming to be from a "recovery service" that can get your money back for an upfront fee. This is another scam. Legitimate authorities never charge fees to recover scam losses. When someone contacts you offering to help recover your funds, it's almost certainly another criminal trying to exploit you again.
Step 2: Contact Your Bank or Financial Institution Urgently
This is your highest priority. Call immediately.
Call your bank or credit union immediately using the phone number on the back of your card or from their official website. Do not use phone numbers provided in scam messages. All Australian banks have priority fraud reporting lines available 24 hours a day, 7 days a week. Use them right now, before you finish reading this article.
What your bank can do:
If caught within minutes, your bank may be able to stop pending transactions before they complete. They can freeze compromised accounts to prevent scammers from making further unauthorised transactions. They'll issue new debit or credit cards if your card details were compromised. For credit card payments, they can initiate chargebacks to dispute fraudulent charges. They'll place alerts on your accounts to monitor for suspicious activity. Most importantly, your bank can contact the receiving bank to attempt fund recovery before the money disappears completely.
Major bank fraud lines (24/7):
Commonwealth Bank: 13 2221 | NAB: 1800 033 103 | Westpac: 1300 651 089 | ANZ: 13 33 50. For other banks, check your card or their official website for fraud reporting numbers.
Recovery depends on payment method:
Credit or Debit Card
Can be disputed through chargeback processes. Contact your bank immediately and request a chargeback for unauthorised transactions. Best chance of recovery.
Bank Transfer
Might be recalled if you act quickly enough. Contact your bank urgently because there's a narrow window before the funds become unrecoverable. Moderate chance if immediate.
PayPal
Open a dispute through the PayPal Resolution Center within 180 days of the transaction. Possible recovery.
Gift Cards
Report to the gift card company (Google Play, iTunes, Steam, etc.) with your card numbers, though recovery is unlikely.
Wire Transfer (Western Union / MoneyGram)
Report immediately to those companies, though recovery is extremely unlikely once funds are collected.
Cryptocurrency
Cannot be reversed under any circumstances. The blockchain doesn't allow reversals, which is exactly why scammers demand crypto. You still need to report it to ReportCyber , but don't expect to recover the funds.
Step 3: Secure Your Accounts and Devices
If scammers gained access to any passwords, personal information, or your devices, you must immediately secure everything to prevent further damage.
This isn't optional and it can't wait.
If you gave remote access to your device:
Disconnect from Internet Immediately
Unplug your ethernet cable or turn off WiFi and mobile data right now. This cuts off the scammer's access to your device.
Scan for Malware
Run a full antivirus and anti-malware scan using trusted security software. Consider getting professional IT help to ensure your device is completely clean. Check for unauthorised software installations.
Change Passwords from Different Device
You'll need to change all your passwords from a different, secure device because you can't trust the compromised machine. If the device is heavily compromised, a factory reset may be necessary, though back up important files first if possible.
Learn more about remote access scams in our tech support scams guide.
Change all passwords in priority order:
1. Bank and financial accounts (highest priority)
2. Email accounts (scammers can use email to reset passwords on other services)
3. Social media (Facebook, Instagram, LinkedIn, etc.)
4. Government services (myGov, ATO portal, Medicare online)
5. Shopping accounts (Amazon, eBay, PayPal, etc.)
Password Best Practices:
Use unique, strong passwords for each account. If you're reusing passwords across multiple sites, scammers can access all of them once they have one. Consider using a password manager to generate and store complex passwords securely. Read our guide on securing your online accounts for detailed instructions.
Enable Multi-Factor Authentication (MFA):
MFA adds an extra layer of security by requiring a second verification method like an SMS code, authenticator app, or biometric scan in addition to your password. Even if scammers have your password, they can't access your account without that second factor. Enable MFA on your banking and financial accounts, email services like Gmail and Outlook, social media platforms, myGov and other government portals, and cloud storage services like Google Drive or Dropbox.
Step 4: Report to Official Authorities
You need to report the scam to multiple official channels. This isn't just about recovering your money. These reports help authorities identify trends, disrupt scam operations, and warn other potential victims.
1. ReportCyber (If You Lost Money)
Start with ReportCyber if you lost money or had personal details stolen. ReportCyber handles police investigation of cybercrime. Your report will be triaged and referred to your local police for investigation. You'll receive a reference number that you can use for insurance claims or bank disputes. This documentation is crucial if you need to prove the scam occurred.
2. Scamwatch (Always Report)
Report to Scamwatch , run by the Australian Competition and Consumer Commission (ACCC). Your report helps warn others and contributes to national scam data that authorities use to identify trends and patterns. Scamwatch doesn't investigate individual cases, but your information helps protect other Australians from the same scam.
3. IDCARE (Free Identity Support)
Call IDCARE at 1800 595 160 for free, expert identity theft support. IDCARE is Australia's national identity and cyber support service. They'll create a personalised response plan to help you recover and prevent further misuse of your identity. Their services are completely free and they provide both practical help and emotional support.
Full reporting guide available in our article on how to report a scam in Australia.
Step 5: Monitor Your Accounts and Credit
The work doesn't end once you've reported the scam. You need ongoing monitoring for the next 6 to 12 months to catch any further fraudulent activity.
Daily Bank Statement Checks
Check your bank statements daily for unauthorised transactions. Even small charges matter because scammers often test accounts with tiny amounts before attempting larger theft. Set up transaction alerts on your bank accounts and credit cards so you're notified immediately of any activity.
Request Credit Reports
Request your credit report from Equifax, Experian, or illion to check for fraudulent accounts opened in your name. You're entitled to one free credit report per year from each bureau. Consider credit monitoring services that provide early fraud detection and alerts, though IDCARE can advise on whether this is necessary in your situation.
Watch for Password Reset Attempts
Monitor your email for password reset attempts on your accounts. These emails indicate someone is trying to access your services.
Check Government Accounts
Check your myGov and ATO accounts regularly for suspicious activity, particularly if you provided tax file number or similar identifying information to scammers.
Step 6: Gather and Preserve Evidence
Evidence is crucial for police investigations, bank disputes, and insurance claims. Collect everything related to the scam and store it securely with backups.
Screenshots: Take screenshots of all conversations including emails, text messages, and social media interactions.
Phone Logs: Capture phone call logs showing the scammer's number and call duration.
Bank Statements: Save bank statements showing fraudulent transactions.
Transaction Records: Keep transaction receipts, confirmation emails, or invoices.
Scammer Details: Record the scammer's website URLs, social media profiles, or email addresses before they disappear.
Documents: Save any documents or forms you completed for the scammer.
This evidence supports your case with authorities and financial institutions.
If Your Bank Doesn't Help
If you're not satisfied with your bank's response to your scam report, you have the right to escalate. Banks have responsibilities under Australian consumer protection laws, and you don't have to accept an initial denial.
Step 1: Escalate Within Your Bank
Request to speak with your bank's complaints department and ask for a formal complaint reference number. Document every interaction including dates, times, names, and what was discussed.
Step 2: Lodge Complaint with AFCA
If the issue remains unresolved, lodge a complaint with AFCA (Australian Financial Complaints Authority) . AFCA provides free, independent dispute resolution for financial services complaints. You can reach them at 1800 931 678 or through afca.org.au.
What AFCA Can Do
AFCA investigates complaints and can order banks to compensate you if they find the bank failed to meet its obligations. The service is free for consumers, and banks are bound by AFCA's decisions.
Emotional Support and Recovery
Being scammed can be emotionally devastating.
Victims often experience shame, anger, anxiety, and depression. These feelings are normal, but they need to be addressed because they affect your wellbeing and your ability to recover.
You are not alone. It's not your fault.
Millions of Australians are scammed every year, and the numbers are rising. Scammers are professional criminals using sophisticated tactics developed over years. Even tech-savvy, educated people fall victim to these scams because they're designed by psychologists and social engineers who understand human behaviour. Don't blame yourself for trusting someone or making a decision under pressure. These criminals create conditions specifically designed to bypass critical thinking.
Seek support from family, friends, or a professional counsellor if the emotional impact is significant. IDCARE provides emotional support in addition to practical identity theft help. Their counsellors understand the psychological impact of scams and can connect you with appropriate resources.
Additional support services:
Australian Cyber Security Hotline: 1300 CYBER1 (1300 292 371) for cyber security advice
IDCARE: 1800 595 160 (Monday to Friday, 8am to 5pm AEST)
Lifeline: 13 11 14 (24/7 crisis support)
Beyond Blue: 1300 22 4636 (24/7 mental health support)
Financial Rights Legal Centre: 1800 007 007 (Monday to Friday, 9:30am to 4:30pm)
Recovery takes time.
The practical steps outlined here will protect your finances and identity, but emotional recovery follows its own timeline. Be patient with yourself. Learn from the experience without dwelling in self-blame. Use it to help protect others by sharing your story when you're ready.