Complete Anti-Scam Guide for Australia: Every Step from Identifying Fraud to Recovering Your Money

1. The State of Online Scams in Australia (2026)

Australia is one of the countries hardest hit by online scam losses worldwide. According to the latest data from Scamwatch, operated by the ACCC (Australian Competition and Consumer Commission), Australians lost over AUD 3.1 billion to scams in 2025. Despite the government establishing the National Anti-Scam Centre in 2023, the scam landscape remains severe.

Six Most Common Scam Types

1. Investment Scams (Number One)

Investment scams cause the highest financial losses in Australia, averaging over AUD 1.3 billion per year. Scammers use social media ads, fake celebrity endorsements, and fraudulent trading platforms to lure victims into "investing." They may allow small withdrawals initially to build trust, then refuse all withdrawal requests using various excuses. Common variants include cryptocurrency investment scams, forex trading fraud, and real estate investment schemes.

2. Romance Scams

Scammers cultivate emotional relationships on dating platforms or social media over weeks or even months, then begin requesting money transfers for various urgent reasons — medical bills, airfare, business difficulties, and more. Victims lose an average of AUD 46,000, and many are reluctant to report due to shame. The "pig butchering" model has been spreading rapidly in Australia, combining romance scams with investment fraud.

3. Remote Access Scams

Scammers impersonate Telstra, NBN, Microsoft technical support, or bank staff and call claiming your computer has a virus or your account has suspicious activity. They ask you to install remote control software like AnyDesk or TeamViewer. Once they gain access, they directly transfer your bank funds or steal personal information.

4. ATO (Australian Taxation Office) Impersonation Scams

Scammers impersonate the ATO via text message or phone call, claiming you have unpaid taxes, are about to be arrested, or will have your visa cancelled. They demand immediate payment via gift cards, cryptocurrency, or bank transfer. The real ATO will never request payment through these methods or threaten immediate arrest.

5. Business Email Compromise (BEC)

Scammers compromise or spoof business email accounts, impersonating suppliers, clients, or executives to send emails requesting changes to payment account details. Australian businesses lose over AUD 98 million annually to BEC. Common tactics include: forging invoices with altered BSB/account numbers, impersonating CEOs to request urgent transfers, and posing as lawyers requesting "settlement payments."

6. Online Shopping Scams

Fake shopping websites attract consumers with prices far below market value, then either fail to deliver goods or send counterfeit products. These are particularly common on Facebook Marketplace, Gumtree, and counterfeit branded standalone websites.

---

2. How to Use ScamLens to Determine If You've Been Scammed

Before taking any action, first confirm whether you've actually encountered a scam. ScamLens is a free AI-powered security detection platform that can help you make a quick assessment.

Step 1: Visit ScamLens

Open your browser and go to scamlens.org.

Step 2: Enter Suspicious Information

Type the suspicious website domain into the search box, for example super-invest-au.com. ScamLens will complete its analysis within seconds.

Step 3: Review the Results

ScamLens generates a detailed security report for the website, including:

• Trust Score (0–100): A comprehensive assessment of the website's safety level
• Threat Intelligence Matching: Connected to 90+ global threat intelligence sources to check if the website has been flagged
• AI Risk Analysis: Intelligent analysis of the website's registration date, server location, SSL certificate, content patterns, and more
• Community Feedback: See whether other users have already reported this website

Step 4: Get Recommendations

If the trust score is below 40, ScamLens provides clear risk warnings and recommended actions. You can also use the AI Anti-Scam Chatbot on the page to describe your situation and receive personalised advice.

Cryptocurrency Detection

If cryptocurrency is involved, ScamLens also supports direct wallet address scanning, covering 18 major blockchains including Ethereum, Bitcoin, Tron, and Solana.

---

3. Search and Report on ScamLens

Search Existing Records

1. Enter the suspicious domain in the search box at scamlens.org
2. Review the detailed report page for threat intelligence, community ratings, and historical reports
3. The report page displays other users' reports and voting results

Submit a Report

1. Click the "Report" button on the report page
2. Select the scam type (investment fraud, phishing, malware, etc.)
3. Describe your experience — the more detail the better, including scam methods, contact information, and amount lost
4. After submission, your report will help other users avoid the same scam

Why Report on ScamLens?

• Global Sharing: Your report instantly helps users worldwide identify the scam website
• AI Learning: Report data helps AI models more accurately identify similar scam patterns
• Evidence Preservation: The platform automatically saves website snapshots — evidence persists even if the scam site is taken down
• Complements Official Reporting: ScamLens reports are processed faster and serve as a supplement to official channels

---

4. Evidence Collection Checklist

Before contacting police or your bank, make sure to collect evidence first. The more complete your evidence, the greater the chance of recovering your funds.

Essential Evidence to Save

Evidence Type	Specific Details	How to Save
Communication Records	All texts, emails, WhatsApp/Telegram/WeChat chats with the scammer	Screenshots + export backups
Transfer Receipts	Bank transfer records, receipts, BSB and account numbers	Screenshots + PDF downloads
Cryptocurrency Records	Transaction hashes (TX Hash), wallet addresses, exchange withdrawal records	Screenshots + blockchain explorer links
Website Screenshots	Scam website homepage, registration page, investment page, withdrawal refusal page	Full webpage screenshots (including URL bar)
Scammer's Details	Phone numbers, email addresses, social media accounts, website domains	Record each item
Timeline	Complete timeline from first contact to discovery of the scam	Document records
Ad Screenshots	Social media ads or search results that led you to the scam	Save screenshots
Identity Information	If you provided personal details (passport, driver's licence, TFN), record exactly what was shared	Checklist record

Evidence Collection Tips

• Act immediately: Scammers typically delete websites and accounts quickly — save evidence as early as possible
• Use ScamLens snapshot feature: ScamLens automatically saves snapshots of scam websites, which can serve as evidence even after the original site is shut down
• Screenshots must include the full URL: Legal proceedings require proof of the screenshot's source
• Do not delete any communications: Even if the content is distressing, preserve the original records
• Record loss amounts: Be precise about every transfer — amount, date, and recipient

---

5. Reporting Channels in Australia

Australia has multiple official anti-scam channels. Choose the appropriate channel based on your situation. It is recommended to report to multiple channels simultaneously to maximise recovery chances.

1. Scamwatch (ACCC) — Primary Scam Reporting Platform

Website: scamwatch.gov.au

Scamwatch is Australia's primary scam reporting platform, operated by the ACCC and a core component of the National Anti-Scam Centre.

Reporting Steps:

1. Visit scamwatch.gov.au and click "Report a scam"
2. Select the scam type (investment, romance, online shopping, etc.)
3. Provide detailed information: scammer contact details, methods used, amount lost
4. Upload evidence files
5. You will receive a confirmation number after submission — keep it safe

Best for: All types of scams. This should be your first port of call.

2. ReportCyber (AFP — Australian Federal Police)

Website: cyber.gov.au

ReportCyber is the official cybercrime reporting channel, jointly managed by the Australian Signals Directorate (ASD) and the AFP.

Reporting Steps:

1. Visit cyber.gov.au and click "Report"
2. Create a myGov account or log in with an existing one
3. Select "Report a cybercrime"
4. Describe the incident in detail, including technical details (IP addresses, domains, etc.)
5. Upload evidence materials
6. Cases involving losses above a certain threshold are referred to the AFP for investigation

Best for: Cybercrime, hacking, identity theft, phishing, ransomware.

3. IDCARE — Identity Theft Experts

Phone: 1800 595 160 (free)
Website: idcare.org

IDCARE is the only national identity and cybersecurity support service in Australia and New Zealand, offering free one-on-one expert consultations.

How to Use:

1. Call 1800 595 160 (Monday to Friday, 8am–5pm AEST)
2. Or fill out the online "Get Help" form
3. Experts will assess your identity compromise risk
4. They provide a personalised Identity Protection Plan
5. They assist you in contacting relevant agencies to freeze or monitor your identity information

Best for: When personal information (passport, driver's licence, TFN, Medicare) has been compromised or misused.

4. AFCA (Australian Financial Complaints Authority)

Website: afca.org.au
Phone: 1800 931 678 (free)

AFCA is an independent financial dispute resolution body that can help you negotiate compensation with banks or financial institutions for free.

Reporting Steps:

1. First lodge a complaint with your bank/financial institution (this is a mandatory first step)
2. If the bank hasn't resolved it within 30 days or you're unsatisfied with the outcome
3. Visit afca.org.au to submit a complaint
4. AFCA acts as a neutral third party for mediation
5. If mediation fails, AFCA can issue a binding determination against the financial institution

Best for: Bank refund refusals, financial product disputes, insurance claim disagreements.

5. ASIC (Australian Securities and Investments Commission)

Website: asic.gov.au

ASIC regulates Australia's financial markets and investment activities.

Reporting Steps:

1. Visit asic.gov.au and find "Report misconduct or concerns"
2. Search the ASIC investor alert list for the relevant company or individual
3. Submit a detailed report form
4. ASIC investigates unauthorised financial services and investment scams

Best for: Investment scams, unauthorised financial advice, fraudulent financial products. Before searching, check ASIC's MoneySmart (moneysmart.gov.au) to verify whether an investment platform holds a valid licence.

6. eSafety Commissioner

Website: esafety.gov.au

The eSafety Commissioner is Australia's online safety regulator.

Reporting Steps:

1. Visit esafety.gov.au
2. Select the relevant issue type (cyberbullying, harmful content, image abuse, etc.)
3. Submit your report — eSafety can require platforms to remove harmful content

Best for: Online harassment, intimate image abuse, harmful online content.

7. ACMA (Australian Communications and Media Authority)

Website: acma.gov.au

Reporting Steps:

1. Register your number on the Do Not Call Register on the ACMA website
2. Report spam calls and scam text messages
3. ACMA can trace and block scam numbers

Best for: Nuisance calls, scam text messages, spam emails.

8. State and Territory Police

If your losses are significant or there are personal safety threats, contact your local police directly:

State/Territory	How to Report
NSW	police.nsw.gov.au or call your local station
VIC	police.vic.gov.au or call 131 444
QLD	police.qld.gov.au or Policelink 131 444
WA	police.wa.gov.au or call 131 444
SA	police.sa.gov.au or call 131 444
TAS	police.tas.gov.au or call 131 444
ACT	police.act.gov.au or call 131 444
NT	pfes.nt.gov.au or call 131 444

For emergencies, call 000.

---

6. Getting Scam Websites Taken Down

Taking scam websites offline as quickly as possible prevents more people from falling victim. Here are the specific steps.

1. Look Up Website Registration (WHOIS)

Visit whois.domaintools.com or who.is, enter the scam website's domain, and find:

• Registrar: e.g. GoDaddy, Namecheap, Alibaba Cloud
• Registrar Abuse Contact Email: this is the complaint email address

2. Complain to the Domain Registrar

Send a complaint email to the registrar's abuse address, including:

• The scam domain
• A description of the scam type
• Evidence you've collected (screenshots, ScamLens report link)
• A request to suspend the domain

Common registrar abuse emails:

• GoDaddy: [email protected]
• Namecheap: [email protected]
• Cloudflare: [email protected]

3. .au Domain Complaints (auDA)

If the scam website uses .au, .com.au, .net.au, or other Australian domains, you can complain directly to auDA (.au Domain Administration):

• Website: auda.org.au
• Submit a domain complaint — auDA will investigate whether it violates .au domain policies
• auDA has the authority to suspend or cancel non-compliant domains

4. Report to Google

• Safe Browsing Report: safebrowsing.google.com/safebrowsing/report_phish
• Google Search Removal: If the scam website appears in Google search results, you can request removal
• After a successful report, Chrome, Firefox, and Safari users will see a red warning page when visiting the site

5. Report to Payment Processors

If the scam website accepts credit card payments, identify and report to its payment processor:

• Stripe: stripe.com/docs/disputes
• PayPal: Report through the Resolution Center
• Other processors: Search for their abuse/fraud reporting channel

6. Report to SSL Certificate Authorities

If the scam website has HTTPS, you can report to the CA to request certificate revocation:

• Let's Encrypt: Report via community.letsencrypt.org
• Other CAs: Check the certificate details to find the issuer's contact information

---

7. Recovering Your Money

Fund recovery requires swift action — time is the most critical factor.

1. Contact Your Bank Immediately

Golden Window: Within 24–48 hours of discovering the scam

1. Call your bank's fraud hotline (24 hours):
   • Commonwealth Bank: 13 2221
   • Westpac: 1300 131 141
   • ANZ: 13 33 50
   • NAB: 13 22 65
   • Other banks: Check the number on the back of your card
2. Clearly state it's a scam transaction and request immediate freezing of related transactions
3. Ask the bank to initiate a recovery process
4. Obtain a case reference number

The Scam-Safe Accord

In 2023, the Australian Banking Association (ABA) launched the Scam-Safe Accord, with major Australian banks committing to:

• Confirmation of Payee: Verifying that the recipient's name matches the account when making transfers
• Delaying Suspicious Transactions: Implementing delays on high-risk transfers
• Intelligence Sharing: Sharing scam account information between banks
• eID Verification: Using ConnectID and other digital identity verification for account opening

If a bank fails to honour its Scam-Safe Accord commitments and this contributes to your loss, it strengthens your case when complaining to AFCA.

2. Credit Card Chargeback

If you paid by credit card:

1. Contact your card issuer to request a chargeback (payment dispute)
2. Provide scam evidence
3. Chargeback rights are typically valid within 120 days of the transaction
4. Both Visa and Mastercard have consumer protection policies

3. Cryptocurrency Tracing

Once a cryptocurrency transfer is confirmed it cannot be directly reversed, but tracing and recovery may still be possible:

1. Use ScamLens Crypto Tracing: Enter the scammer's wallet address at scamlens.org to track fund movements
2. ScamLens Fund Tracing Report: Professional-grade blockchain forensic analysis that traces funds through all addresses and identifies whether they've reached known exchanges
3. If funds reach a regulated exchange (e.g. CoinSpot, Swyftx, Independent Reserve), immediately contact that exchange's compliance department to request a freeze
4. Report suspicious cryptocurrency transactions to AUSTRAC (Australian Transaction Reports and Analysis Centre)
5. Save all transaction hashes and blockchain records as evidence

4. Free AFCA Arbitration

If the bank refuses a refund or you're unsatisfied with the outcome:

1. Ensure you've first formally complained to the bank and waited 30 days
2. Visit afca.org.au to submit a complaint
3. AFCA's service is completely free for consumers
4. AFCA can order bank compensation of up to AUD $1,085,000
5. AFCA determinations are legally binding on financial institutions

Important Reminders

• Time is money: The sooner you act, the higher the recovery probability
• Stay calm: Describe the facts clearly when communicating with your bank
• Multi-channel approach: Contact the bank, report to police, and lodge an AFCA complaint simultaneously
• Document everything: Save all call records, emails, and case reference numbers

---

8. Recovery Scam Warning

This is the most commonly overlooked yet extremely dangerous form of secondary fraud.

After being scammed, you may encounter the following messages on social media, search engines, or via email:

• "We are a professional fund recovery company — we guarantee we'll get your money back"
• "Licensed Australian recovery lawyers with a 95% success rate"
• "Blockchain tracing experts who can freeze the scammer's crypto wallet"
• "Just pay a small upfront service fee — full refund if unsuccessful"

These Are Almost All Recovery Scams!

Typical Tactics:

1. Scammers purchase victim lists from the dark web (your information may have been exposed when you reported the initial scam)
2. They impersonate law firms, government agencies, or blockchain companies
3. They claim they've located your funds and you just need to pay a "processing fee," "tax," or "unfreezing fee" to recover them
4. After receiving payment they disappear, or keep inventing reasons to demand more money

How to Identify Recovery Scams

• They contact you first: Legitimate organisations don't proactively contact scam victims to sell recovery services
• Upfront fees required: Legitimate lawyers typically charge hourly or on contingency — they don't demand large advance payments
• Guaranteed recovery: Nobody can guarantee 100% recovery of scammed funds
• Payment via crypto or gift cards: This is itself a scam red flag
• High-pressure tactics: Such as "if you don't pay today, the funds will be moved"

Safe Practices

• Only pursue recovery through official channels (Scamwatch, AFCA, your bank)
• If you need legal help, find a licensed lawyer through the Law Society of your state
• Use ScamLens to check any website claiming to help recover your funds
• Remember: Recovering scammed funds should never require you to pay more money

---

9. Prevention Tips + ScamLens

Seven Daily Prevention Principles

1. Verify Before Acting

When you receive any request to transfer money, provide personal information, or install software, independently verify the requester's identity. Don't use contact details provided by them — instead, contact the organisation directly through their official website or a known official phone number.

2. Beware of "Too Good to Be True" Opportunities

High-return, zero-risk investments, goods priced far below market value, unexpected bonuses or tax refunds — if it seems too good to be true, it probably is.

3. Protect Your Personal Information

• Never tell strangers your TFN (Tax File Number), Medicare number, or BSB/account number over the phone
• Use different strong passwords and enable two-factor authentication
• Regularly check your bank statements and credit reports

4. Install the ScamLens Browser Extension

Install the OrangeDuck browser extension for automatic security warnings when you visit suspicious websites, providing real-time protection.

5. Use ScamLens to Check Suspicious Links

Make it a habit: before clicking any suspicious link, entering personal information, or making a transfer, check the target website at scamlens.org first. A few seconds of checking could save you tens of thousands of dollars.

6. Don't Let Urgency Control You

Scammers' most common weapon is creating urgency — "Act now or your account will be frozen," "Limited-time offer ending soon." Legitimate organisations don't use fear to pressure you into immediate decisions.

7. Talk and Share

Discuss suspicious situations with family and friends, and pay special attention to vulnerable groups (elderly people, new migrants, those with limited English). Many scams can be stopped when someone simply "says something."

High-Risk Scenario Alerts

• Social media ads: Don't click investment ads directly — check the website with ScamLens first
• Dating apps: Before someone asks for money, use reverse image search to verify photo authenticity
• Job platforms: Real employers won't ask you to pay for training or equipment upfront
• Phone calls/texts: Banks and government agencies never send links via text asking you to log in

---

10. Mental Health Support

Being scammed is not your fault.

Scamming is a criminal act, and scammers are professionally trained criminals who specifically exploit people's trust and goodwill. No matter how much you've lost, you should not feel ashamed or blame yourself.

Free Mental Health Support Hotlines

Service	Phone	Availability
Lifeline	13 11 14	24/7
Beyond Blue	1300 22 4636	24/7
1800RESPECT	1800 737 732	24/7
Suicide Call Back Service	1300 659 467	24/7
MensLine Australia	1300 78 99 78	24/7

Online Support

• Lifeline Online Chat: lifeline.org.au (nightly 7pm–4am AEST)
• Beyond Blue Online Chat: beyondblue.org.au (daily 11am–midnight AEST)
• Financial Counselling Australia: financialcounsellingaustralia.org.au or call 1800 007 007 for free financial counselling

Common Psychological Reactions

After being scammed, you may experience the following emotions — these are all normal reactions:

• Anger: Towards the scammers and yourself
• Shame: Thinking "how could I have fallen for that"
• Anxiety: Worrying about your financial situation and personal data security
• Insomnia: Replaying the scam events repeatedly
• Isolation: Not wanting to tell anyone you were scammed
• Depression: Feeling helpless and hopeless

Reminders for Yourself

• Anyone can be scammed — including highly educated, high-income professionals
• Seeking help promptly is a sign of courage, not weakness
• Financial losses can be recovered over time — protecting your physical and mental health is what matters most
• Your experience can help others avoid the same scam — share your report on ScamLens
• If you are experiencing severe psychological distress, please call Lifeline 13 11 14 immediately

---

This guide was written by the ScamLens team, with information current as of March 2026. Please refer to each organisation's official website for the most up-to-date information. If you encounter a suspicious website, visit scamlens.org immediately for a free security check.