How to Report a Scam in Australia: Scamwatch, Your Bank, the Police and What to Do Next

Falling for a scam is upsetting, and the first hour after you realise what happened matters most. Acting quickly can limit the damage, protect your accounts and help authorities warn others. This guide walks you through exactly what to do, in order, if you have been scammed in Australia.

You do not need to have lost money to report a scam. Reports about attempts and near misses are just as useful, because they help authorities spot new scams early and warn others while the scam is still spreading.

Step 1: Stop engaging and protect your accounts

The moment you suspect a scam, stop replying. Do not click any more links, do not download anything the scammer sent, and do not send further money, even if the person promises a refund or claims your money is about to be released. That promise is part of the scam.

Next, secure the accounts the scammer may have touched. If you shared a password, change it straight away, and change the same password anywhere else you used it. Turn on two-factor authentication on your email, banking and social media accounts if it is not already on. If you gave the scammer remote access to your computer or phone, disconnect from the internet and get the device checked by a trusted technician before you use it for banking again.

Step 2: Contact your bank straight away

If you sent money, paid by card or shared your banking details, call your bank immediately. Use the number on the back of your card or on the bank's official website, never a number from a message that might be part of the scam.

Tell the bank what happened, when it happened and how much was sent. Ask what can be done to stop or recall the payment, and ask the bank to watch your accounts for suspicious activity. If your card details were shared, ask for the card to be cancelled and replaced. Keep a note of who you spoke to, the time of the call and any reference number you are given.

Step 3: Report it to Scamwatch

Scamwatch is run by the Australian Competition and Consumer Commission through the National Anti-Scam Centre. You can report at scamwatch.gov.au.

The report form asks what happened, how you were contacted, what the scammer asked for and whether you lost money. Give as much detail as you can, including the phone number, email address, website or social media profile the scammer used. Screenshots of messages, emails and payment records all help.

Your report does more than record your case. Scamwatch uses reports to track scam trends, publish public warnings and share intelligence with banks, police and other agencies.

Step 4: Report cybercrime and contact police if needed

If the scam involved hacking, malware, identity theft or an online attack, also report it to ReportCyber at cyber.gov.au. ReportCyber is the Australian Cyber Security Centre's reporting service for cybercrime, and reports there go to police.

For most scams, Scamwatch and ReportCyber are enough. Contact police directly if you have lost a large amount of money, if you know who the scammer is, if you have been threatened, or if the scam involved a crime in progress. In most states and territories, the non-emergency police assistance line is 131 444. Call 000 only if there is an immediate danger to life or property.

When you speak to police, bring the same evidence you gathered for Scamwatch: screenshots, transaction records, the scammer's contact details and a timeline of what happened. Ask for a report number and keep it with your other records.

Step 5: Get help if your identity was stolen

If you shared personal documents, identity numbers or enough personal detail for someone to pretend to be you, contact IDCARE. It is Australia's free identity and cyber support service, and it can be reached at idcare.org or on 1800 595 160.

IDCARE can help you work out what a scammer could do with the information you shared, which organisations to contact, and how to put protections in place, such as a ban on your credit file. A credit ban stops new credit accounts being opened in your name, and you can arrange one through the credit reporting agencies.

Also watch your own records over the following weeks for unfamiliar transactions, unexpected bills or new accounts you did not open. Early signs of identity theft are often small, so check your bank statements and your credit report regularly for a while after the incident.

Step 6: Warn others and watch for recovery scams

Tell the people around you, especially older relatives and friends who might be targeted by the same scam. If the scam came through a social media platform, a marketplace, a messaging app or a dating site, report the account or listing on that platform as well, so it can be taken down.

Be ready for a second scam. Victims are often contacted again by people claiming they can recover the lost money for a fee. This is known as a recovery scam. No government agency or legitimate company will ask you to pay to get your money back. If someone offers to recover your funds for a fee, treat it as a scam and report it to Scamwatch too.

Keep all of your evidence in one place: screenshots, emails, transaction records, reference numbers and the names of the people you spoke to. You may need them months later for a bank dispute, an insurance claim or a police follow-up.

Frequently Asked Questions

Should I report a scam if I did not lose any money?

Yes. Reports about attempts and near misses help Scamwatch spot new scams early and warn others. You can report at scamwatch.gov.au even if no money changed hands, and your report still counts.

What is the difference between Scamwatch and ReportCyber?

Scamwatch, run by the ACCC, is the main place to report a scam and collects intelligence used for public warnings. ReportCyber, at cyber.gov.au, handles cybercrime such as hacking, malware and identity theft, and reports there go to police. Many scams should be reported to both.

Can I get my money back after a scam?

Sometimes, but not always. Contact your bank immediately, because stopping or recalling a payment is far more likely in the first hours. Recovery depends on how the money was sent and how quickly you acted. Be wary of anyone who promises to recover your money for a fee, as that is usually a second scam.