Spotting and avoiding scams
How common scams work, the warning signs to look for, the new scam protection laws, and exactly what to do if you've been scammed.
The short version
- Scammers create urgency and pretend to be people or organisations you trust.
- Never share codes, passwords or let a stranger access your device.
- If you've been scammed, call your bank straight away, then contact IDCARE and report it.
- Be wary of anyone offering to recover lost money for a fee.
Scams can happen to anyone, at any age, no matter how careful they are. Knowing the common tricks, and what to do quickly if something goes wrong, is your best protection.
How big is the problem?
Australians reported losing $2.18 billion to scams in 2025, across about 481,500 reports. The biggest losses came from investment scams, followed by payment redirection scams, romance scams, phishing and remote access scams.
Many more scams go unreported, often because people feel embarrassed. Being scammed is a crime against you. It is not your fault.
Common types of scams
| Scam | How it often works |
|---|---|
| Investment scams | A website, ad or “friend” online promises big, safe returns, often in crypto or trading |
| Impersonation scams | Someone pretends to be your bank, the ATO, myGov, police or a delivery company |
| Payment redirection | A fake email or invoice says a business’s bank details have changed |
| Romance scams | An online partner you’ve never met in person starts asking for money |
| Remote access scams | A caller says your computer or bank account has a problem and asks to log in to your device |
| Shopping scams | Fake online stores or marketplace sellers take payment and send nothing |
| “Hi Mum” scams | A text from an unknown number claims to be your child with a new phone who needs money |
Warning signs to look for
Scammers change their stories, but their tricks are often the same.
- Urgency or pressure. “Act now or your account will be closed.”
- Contact out of the blue. A call, text, email or social media message you weren’t expecting.
- Unusual payment methods. Gift cards, crypto, or sending money to a “safe account”.
- Requests for codes or access. Asking for one-time passcodes, passwords or to install an app on your device.
- Too good to be true. Guaranteed high returns, or a prize you didn’t enter.
- Secrecy. Being told not to tell your bank or family.
Simple habits that protect you
- Stop. Don’t rush. Take time to think before you click, pay or share details.
- Check. Contact the organisation yourself using details from its official website or app, not the ones in the message.
- Protect. Act quickly if something feels wrong.
Also consider:
- turning on multi-factor authentication for banking, email and myGov
- using different, strong passwords, or a password manager
- keeping your phone and computer software up to date
- checking bank details by phone before paying a new invoice
New scam protection laws
The Scams Prevention Framework became law in February 2025. It will require certain businesses to take steps to prevent, detect, disrupt and respond to scams, and to report scam information.
The first sectors covered are banks, telcos and certain digital platforms, such as social media and messaging services. These sectors were formally named in May 2026. The detailed rules and codes are still being finalised, and the main obligations are due to start from 31 March 2027.
Once in force, the framework will give people a clearer path to complain if a covered business didn’t meet its obligations. That includes complaints to the Australian Financial Complaints Authority (AFCA).
What to do if you’ve been scammed
Act fast. The sooner you move, the better the chance of limiting the damage.
- Contact your bank or card provider immediately. Ask them to stop or recall any payments and secure your accounts.
- Stop all contact with the scammer and don’t send any more money.
- Call IDCARE on 1800 595 160 or visit https://www.idcare.org for free help with identity theft and a recovery plan.
- Report it. Report to Scamwatch at https://www.scamwatch.gov.au/report-a-scam and to police through ReportCyber at https://www.cyber.gov.au/report-and-recover/report
- Change passwords on any accounts that may be affected.
- Warn others so they don’t fall for the same scam.
If you are unhappy with how your bank handled things, you can complain to AFCA for free at https://www.afca.org.au
Where to get free help
- Scamwatch – learn about and report scams at https://www.scamwatch.gov.au
- IDCARE – free identity and cyber support on 1800 595 160
- AFCA – free complaints service on 1800 931 678
- National Debt Helpline – if a scam has left you in debt, call 1800 007 007
- Lifeline – 24/7 support on 13 11 14 if you are feeling overwhelmed
Fin Road Masterclass
Prefer to watch? Everyday Money on video
Short animated lessons that walk you through it step by step. Watch at your own pace, on any device.
Sources and further reading
- Scamwatch – What to do if you've been scammed
- ACCC / National Anti-Scam Centre – Annual scam losses exceed $2 billion (30 March 2026)
- Treasury ministers – First sectors designated under the Scams Prevention Framework (28 May 2026)
- Australian Signals Directorate – ReportCyber
- IDCARE
- Australian Financial Complaints Authority
General information only. This video doesn't take into account your objectives, financial situation or needs. Figures are for 2026–27 and can change. Check the official sources above.