Skip to content

Spotting and avoiding scams

How common scams work, the warning signs to look for, the new scam protection laws, and exactly what to do if you've been scammed.

4 min readReviewed November 2026

The short version

  • Scammers create urgency and pretend to be people or organisations you trust.
  • Never share codes, passwords or let a stranger access your device.
  • If you've been scammed, call your bank straight away, then contact IDCARE and report it.
  • Be wary of anyone offering to recover lost money for a fee.

Scams can happen to anyone, at any age, no matter how careful they are. Knowing the common tricks, and what to do quickly if something goes wrong, is your best protection.

How big is the problem?

Australians reported losing $2.18 billion to scams in 2025, across about 481,500 reports. The biggest losses came from investment scams, followed by payment redirection scams, romance scams, phishing and remote access scams.

Many more scams go unreported, often because people feel embarrassed. Being scammed is a crime against you. It is not your fault.

Common types of scams

Scam How it often works
Investment scams A website, ad or “friend” online promises big, safe returns, often in crypto or trading
Impersonation scams Someone pretends to be your bank, the ATO, myGov, police or a delivery company
Payment redirection A fake email or invoice says a business’s bank details have changed
Romance scams An online partner you’ve never met in person starts asking for money
Remote access scams A caller says your computer or bank account has a problem and asks to log in to your device
Shopping scams Fake online stores or marketplace sellers take payment and send nothing
“Hi Mum” scams A text from an unknown number claims to be your child with a new phone who needs money

Warning signs to look for

Scammers change their stories, but their tricks are often the same.

  • Urgency or pressure. “Act now or your account will be closed.”
  • Contact out of the blue. A call, text, email or social media message you weren’t expecting.
  • Unusual payment methods. Gift cards, crypto, or sending money to a “safe account”.
  • Requests for codes or access. Asking for one-time passcodes, passwords or to install an app on your device.
  • Too good to be true. Guaranteed high returns, or a prize you didn’t enter.
  • Secrecy. Being told not to tell your bank or family.

Simple habits that protect you

  • Stop. Don’t rush. Take time to think before you click, pay or share details.
  • Check. Contact the organisation yourself using details from its official website or app, not the ones in the message.
  • Protect. Act quickly if something feels wrong.

Also consider:

  • turning on multi-factor authentication for banking, email and myGov
  • using different, strong passwords, or a password manager
  • keeping your phone and computer software up to date
  • checking bank details by phone before paying a new invoice

New scam protection laws

The Scams Prevention Framework became law in February 2025. It will require certain businesses to take steps to prevent, detect, disrupt and respond to scams, and to report scam information.

The first sectors covered are banks, telcos and certain digital platforms, such as social media and messaging services. These sectors were formally named in May 2026. The detailed rules and codes are still being finalised, and the main obligations are due to start from 31 March 2027.

Once in force, the framework will give people a clearer path to complain if a covered business didn’t meet its obligations. That includes complaints to the Australian Financial Complaints Authority (AFCA).

What to do if you’ve been scammed

Act fast. The sooner you move, the better the chance of limiting the damage.

  1. Contact your bank or card provider immediately. Ask them to stop or recall any payments and secure your accounts.
  2. Stop all contact with the scammer and don’t send any more money.
  3. Call IDCARE on 1800 595 160 or visit https://www.idcare.org for free help with identity theft and a recovery plan.
  4. Report it. Report to Scamwatch at https://www.scamwatch.gov.au/report-a-scam and to police through ReportCyber at https://www.cyber.gov.au/report-and-recover/report
  5. Change passwords on any accounts that may be affected.
  6. Warn others so they don’t fall for the same scam.

If you are unhappy with how your bank handled things, you can complain to AFCA for free at https://www.afca.org.au

Where to get free help

  • Scamwatch – learn about and report scams at https://www.scamwatch.gov.au
  • IDCARE – free identity and cyber support on 1800 595 160
  • AFCA – free complaints service on 1800 931 678
  • National Debt Helpline – if a scam has left you in debt, call 1800 007 007
  • Lifeline – 24/7 support on 13 11 14 if you are feeling overwhelmed

Fin Road Masterclass

Prefer to watch? Everyday Money on video

Short animated lessons that walk you through it step by step. Watch at your own pace, on any device.

Sources and further reading

General information only. This video doesn't take into account your objectives, financial situation or needs. Figures are for 2026–27 and can change. Check the official sources above.