Scams & fraud
I’ve been scammed. What do I do right now?
Finding out you’ve been scammed is awful. You might feel embarrassed, angry or panicked. Try to set that aside for an hour. Acting quickly gives you the best chance of stopping more loss and sometimes getting money back. Scams fool careful, intelligent people every day, and the people who can help have heard every version.
The short version
In the first hour
- Stop all contact and payments with the scammer.
- Call your bank on the number on your card.
- Secure your email and any account you gave details for.
- Call IDCARE on 1800 595 160 for a free plan.
The first hour
Stop contact
Stop replying, hang up, leave the chat and don’t send any more money, even if they threaten you or promise a refund. Scammers often ask for “one last payment” to release funds. There isn’t one.
Call your bank or payment provider
Use the number on the back of your card or in your banking app. Tell them it’s a scam and ask them to stop or recall payments, block cards and protect your accounts. Have the amounts, dates and recipient details ready. If you paid with a card, ask about a chargeback. If you bought cryptocurrency through an Australian exchange, contact the exchange as well.
Secure your accounts
If you gave away a password, change it straight away on the real website or app, starting with your email. Turn on two-step verification. If you let someone access your computer, disconnect it from the internet before doing anything else and see our remote access scam guide.
Get a free recovery plan
IDCARE is Australia’s national identity and cyber support service. It’s free and not-for-profit. Call 1800 595 160 and a case worker will help you work out what to do based on what you shared.
If you’re in danger or being threatened
Call Triple Zero (000). If you’re feeling overwhelmed, Lifeline is available on 13 11 14, any time of day or night.
The first few days
Report it
- Scamwatch collects scam reports for the National Anti-Scam Centre, which uses them to warn others and disrupt scammers.
- ReportCyber is for losses involving the internet, such as online banking, email or social media. Reports go to police.
- The platform where it happened, such as the social media site, marketplace or messaging app.
- Your local police if you were threatened or met the scammer in person.
Protect your identity if you shared documents
If you sent a photo of your driver’s licence, passport, Medicare card or tax file number, IDCARE can tell you which to replace and how. You can also ask the credit reporting bodies (Equifax, Experian and illion) for a free ban on your credit file, which stops anyone applying for credit in your name while it’s in place.
Check your other accounts
If you reused the password you gave away, change it everywhere. Look for logins, forwarding rules or recovery details you don’t recognise in your email. See our guide on what to do if your email is hacked.
Write down what happened
Note dates, times, phone numbers, account details, website addresses and what was said. Save screenshots and receipts. It makes every report and conversation easier.
The weeks after
- Watch for follow-up scams. Scammers share lists of people who have paid. Be wary of anyone offering to recover your money for a fee, including people claiming to be lawyers, police, the bank or a government agency.
- Check your bank statements and credit report for anything unusual. You can get a free credit report from each credit reporting body.
- If your bank’s response doesn’t seem fair, ask for the outcome in writing. You can then complain to the Australian Financial Complaints Authority, which is free.
- Talk to someone. Being scammed can affect sleep, confidence and relationships. Support services exist, and IDCARE can point you to them.
Quick reference
| Who | When to contact | How |
|---|---|---|
| Your bank | Immediately, for any money or card details | Number on your card or in the app |
| IDCARE | When personal information or ID was shared | 1800 595 160 |
| Scamwatch | Every scam, even if you didn’t lose money | scamwatch.gov.au |
| ReportCyber | Online losses, hacked accounts | cyber.gov.au |
| Australian Cyber Security Hotline | Businesses facing a cyber incident | 1300 CYBER1 (1300 292 371) |
| AFCA | If you’re unhappy with your bank’s response | afca.org.au |
If it happened at work
Tell your manager or IT contact straight away, even if it feels embarrassing. A business scam can affect payments, customer data and other staff accounts, and the response is faster with everyone involved. Businesses can call the Australian Cyber Security Hotline on 1300 CYBER1 (1300 292 371) for advice at any hour.
Common questions
Will I get my money back?
Sometimes, especially if you act within hours and paid by card or bank transfer to an Australian account. It’s harder with cryptocurrency, gift cards and overseas transfers. Report it either way.
I feel stupid. Should I just keep quiet?
Please don’t. Scams are run by organised groups with practised scripts. Reporting helps protect you and the next person they target.
Someone is offering to get my money back. Are they legitimate?
Treat any unsolicited recovery offer as a scam, particularly if there’s a fee upfront.
Sources
This guide is general information, not legal or financial advice. If you think you’ve lost money or personal information, contact your bank and the services named above straight away.
Keep reading
Related help
Talk to NovaSoft
Want a hand with this at work?
These guides are free to use. If your business wants help putting the checks, accounts and devices in place, our team can do it with you.