How to Report a Scam to Scamwatch in Australia

Scamwatch is Australia’s national scam reporting and information service, run by the National Anti-Scam Centre within the Australian Competition and Consumer Commission (ACCC). To report a scam to Scamwatch, first contact your bank, then submit the online report form on the official Scamwatch website with what happened, how you were contacted and any payment details. If you lost money or data through a cybercrime such as hacking or online fraud, also report through ReportCyber.

If you’ve been scammed, it isn’t your fault. Scams are run by organized groups that are very good at building trust and creating urgency. This guide shows you what to do first, where to report, and what realistically happens next.

What Scamwatch is and what it does

Scamwatch collects reports about scams from people across Australia and publishes warnings and guidance about the scams currently doing the rounds. It’s part of the National Anti-Scam Centre, which works with government agencies, banks, telcos and digital platforms to disrupt scams and share information.

What your report does:

• Helps the National Anti-Scam Centre spot new scams and trends, and warn the public.
• Can be shared with partners, such as banks, telcos and platforms, to help disrupt scam phone numbers, websites, accounts and ads.
• Feeds enforcement and policy work by the ACCC and other agencies.

What it doesn’t do: Scamwatch doesn’t investigate individual cases or get your money back. That’s why your bank is the first call, not the last.

What to do before you report

Act in this order. Speed matters most in the first steps.

1. Stop contact. Don’t reply, don’t send more money, and don’t pay any “fee” to release or recover funds.
2. Contact your bank or card provider immediately. Use the number on your card or in the official banking app. Tell them you’ve been scammed and ask them to stop or recall the payment and secure your account.
3. Secure your accounts and devices. If you shared a password or code, change it (email first) and turn on multi-factor authentication. If someone had remote access to your computer, disconnect it and get it checked. Our guide on what to do if your account was hacked covers the steps.
4. Protect your identity. If you shared ID documents, your tax file number, Medicare card or driver’s license details, contact IDCARE (below) and the agency that issued the document.
5. Save the evidence. Screenshots of messages, profiles, websites, phone numbers, emails, receipts and transaction details. Don’t delete the conversation.

How to report a scam to Scamwatch, step by step

1. Go to the official Scamwatch website. Type the address yourself or reach it through the ACCC’s site. Don’t follow links in messages, and be wary of search ads for “scam reporting” or “fund recovery”.
2. Open the report form. You can report whether or not you lost money. Giving contact details can help if more information is needed.
3. Describe how the scam started. Phone call, text, email, social media, a dating app, a marketplace listing or a website.
4. Add the scammer’s details. Phone numbers, email addresses, usernames, websites, and the bank account, PayID or crypto wallet you paid to.
5. Add what you lost. Amounts, dates and how you paid. If you lost personal information rather than money, say what was shared.
6. Submit and keep a copy. Note the date and any reference you receive, along with your bank’s case number.

Our hub on how to report a scammer covers reporting routes in other countries and on individual platforms, if the scam crossed borders.

Scamwatch, ReportCyber or the police: which one?

You’ll often use more than one. Here’s how they differ.

Where to report	When to use it
Your bank or payment provider	Always, and first, if you paid anything or shared banking details.
Scamwatch	Any scam or scam attempt, whether or not you lost money. Helps warnings and disruption.
ReportCyber	Cybercrime such as hacked accounts, ransomware, online fraud or identity theft where you lost money or data. It’s run through the Australian Signals Directorate’s cyber.gov.au site, and reports can be referred to police.
Local police	Call 000 if you’re in danger. For non-urgent matters, the Police Assistance Line is 131 444 in most states and territories. Report threats, extortion or in-person fraud.
The platform	Report the scam profile, listing, ad or group so it can be removed.
The impersonated organization	If a scammer pretended to be a bank, telco, delivery company or government agency, tell the real one through its official website.

Some common impersonation scams have their own guides, including the ATO scam and the Telstra scam.

Getting support from IDCARE

IDCARE is Australia and New Zealand’s national identity and cyber support service. It’s a not-for-profit that helps people respond when their personal information has been stolen or misused, for example after sharing ID documents with a scammer or having an account taken over. Its specialists help you work out which organizations to contact and how to reduce the risk of further misuse. Reach it through its official website.

Trying to get your money back

Scamwatch can’t recover money, but your bank sometimes can. What’s possible depends on how you paid.

• Credit or debit card: ask about a chargeback. Card payments usually have the best chance, especially if you act quickly.
• Bank transfer or PayID: report it straight away. Banks can sometimes stop or recall a payment if the money hasn’t moved on.
• Crypto, gift cards or cash: these are very hard, and often impossible, to recover. Report to the exchange or card issuer anyway.

If your bank’s response doesn’t seem fair, make a formal complaint to the bank. If that doesn’t resolve it, you can take it to the Australian Financial Complaints Authority (AFCA), which is free for consumers.

Watch out for “recovery” offers. After a scam, many victims are contacted by people claiming they can trace and return the money for an upfront fee, sometimes posing as lawyers or government officials. This is almost always a second scam. Our guide to recovery scams explains the signs.

A worked example

This is an illustrative scenario, not a real client. Daniel, a tradesperson in Brisbane, gets a text that looks like it’s from his toll provider saying he has an unpaid fee. He clicks the link, enters his card details, and later that evening sees two charges he didn’t make.

1. He calls his bank using the number on his card. The bank cancels the card, disputes the charges and issues a new card.
2. He reports the scam to Scamwatch, including the sender number, the link and the time he received the text.
3. Because his card details were stolen and used, he also reports through ReportCyber and saves the reference.
4. He had also entered his date of birth and address on the fake site, so he contacts IDCARE for advice on reducing the risk of identity misuse.
5. A week later he gets a call offering to “recover his losses” for a fee. He hangs up.

His bank handled the money. Scamwatch and ReportCyber helped track the scam. IDCARE helped him protect his identity.

Common mistakes to avoid

• Reporting to Scamwatch and waiting to hear back. Scamwatch generally won’t contact you about your case. Call your bank first.
• Using contact details from the scam message. Always look up the official number or website yourself.
• Only reporting if you lost money. Reports of failed scams help warnings and disruption too.
• Deleting messages. Save evidence before blocking or deleting.
• Staying silent out of embarrassment. Scams target ordinary human responses. Telling your bank quickly gives you the best chance.

When a scam affects your reputation

Scammers often steal real people’s names and photos for fake profiles, or clone small business pages to sell goods that never arrive. If people are now contacting you or posting about “your” scam, report the fake accounts as impersonation and read our guide on what to do if someone is impersonating you online. If your personal information was mishandled by a business, the Australian Privacy Act may give you options, including an OAIC complaint. When scam warnings or false accusations show up in search results for your name, our personal reputation management team can help assess what can realistically be corrected.

If the scam is weighing on you, Lifeline is available on 13 11 14, and our help resources page lists more support.

Frequently asked questions

Does Scamwatch investigate my scam?

No. Scamwatch collects reports to warn the public and help disrupt scams, and it can share information with partners, but it doesn’t investigate individual cases or recover money. Contact your bank to try to recover funds and report cybercrime through ReportCyber, which can refer cases to police.

Should I report to Scamwatch if I didn't lose money?

Yes. Reports about scam attempts help the National Anti-Scam Centre spot new scams, warn others and work with banks, telcos and platforms to disrupt them.

What's the difference between Scamwatch and ReportCyber?

Scamwatch takes reports about any scam, including attempts. ReportCyber is for cybercrime, such as hacking, ransomware or online fraud where you lost money or data, and reports can be passed to police. If a scam involved both, report to both.

Who can help if my identity was stolen in a scam?

IDCARE, Australia and New Zealand’s national identity and cyber support service, can help you work out what to do next. Also contact the agency that issued any ID document you shared, and your bank.