Got Scammed Online in Australia? Do These 7 Things Right Now

You just realised you have been scammed. Maybe you sent money to someone who was not who they claimed to be. Maybe you clicked a link and entered your details on a fake website. Maybe you gave your details to someone claiming to be from your bank. Whatever happened, the next 30 minutes matter more than the next 30 days. Here is exactly what to do, in order.

1. Stop All Contact With the Scammer Immediately

Do not reply, do not call them back, do not follow any instructions they gave you about what to do if you have second thoughts. Scammers who know you have realised the fraud will often try to convince you they are legitimate, or pivot to a "recovery scam" — offering to help you get your money back for a fee. Block them on every platform and stop all contact immediately.

2. Contact Your Bank Right Now — Not Tomorrow

If you transferred money or provided banking details, call your bank's fraud line immediately. Australian banks have 24/7 fraud lines. The sooner you call, the higher the chance of intercepting the transfer before it is processed. Ask them to: freeze your account if your card details or internet banking credentials were compromised; attempt a recall on any recent transfers; and flag your account for monitoring. Do not feel embarrassed — bank fraud teams deal with this constantly and are there to help you.

3. Change Your Passwords — Right Now

If you entered any passwords on a suspicious site, or if the scammer had access to your email, change those passwords immediately. Start with your email password — email is the master key to everything else. Then change passwords for your banking, government services (MyGov), and any other important accounts. Use a different device if possible — if your computer or phone was involved in the scam, those devices may have malware installed.

4. Enable Multi-Factor Authentication

On your email, your banking app, and MyGov, enable multi-factor authentication (MFA) if it is not already on. MFA means that even if a scammer has your password, they cannot access your account without the second factor — usually a code sent to your phone. Your bank's app probably already has this — make sure it is turned on.

5. Report to Scamwatch

Report the scam to the Australian Competition and Consumer Commission via Scamwatch at scamwatch.gov.au. This is important for two reasons: it helps authorities track scam activity and shut down operations, and it creates an official record that can support any insurance or bank dispute claims. If you lost more than $10,000, also consider reporting to your local police — you will receive a police event number which can support bank disputes and insurance claims.

6. Check Your Credit Report

If the scammer obtained personal identity information — your name, date of birth, address, driver's licence or passport number — they may attempt to open credit accounts or loans in your name. Place a credit alert or credit ban with Equifax, Experian, or illion (the three Australian credit bureaus) to prevent new accounts being opened in your name without your approval. You can do this for free through their websites.

7. Get Your Devices Checked

If you downloaded anything, clicked any links, or followed instructions to install any software during the scam, your device may be compromised. A professional security check can tell you whether any malware was installed and remove it if so. This is especially important if the scammer had remote access to your computer — a technique commonly used in tech support scams and ATO impersonation scams. IntrusionX provides professional device security assessments across Melbourne — call +61 499 468 971 for same-day help.

You Are Not Alone — and You Are Not Stupid

Australians lost over $2.7 billion to scams in 2023 according to the ACCC. These are professional criminal operations designed by psychologists and tested against thousands of victims. They work because they are designed to work — not because victims are naive. The most important thing is acting quickly to limit the damage. If you need help navigating what to do next, IntrusionX can assist — we provide post-scam security support, device cleaning, and help with the reporting and recovery process.