Scam & Fraud Protections in Australia (2026)
About this article
Sourced from Commonwealth Acts of Parliament, federal regulations, and official government guidance. State-level information reflects each state's own Acts and court decisions. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
Compare by state
Statute citations are verified per state. Select a state to jump to its full section below.
| Primary statute | |
|---|---|
| New South Wales | Crimes Act 1900 (NSW) |
| Queensland | Australian Consumer Law (Cth), ss 18, 29 — misleading conduct and scams |
| South Australia | Criminal Law Consolidation Act 1935 (SA) — fraud offences |
| Tasmania | Criminal Code Act 1924 (Tas), Part VI — fraud and dishonesty offences |
| Victoria | Crimes Act 1958 (Vic) |
| Western Australia | Australian Consumer Law (Cth), ss 18, 29 — misleading conduct and scams |
What is this right?
Australia's anti-scam framework grew up after the explosion of investment and impersonation scams in the early 2020s, when reported losses crossed $2 billion a year. It now layers ACL conduct provisions, banking and telco rules, and a dedicated central agency.
- National Anti-Scam Centre: launched in July 2023 within the ACCC, coordinating scam prevention across government, police, banks, and telcos.
- Scamwatch: the ACCC's reporting portal at scamwatch.gov.au. In 2023, Australians reported losing more than $2.7 billion to scams.
- ACL hooks: scam conduct typically breaches s 18 (misleading or deceptive conduct) and ss 29–37 (false representations). The ACCC can act against businesses that facilitate scams as well as the scammers themselves.
- Banking protections: under the ePayments Code, if your account is used for an unauthorised transaction and you didn't contribute to the loss, the bank must generally reimburse you.
- Telecommunications: telcos must block scam calls and SMS under the Reducing Scam Calls and Scam SMS industry codes registered with the ACMA — and they're audited on it.
When does it apply?
- You have been targeted by or lost money to a scam — including phishing, investment scams, romance scams, impersonation scams, or fake online stores.
- A business has made false or misleading claims that caused you financial loss.
- Your personal or financial information has been compromised by fraudulent activity.
What to Do If You Have Been Scammed or Defrauded in Australia
- Report the scam to Scamwatch at scamwatch.gov.au — even if you did not lose money.
- Contact your bank immediately if you have transferred money or shared financial details. Ask them to attempt a recall or chargeback.
- Change your passwords and enable two-factor authentication on any compromised accounts.
- Contact IDCARE (idcare.org, 1800 595 160) — Australia’s national identity and cyber support service — for help if your identity has been compromised.
- Report to ReportCyber (cyber.gov.au) if the scam involved cybercrime.
What should you NOT do?
- Don’t send more money to “recover” lost funds — recovery scams are a common follow-up tactic.
- Don’t be embarrassed to report — scams are sophisticated and can affect anyone. Reporting helps protect others.
- Don’t click links in suspicious emails, texts, or social media messages — go directly to official websites by typing the URL yourself.
About Consumer Rights in Australia
If a product fails or a business misled you, the Australian Consumer Law (Schedule 2 of the Competition and Consumer Act 2010) gives you automatic guarantees on most purchases up to $100,000 — repair, replacement, or refund. No contract or "no refunds" sign overrides them. The ACCC enforces bans on misleading conduct, unconscionable conduct, and unfair contract terms. For disputes, your state tribunal — NCAT, VCAT, or QCAT — is built for self-represented consumers.
Worked Examples
ScenarioYou realise a few hours after sending money to a 'tradie' that you've been scammed.
OutcomeImmediate steps: (1) contact your bank — fast action sometimes lets them recall the transfer; (2) report to Scamwatch at scamwatch.gov.au so it feeds the national picture; (3) report to police, especially if a crime is in progress; (4) if any personal information was shared, contact IDCARE on 1800 595 160 for free identity-recovery support.
Verified against scamwatch.gov.au and IDCARE.org. The bank-recall step depends on the bank and how recent the transfer is. Educational information, not legal advice.
Common Questions
Where do I report a scam in Australia?
The central reporting hub is Scamwatch at scamwatch.gov.au, run by the National Anti-Scam Centre at the ACCC. For crimes in progress or significant losses, also report to your local police. Reports help build the national picture even when recovery isn't possible.
Can my bank get my money back?
Sometimes. If you act very quickly, your bank may be able to recall a recent transfer, especially if the receiving account is still active. The further out the transfer is — and the more it's been moved on — the harder recovery becomes. Call your bank's fraud line straight away.
I think my identity was stolen — what do I do?
Contact IDCARE on 1800 595 160 — it's Australia's free national identity and cyber support service. Place a temporary credit ban with the credit bureaus, change passwords, and report to police if criminal use is suspected. Acting fast limits the damage.
Is the business that 'introduced' me to a scam liable?
Possibly. If a business engaged in misleading or deceptive conduct under s18 of the ACL — or didn't take reasonable steps a platform should have — they may have liability. Recent reforms also impose stronger anti-scam obligations on banks, telcos, and digital platforms.
What is the scam and fraud protections right in Australia?
Australia's anti-scam framework grew up after the explosion of investment and impersonation scams in the early 2020s, when reported losses crossed $2 billion a year. It now layers ACL conduct provisions, banking and telco rules, and a dedicated central agency.National Anti-Scam Centre: launched in July 2023 within the ACCC, coordinating scam prevention across government, police, banks, and telcos.Scamwatch: the ACCC's reporting portal at scamwatch.gov.au. In 2023, Australians reported losing more than $2.7 billion to scams.ACL hooks: scam conduct typically breaches s 18 (misleading or...
When does scam and fraud protections apply?
You have been targeted by or lost money to a scam — including phishing, investment scams, romance scams, impersonation scams, or fake online stores.A business has made false or misleading claims that caused you financial loss.Your personal or financial information has been compromised by fraudulent activity.
What should I do if I have lost money to a scam or fraud in Australia?
Report the scam to Scamwatch at scamwatch.gov.au — even if you did not lose money.Contact your bank immediately if you have transferred money or shared financial details. Ask them to attempt a recall or chargeback.Change your passwords and enable two-factor authentication on any compromised accounts.Contact IDCARE (idcare.org, 1800 595 160) — Australia’s national identity and cyber support service — for help if your identity has been compromised.Report to ReportCyber (cyber.gov.au) if the scam involved cybercrime.
What mistakes should I avoid with scam and fraud protections?
Don’t send more money to “recover” lost funds — recovery scams are a common follow-up tactic.Don’t be embarrassed to report — scams are sophisticated and can affect anyone. Reporting helps protect others.Don’t click links in suspicious emails, texts, or social media messages — go directly to official websites by typing the URL yourself.
State-by-state details
New South Wales
Primary statute: Crimes Act 1900 (NSW)
NSW combats scams and fraud through a combination of federal laws (Criminal Code Act 1995 (Cth)) and state laws (Crimes Act 1900 (NSW)), along with the consumer protection provisions of the ACL.
- NSW Police Cybercrime Squad investigates online fraud, identity theft, and cyber-enabled scams targeting NSW residents.
- NSW Fair Trading warns consumers about current scams, maintains a scam alert database, and takes enforcement action against businesses engaged in fraudulent conduct.
- The Crimes Act 1900 (NSW) provides serious penalties for fraud offences: obtaining a financial advantage by deception carries a maximum penalty of 10 years' imprisonment (s 192E).
- Identity crime in NSW is addressed under the Crimes Act 1900, Part 4AC — dealing in identification information carries up to 10 years' imprisonment (s 192J).
- The national Scamwatch (operated by the ACCC) collects reports from all states. The Australian Cyber Security Centre (ACSC) handles reports of cyber fraud through ReportCyber.
Queensland
Primary statute: Australian Consumer Law (Cth), ss 18, 29 — misleading conduct and scams
Scam and fraud protections in Queensland involve both federal agencies and the Queensland Police Service (QPS) and the Office of Fair Trading.
- The OFT monitors and issues warnings about scams targeting Queensland consumers, with a particular focus on investment scams, romance scams, and scams targeting older Queenslanders.
- The QPS Financial and Cyber Crime Group investigates fraud and cybercrime affecting Queenslanders. Online fraud can be reported to Queensland Police.
- Report scams to Scamwatch (scamwatch.gov.au), run by the ACCC. The Australian Cyber Security Centre (ACSC) handles cyber-related scams via ReportCyber.
- Queensland's Crime and Corruption Commission (CCC) investigates large-scale fraud involving public sector corruption or organised crime.
- The IDCARE service (1800 595 160) assists Queensland victims of identity theft with recovery plans and support.
South Australia
Primary statute: Criminal Law Consolidation Act 1935 (SA) — fraud offences
Scam and fraud protections in SA involve both federal and state agencies. CBS is the primary state body for consumer scam issues, while SAPOL handles criminal fraud.
- Consumer and Business Services (CBS) provides scam awareness education and investigates businesses involved in fraudulent conduct in SA.
- SAPOL investigates criminal fraud, including identity theft, online scams, and financial fraud. Victims should report fraud to SAPOL as soon as possible.
- The federal Scamwatch (operated by the ACCC) collects scam reports nationally. The Australian Cyber Security Centre (ACSC) handles reports of cybercrime through ReportCyber.
- SA financial institutions are subject to the ePayments Code and ASIC regulations, which provide protections for unauthorised transactions and scam losses.
- Identity theft victims in SA can apply for a Commonwealth Victims' Certificate to help restore their identity credentials.
Tasmania
Primary statute: Criminal Code Act 1924 (Tas), Part VI — fraud and dishonesty offences
Scam and fraud protections in Tasmania involve both federal and state agencies. CBOS is the primary state body for consumer scam issues, while Tasmania Police handles criminal fraud.
- Consumer, Building and Occupational Services (CBOS) provides scam awareness education and investigates businesses involved in fraudulent conduct in Tasmania.
- Tasmania Police investigates criminal fraud, including identity theft, online scams, and financial fraud. Victims should report fraud to police as soon as possible.
- The federal Scamwatch (operated by the ACCC) collects scam reports nationally. The Australian Cyber Security Centre (ACSC) handles reports of cybercrime through ReportCyber.
- Tasmania's older-than-average population makes elder fraud and scam targeting of seniors a particular concern. CBOS runs targeted awareness campaigns for older Tasmanians.
- Identity theft victims can apply for a Commonwealth Victims' Certificate to help restore their identity credentials.
Victoria
Primary statute: Crimes Act 1958 (Vic)
Full Victoria guide →Western Australia
Primary statute: Australian Consumer Law (Cth), ss 18, 29 — misleading conduct and scams
Scam and fraud protections in WA involve both federal agencies and WA Police and Consumer Protection WA.
- Consumer Protection WA monitors and issues warnings about scams targeting Western Australians, with a focus on investment scams, romance scams, and scams targeting elderly residents and regional communities.
- The WA Police Financial Crime Squad investigates fraud, identity crime, and cybercrime. Online fraud can be reported to WA Police.
- Report scams to Scamwatch (scamwatch.gov.au), run by the ACCC. The Australian Cyber Security Centre (ACSC) handles cyber-related scams via ReportCyber.
- WA's Corruption and Crime Commission (CCC) investigates large-scale fraud involving public sector corruption or organised crime.
- The IDCARE service (1800 595 160) assists WA victims of identity theft with recovery plans and support.
Scam and Fraud Protections in other states
Same topic, different jurisdiction. Pick the one that applies to you.