How to Report a Phishing Scam in Australia

How to Report a Phishing Scam in Australia

Got a dodgy email? Received a suspicious text? Received a scam call? You should report it. Here's who to tell, how to do it, and why it actually matters.

Why bother reporting?

Great question. It can feel pointless — like shouting into the void. But your report genuinely helps:

• Authorities identify trends and active scam campaigns
• Telcos and email providers block scam numbers and addresses faster
• Other Australians are warned about active scams
• Data builds cases against criminal networks

One report might not seem like much. But thousands of reports pointing to the same scam phone number? That's actionable intelligence.

Where to report phishing and scams in Australia:

1. Scamwatch (ACCC) Website: scamwatch.gov.au The Australian Competition and Consumer Commission (ACCC) runs Scamwatch — the primary national reporting hub for scams of all types. You can report scam calls, texts, emails, and social media scams here.

2. Australian Cyber Security Centre (ACSC) Website: cyber.gov.au/report For cybercrime incidents, particularly those involving your business. If you've experienced a breach, malware, or financial loss, report here. The ACSC also issues threat advisories.

3. ReportCyber Website: cyber.gov.au/report For more serious cyber incidents. This platform connects reports to state and federal police as appropriate.

4. Your bank If money has been transferred or your financial details were compromised, call your bank immediately using the number on the back of your card. Most banks have 24/7 fraud lines.

5. The Australian Tax Office For fake ATO emails or SMS messages: forward them to `reportemailfraud@ato.gov.au`

6. Services Australia For Medicare/Centrelink impersonation scams: report at servicesaustralia.gov.au/fraud

7. Scam SMS: text SCAM (7226) Forward scam text messages to 7226. This is operated by the Australian Communications and Media Authority (ACMA) and directly helps telcos block scam numbers.

What information to include in your report:

• The scammer's phone number, email address, or website
• The date and time of the contact
• What was said or written (screenshots are gold)
• Whether you lost any money or personal information
• What action you took (clicked, reported, ignored, etc.)

If you've lost money

If you've actually been scammed and lost funds, also contact:

• IDCare (1800 595 160) — for identity theft support
• Your state or territory police for a formal report
• Your bank immediately to attempt recovery

Pay it forward

Reporting is a community service. The more people report, the better armed authorities are to shut down active scam operations.

Learn to spot scams before they get you at Phishbate →