Cybercrimes have become a pervasive issue in Australia (AU), and the number of people impacted remains significant. According to a survey performed by the Australian Institute of Criminology, nearly half of all respondents experienced at least one cybercrime in the previous 12 months. As Australian law enforcement began fighting back against cybercrime, the criminals adopted new, sophisticated tactics to avoid detection. Scams caused roughly $2.74 billion in losses for Australian victims in 2023, with investment scams causing the highest losses at $1.3 billion.
So, what is the best way for Australian internet users to fight against cybercrime? The Australian government has launched multiple initiatives to combat this rise in online crime. However, the most significant initiative was the national push for citizens to report cybercrime in the AU to law enforcement.
Understanding Cybercrime in Australia
There has been a concerted effort by the Australian government to fight back against cybercrime. As an example, the Australian Federal Police estimated that its efforts had prevented $83 million in losses to scams since 2020. However, a lot of work still needs to be done.
Common Types of Cybercrime
Criminals use many different tactics to target people online. The diversity of approaches makes it difficult to protect yourself. However, some cybercrimes are more effective than others, and these are the types you see frequently over the internet. Here are the most common types of cybercrimes in Australia.
- Phishing scams. This is a method used by cybercriminals to deceive targets into providing personal information. Posing as a legitimate organization, the text message or email may contain a malware-infested link designed to target your sensitive data.
- Social media scams. Cybercriminals set up fake profiles on social media to impersonate public figures, familiar users, or trusted organizations. They often promote suspicious products, request money or personal information, or threaten extortion.
- Identity theft. This can be the result of many different types of scams. Identity theft occurs when someone uses stolen private information to pose as another, often to commit fraud or obtain some sort of benefit.
- Account compromise. When criminals gain access to your email, bank, or other accounts online, this is called an account compromise.
- Malware. Scammers may send malicious code that can be used to steal information, install software, or encrypt data on your device. Malware is typically distributed in deceptive ways like phishing scams. A reputable malware removal may be necessary to preserve your files and protect your information.
- Investment scams. Criminals impersonate investors or finance companies to present you with a huge investing opportunity. They make huge promises for life-changing money and use urgent language to apply pressure. When you try to withdraw your money from the investment, they may refuse or demand additional fees. Investment scams are difficult to recover lost funds for.
- Cyber Extortion: Cyber extortion is a broad term encompassing numerous forms of crime in which criminals use threats or coercion to financially exploit victims. The specific threat used varies; for instance, sextortion involves demanding payment to prevent the release of sensitive personal content.
The Impact of Cybercrime
Many cybercrimes are financially motivated. However, they can also be devastating to your mental health and reputation. Depending on what type of cybercrime you are facing, you can face immense stress and anxiety with the realization that you are a victim. On top of emotional distress, you can also experience financial losses if the perpetrator accesses your financial accounts, payment information, and other sensitive data.
Reporting Cybercrime in AU: Resources for Adults
Australian law enforcement faces challenges when dealing with cybercrime, including complex jurisdictional application and a significant underreporting by victims. To address these issues and more, the Australian government established ReportCyber as the national online reporting service for cybercrime in the AU. This reporting system would be a source of information for the police and different agencies in the country.
Australian Cyber Security Centre (ACSC)
The ACSC is an organization that has worked closely with government agencies like the AFP. Established in 2014, the ACSC provides multiple resources for victims to use for free. The Australian Cyber Security Hotline, for example, is available 24/7 to provide support and guidance for individuals dealing with digital threats. The ACSC also operates ReportCyber.
ReportCyber
ReportCyber is hosted by the ACSC on behalf of Australian law enforcement agencies. It allows cybercrime victims to notify the appropriate police jurisdiction and helps these authorities identify and respond to trends. The Australian government recommends that all citizens report online crimes through the ReportCyber website.
Australian Federal Police (AFP)
As Australia’s national policing agency, they have been proactive in identifying and investigating cybercrimes. The AFP has created multiple task forces that are taking the fight to scammers and crime syndicates, with a special focus on criminals using ransomware. It was reported that over 100 investigations were ongoing in 2024.
Australian Competition & Consumer Commission (ACCC)
The ACCC was created to ensure that businesses and individuals are complying with the competition and consumer protection laws. The organization operates Scamwatch, which allows people to report scams and provides information on how to recognize and avoid them. The database is used to help those at the ACCC understand the most harmful scams and how they operate. They also share their information with the Australian government.
Unlike ReportCyber, Scamwatch encourages reporting scams as well as scam attempts. You should include any evidence you have collected, such as contact information, threatening messages, and timestamps, to support your report.
Reporting Cybercrime in AU: Resources for Children
The internet is not always a safe place, especially for minors. Underage users can face significant online risks, including exploitation, cyberbullying, and blackmail. Cybercriminals often target children because they may be particularly vulnerable to manipulation and coercion. Image-based sexual abuse and extortion have been a huge issue when it comes to minors in particular.
eSafety Commissioner
Established in 2015 by the Australian government, the eSafety Commissioner was created to promote online safety and address serious online abuses, such as child sexual abuse material (CSAM). The eSafety Commissioner strives to educate minors about the dangers of the internet. The organization has a system for anyone to report instances of image-based sexual abuse, cyberbullying, or the online sharing of illegal content.
The organization also works with internet providers and online platforms to promote safer online environments. If you need to report a complaint to eSafety Commissioner, here’s how it works.
- Visit esafety.gov.au/report.
- Select “Report Now”.
- Choose the option that best fits your situation.
- Fill out the questionnaire with as many details.
Kids Helpline
This organization is a free, confidential, and 24/7 counseling service aimed at young people from ages five to twenty-five. Kids Helpline has been providing free counseling services since 1991, and the counselors encourage their clients to discuss anything they want, including cyberbullying and other online issues. There are also educational resources on the website that cover topics ranging from bullying to sextortion.
Kids Helpline offers their services over the phone or through WebChat.
Australia’s Social Media Minimum Age Law for Minors
In November 2024, Australia’s Social Media Minimum Age law was passed, which aims to prevent minors from creating or keeping social media accounts. The law intends to protect minors from online extortion, harassment, and other harm by restricting their access to social media apps, regardless of parental consent.
Under this law, which went into effect in December 2025, social media platforms that the eSafety Commissioner views as age-restricted are required to take reasonable steps to prevent children under 16 years of age from having an account. These platforms must implement reasonable measures for age verification and removal of Australian minors from their apps or face potential fines of up to $54.6 million AUD.
In a press conference held prior to the passing of the new age restriction, Australian Prime Minister Anthony Albanese stated that “The onus will be on social media platforms to demonstrate they are taking reasonable steps to prevent access”.
Has the Social Media Minimum Age Law Been Effective?
Since the introduction of the SMMA law, eSafety’s Research and Evaluation team has conducted a comprehensive evaluation of its use in practice and impact on the online safety of minors. The study, which started collecting data prior to the commencement of the age restriction, follows over 4,000 children and families across more than a two-year span.
In July 2026, eSafety released insights from the first three months following the implementation of the law. Overall, the perceived impact of the restriction has been limited, although eSafety notes that significant changes were not expected in such a short timeframe. The report also acknowledges that ineffective implementation of age verification methods may play a role, and that meaningful progress will require adaptation as new information is gathered.
Steps After Reporting Cybercrime
Reporting cybercrime to the appropriate authorities is an essential first step when you are a victim of a cybercrime. However, not every case can be individually investigated, and there is no guaranteed timetable for a potential resolution. In the meantime, you need to take action to protect yourself online and prevent any further victimization.
- Change passwords and strengthen security. If you’ve experienced a breach, you need to strengthen your security. Use a strong new password and turn on two-factor authentication to keep your accounts protected.
- Monitor accounts and credit score. If your information has been compromised, you should monitor your financial reports and other affected accounts. Any suspicious purchases should be reported immediately to improve your chances of recovering lost funds and protecting your online accounts.
- Secure your network and protect your data. If your device has been affected by malware, you need to act fast to protect your information and prevent any further damage to your files. Disconnect the affected device from your network, follow reputable malware removal guidance, and consider seeking assistance from cybersecurity professionals.
- Seek support. Talk to someone you trust about what you are going through. Dealing with a cyberattack is not easy and being able to discuss what you are experiencing can improve your emotional state.
Potential Resolution and Outcomes
Unfortunately, a law enforcement investigation into a cybercrime can be lengthy. Sometimes, it can take years for the case to be fully resolved. The investigation can end in many different ways, with some outcomes more ideal than others. Here are a few possible outcomes of a cybercrime investigation.
Investigation and Prosecution
Cybercrime investigations may end without charges if insufficient evidence is available, and the culprit’s identity or location cannot be established. In other cases, criminals may be charged with offences such as harassment, fraud, or identity-related crimes.
The state and territory laws can vary, so it’s important to seek a legal professional if you are looking into your options. Depending on where you are in Australia, image-based sexual abuse could be brought into a criminal investigation. eSafety identifies factors that police may consider in an investigation, such as the severity and duration of the abuse, the amount of available evidence, and the location of the criminal.
Recovery of Data
Ransomware is a form of malware that prevents the victim from accessing their files. The criminal responsible then demands a ransom in exchange for restoring access to your data. Instead of paying, you should report the threat to law enforcement and consider the assistance of cybersecurity professionals.
Prevention and Education
Spreading awareness about cybercrime is an important step toward preventing victimization and helping internet users recognize threats. There are a lot of nonprofits and initiatives dedicated to helping victims. However, it’s also important to warn the people around you about the dangers of cybercrime and safe practices when going online.
Digital Forensics Corp: Supporting Australian Cyber Security
Cybersecurity is more important than ever in Australia. Digital Forensics Corp. takes a comprehensive approach to online security, providing a range of services from digital investigations to malware removal and cybersecurity consultations.
DFC’s team of professionals focuses on three main things: prevention, protection, and response. The goal is to provide best practices for avoiding common scams, reinforcing account security, and responding to any exposure of sensitive information. If you need to strengthen your cybersecurity, contact DFC today to speak with a specialist for a free consultation.
Resources and Support
Digital Forensics Corp. is available and ready to help you at any time. However, there are other free resources that can help with cybercrime. Here are a few organizations to check out.
- Crimestoppers: A not-for-profit information receiving service that allows Australians to anonymously report unsolved crimes or suspicious activity.
- Lifeline: A national charity providing a 24/7 support service for Australians experiencing an emotional crisis.
- IDCare: A not-for-profit charity that supports individuals and organizations affected by identity theft and other cybercrime incidents.
Get Help Today
Reporting cybercrime to agencies like the AFP helps authorities investigate incidents, assess trends, and determine when further investigation may be warranted. When it comes to reporting cybercrimes in the AU, ReportCyber and Scamwatch are two important reporting services to remember.
Reinforcing your cybersecurity and awareness of best practices can help you avoid becoming a victim to cybercrime in the first place. Stay vigilant, report cybercrime, and contact Digital Forensics Corp Blackmail Helpline for expert cyber security support in Australia.
Chief Technology Officer (CTO)
Dr. Viktor Sobiecki
Currently serves as the Chief Technology Officer (CTO) at Digital Forensics Corporation, where responsibilities span the leadership of advanced cybersecurity initiatives, data breach incident responses, and corporate strategic planning.
