AUSTRALIA: official pages read in a browser on 13 October 2026 ================================================================ These sites refuse automated download (HTTP 403 to scripts), so the passages relied on were read in a browser and are copied here word for word. Each block gives the page title, address and the text used. ---------------------------------------------------------------- [1] ACCC media release, "Continued action critical to combat fraud as annual scam losses exceed $2 billion" https://www.accc.gov.au/media-release/continued-action-critical-to-combat-fraud-as-annual-scam-losses-exceed-2-billion Date: 30 March 2026 "The report combines data from Scamwatch, ReportCyber, the Australian Financial Crimes Exchange (AFCX), IDCARE and the Australian Securities and Investments Commission (ASIC). In 2025, Australians made a combined total of 481,523 scam reports across these institutions. Of these, 274,577 reports involved financial losses totalling $2.18 billion. While reports have stabilised, losses have increased by 7.8 per cent, compared with 2024. Overall, Australia has seen a reduction in reported scam losses of 29.7 per cent since the peak of $3.1 billion in 2022. The top five scam types by loss were investment scams ($837.7m), payment re-direction scams ($166.8m), romance scams ($139.9m), phishing scams ($97.6m) and remote access scams ($69.9m)." "Background. The data in the Targeting Scams Report is for the calendar year 1 January to 31 December 2025. Reference to combined reports or combined losses include data from Scamwatch, ReportCyber, AFCX, IDCARE and ASIC. Adjustments have been made to address duplication in reporting and to remove unreliable high loss reports from within those datasets. Data can change over time due to people withdrawing reports or quality assurance processes." ---------------------------------------------------------------- [2] Scamwatch, "What to do if you've been scammed" https://www.scamwatch.gov.au/stop-check-protect/what-to-do-if-youve-been-scammed "1. Act fast to protect yourself. Contact your bank or card provider immediately to report the scam. Ask them to stop any transactions. If you're not sure if you're being scammed, stop sending money. Scammers will keep asking for more money until you stop. 2. Get help to recover. IDCARE is Australia and New Zealand's national identity and cyber support service. They can help you make a plan (for free) to limit the damage. Call them on 1800 595 160 or visit their website to find out more. If you're not happy with how your bank has responded to your situation, you can complain to the Australian Financial Complaints Authority. 3. Warn others and report the scam. Once you have secured your details, you can help us try to stop the scam or to warn others by reporting the scam to us. You can also warn people around you. You can also make an official report to the police online. 4. Watch out for follow up scams. If scammers have stolen money from you, they often come back for more. Unfortunately, 1 in 3 victims of a scam have been scammed more than once. If you've lost money to a scam, look out for new scams, especially someone offering to help you get your money back. 5. Get support. ... If a scam is causing you problems with debt, talk to a financial counsellor. This is a free and confidential service ... Beyond Blue 1300 22 4636 or online chat (24 hours a day, 7 days a week). Lifeline 13 11 14 or online crisis support chat (24 hours a day, 7 days a week)." ---------------------------------------------------------------- [3] Scamwatch, "Report a scam" https://www.scamwatch.gov.au/report-a-scam "Report to us. Use this form to report any suspicious contact or activity. Your report helps us stop scammers and warn others. ... If you or someone else is in immediate danger, call 000. If you've been the victim of a cybercrime (for example someone has stolen your personal information or money, or tried to extort you) you can make a police report. Act fast if you've had your personal or financial information stolen. Contact your bank or credit card provider now and tell them to stop any transactions." "With your consent, we can use your report to work with organisations and remove scam websites, scam ads and contact details." "If you're at risk of identity misuse or need support to recover from a scam, we can help to connect you with IDCARE." ---------------------------------------------------------------- [4] Scamwatch, "Scam statistics" (interactive dashboard, updated monthly) https://www.scamwatch.gov.au/research-and-resources/scam-statistics Read with the Month/Year filter set to 2026, all scam types, all states. The monthly chart ran from January to September 2026. Reported losses: $250,441,924.20 Reported scams: 138,392 "This interactive data is from scam reports that have been made to the National Anti-Scam Centre. For scams data that includes other sources see our Targeting scams report." "The data is updated monthly. The data may change or differ from previously published data as we review it for quality." ---------------------------------------------------------------- [5] ACCC, "Scams Prevention Framework" https://www.accc.gov.au/about-us/scams-prevention-framework "There is a staged introduction of the framework. Most obligations will apply from 31 March 2027, when regulated banks, telecommunications providers and digital platforms must comply with the framework to prevent, detect, disrupt, report, and respond to scams." "the ACCC is the framework general regulator, as well as the sector regulator for digital platforms; the Australian Securities and Investments Commission is the sector regulator for banks; the Australian Communications and Media Authority is the sector regulator for telecommunications providers. The Australian Financial Complaints Authority (AFCA) is the external dispute resolution service under the framework. AFCA will handle eligible scam-related complaints not resolved through a business' internal dispute resolution process from 31 March 2027." "Although most framework obligations start from 31 March 2027, entities in the banking, telecommunications and digital platforms sectors who provide a regulated service must be an AFCA member from 1 September 2026. If an entity does not meet the AFCA membership obligation from 1 September, they may face enforcement action, including civil penalties." "AFCA is consulting on proposed changes to its rules about scam-related complaints until 28 September 2026 ... The code and rules for the Scams Prevention Framework are still being developed by government. Treasury recently conducted a consultation process of draft codes and the first set of rules." ---------------------------------------------------------------- [6] AFCA, "Scams Prevention Framework" https://www.afca.org.au/about-afca/scams-prevention-framework "AFCA will operate the Australian Scams Ombudsman from 31 March 2027." "On 1 July 2026, AFCA was authorised as the EDR scheme for scam-related complaints under the SPF. AFCA will operate this scheme under the name, Australian Scams Ombudsman. This expands AFCA's role to include telecommunications providers and digital platforms ..." "From 31 March 2027, this means: consumers and small businesses can bring a SPF-related scam complaint to the Australian Scams Ombudsman; complaints involving multiple organisations can be considered together; regulated businesses will have clearer obligations to prevent and respond to scams." "Under the legislation, AFCA, operating the Australian Scams Ombudsman, can only consider scam-related matters under the SPF that occurred on or after 31 March 2027." "establishing leadership roles, including appointing Chief Scams Officer David Lacey, founder and former Managing Director of IDCARE" "Businesses regulated under the Scams Prevention Framework (SPF) are required to be AFCA members from 1 September 2026." "Until the Australian Scams Ombudsman commences operations on 31 March 2027, existing arrangements continue. Consumers and small businesses can still lodge scam-related complaints with AFCA about financial services firms, such as their bank. Raise the complaint directly with the firm first, through its internal dispute resolution process. If it isn't resolved, bring it to AFCA. ... These complaints are considered under pre-SPF law. SPF obligations do not apply to complaints about matters occurring before 31 March 2027." ---------------------------------------------------------------- [7] AFCA, "Make a complaint" https://www.afca.org.au/make-a-complaint "The Australian Financial Complaints Authority (AFCA) is a free, fair, and independent service that helps consumers and small businesses resolve complaints about financial firms. If you're experiencing a problem with a financial firm, the first step is usually to raise it with them directly. ... If you're not satisfied with their response, we're here to help." "call 1800 931 678 (8:00am to 6:00pm AEST/AEDT weekdays) or contact us online." "Interpreter service: Call 131 450." ---------------------------------------------------------------- [8] ACMA, "SMS Sender ID Register" and "Getting text messages from businesses and organisations" https://www.acma.gov.au/sms-sender-id-register https://www.acma.gov.au/getting-text-messages-businesses-and-organisations "From 1 July 2026, new rules mean texts sent with an organisation's name at the top of a message (known as a branded sender ID) will need to have the sender ID registered." "From 1 July 2026, you can be more confident that any SMS or MMS messages you receive with a sender ID is from the organisation or business named in the sender ID." "From 1 July 2026, you may get messages from 'Unverified'. Check these messages carefully. It may be a scam, or it may be from a real business or organisation that hasn't registered their sender ID yet." "The rules do not apply to text messages from phone numbers instead of a branded sender ID." "The new rules only apply to text messages (SMS/MMS). They do not apply to messaging apps such as WhatsApp, iMessage and Facebook Messenger." "If you think you've received a scam message, report it to ScamWatch. If you think your money or personal information has been stolen, tell your bank and phone company immediately. If you've had personal details stolen, contact IDCARE. You can also call 1800 595 160." [8b] ACMA, "Combating phone scams" https://www.acma.gov.au/combating-phone-scams "We: Run the Scam Telecommunications Action Taskforce ... Make and enforce rules that require telcos to use multifactor ID authentication to stop porting fraud and SIM swap fraud. Register and enforce rules that require telcos to identify, trace and block scam calls and SMS. Share intelligence to disrupt scams with industry and other regulators." ---------------------------------------------------------------- [9] Australian Signals Directorate, "Annual Cyber Threat Report 2024-2025" https://www.cyber.gov.au/publication/annual-cyber-threat-report-2024-2025 "Year in review. What ASD's ACSC saw: Answered over 42,500 calls to the Australian Cyber Security Hotline, up 16%. On average, 116 calls per day, an increase from 100 calls per day. Received over 84,700 cybercrime reports to ReportCyber, down 3%. On average a report every 6 minutes, consistent with last year. Average self-reported cost of cybercrime per report for individuals, up 8% ($33,000). Average self-reported cost of cybercrime per report for businesses, up 50% overall ($80,850)." "In FY2024-25, ASD's ACSC received over 84,700 cybercrime reports through ReportCyber; however, ASD's ACSC assesses that the vast majority of cybercrime continues to go unreported. The average self-reported cost overall was $36,633, with identity fraud, online shopping fraud, and online banking fraud the most frequently reported cybercrime types." "providing the Australian Cyber Security Hotline, which is contactable 24 hours a day, 7 days a week, via 1300 CYBER1 (1300 292 371)" [9b] cyber.gov.au, "Submit a Report" https://www.cyber.gov.au/submit-a-report "Cybercrime. Choose this option if: you have lost money or shared personal information through an online scam; someone has stolen your personal information and is pretending to be you; ... Act now. Call your bank or other financial service provider to freeze any affected accounts and cards. Money recovery may not be possible, but it helps reduce further harm." ---------------------------------------------------------------- [10] Federal Register of Legislation, Scams Prevention Framework Act 2025 (No. 15, 2025), as made https://www.legislation.gov.au/C2025A00015/asmade/text Registered 20 February 2025. Administered by the Department of the Treasury. In force. "58AG Meaning of scam (1) A scam is a direct or indirect attempt (whether or not successful) to engage an SPF consumer of a regulated service where it would be reasonable to conclude that the attempt: (a) involves deception ...; and (b) would, if successful, cause loss or harm including obtaining SPF personal information of, or a financial or other benefit from, the SPF consumer ..." "58AI Meaning of actionable scam intelligence. A regulated entity identifies or has actionable scam intelligence if (and when) there are reasonable grounds for the entity to suspect that a communication, transaction or other activity relating to, connected with, or using a regulated service of the entity is a scam." "Subdivision B, SPF principle 1: Governance. Each regulated entity must document and implement governance policies, procedures, metrics and targets for combatting scams. These must be reviewed, and certified by a senior officer of the entity, at least annually." "Subdivision F, SPF principle 5: Disrupt. Each regulated entity for a regulated sector must take reasonable steps to: (a) disrupt an activity that is the subject of actionable scam intelligence; and (b) prevent losses from such an activity. The entity will also need to report to the SPF general regulator the outcomes of the entity's investigation ..." Safe harbour for disruptive action: "... ending when the entity reasonably believes that the activity is or is not a scam, or after 28 days, whichever is the earlier ..." "Subdivision G, SPF principle 6: Respond. Each regulated entity must have an accessible mechanism for its consumers to report activities that are or may be scams. The entity must have an accessible and transparent internal dispute resolution mechanism for its consumers to complain about: (a) activities that are or may be scams; or (b) the entity's conduct relating to such activities. ... When undertaking such internal dispute resolution about a complaint, the entity must give a statement, relevant to the complaint, about whether it has complied with its obligations." "58FK [tier 1] ... the maximum penalty amount for such a contravention by a body corporate is the greater of the following: (a) 159,745 penalty units; (b) if the relevant court ... can determine the total value of the benefit ... 3 times that total value; (c) if that court cannot determine that total value, 30% of the adjusted turnover of the body corporate during the breach turnover period for the contravention. ... for a person other than a body corporate is 7,990 penalty units." "58FL Maximum penalty for tier 2 contraventions ... (a) 31,950 penalty units; (b) ... 3 times that total value; (c) ... 10% of the adjusted turnover ..." "58FZC Actions for damages, general rule (1) A person (the victim) who suffers loss or damage by conduct of another person that was done in contravention of: (a) a civil penalty provision of an SPF principle; or (b) a civil penalty provision of an SPF code; may recover the amount of the loss or damage by action against that other person. (2) An SPF regulator may make a claim under subsection (1) on behalf of the victim ..."