Report a crypto scam in Australia as soon as you suspect you have been tricked, but start by preventing any further loss. Stop sending cryptocurrency or money, end contact with the person who approached you and avoid using their links or phone numbers. Crypto transfers are often difficult to reverse, so do not assume a platform can recover the funds. Moneysmart recommends contacting the bank or crypto platform immediately, reporting the scam to Scamwatch and watching for follow-up recovery offers. Acting quickly can protect accounts and help authorities identify patterns, even if the original transfer cannot be returned.
Stop payments and secure your accounts
If a bank transfer or card payment is pending, call the bank using the number on its official website or the back of your card. Explain that the payment is connected to a suspected scam and ask whether it can be stopped, recalled or flagged. If cryptocurrency was sent through an exchange, contact that exchange’s support from the official app or typed-in domain. Give the transaction reference and wallet address, but never share a password, one-time code or seed phrase with anyone claiming to help.
Change passwords for accounts that may have been exposed and turn on multi-factor authentication where available. If you installed software at the scammer’s request or shared your screen, disconnect the device from remote access and seek trusted technical help. Contact your bank if you shared identity or card information. Where personal details may be compromised, Moneysmart points people to IDCARE for support. The right sequence depends on what information was exposed, so focus on securing the affected account first.
Preserve useful evidence
Save transaction IDs, wallet addresses, exchange account names, dates, amounts and the network used. Keep copies of emails, text messages, chat exports, phone numbers, social media handles, website addresses and payment receipts. A screenshot can be helpful, but retain the original message and the exact URL where possible. Do not edit the files or delete the conversation before recording the details. Create a simple timeline showing when contact began, what the person promised, and when money or crypto moved.
Evidence can help a bank, platform, police service or reporting agency understand the path of the funds. Do not pay another person to “trace” or “unlock” your crypto; a legitimate exchange support team will not need your recovery phrase. If the scammer used a fake exchange, save the login page address without signing in again. Avoid clicking the same link to collect evidence. Use a browser history export or a written copy of the URL instead.
Use the Australian reporting channels
Scamwatch, run by the National Anti-Scam Centre, accepts reports about scams across Australia and uses reports to spot trends and warn the community. A report can be useful even if no money was lost. Use the official Scamwatch site and provide the method of contact, what the scammer said, the payment type and any website or account details you have saved. Reporting is not the same as filing a police report, so follow the separate process when a crime or theft needs to be reported.
Scamwatch directs people who lost money to a cryptocurrency scam to ReportCyber for police reporting. The Australian Government’s Moneysmart guidance also says to contact the crypto platform or digital currency exchange used to send the funds. If money was taken from a bank account without authorisation, contact the bank straight away. Choose the channel that matches the event and keep the report reference number with your evidence. These steps do not guarantee recovery, but they make sure the event reaches the relevant organisations.
Watch for recovery scams
After a loss, a second person may claim to be a recovery agent, government investigator, blockchain specialist or lawyer who can return the funds for an upfront fee. They may already know some details from the first scam and use that information to sound credible. Moneysmart warns people to be cautious of anyone promising to recover money for a fee. Do not pay a “tax”, “gas charge” or release payment to receive funds that supposedly have been frozen.
Check any organisation through a contact method you find independently. Do not rely on a phone number, email, or website sent by the person who contacted you. Genuine agencies do not need your seed phrase to investigate a report. If a recovery offer asks you to install a remote-access app, transfer more crypto, or sign a transaction you cannot read, stop. A wallet signature may grant permissions even when there is no obvious payment on the screen.
Tell others and monitor identity risk
Warn family or friends who might have seen the same message or social media advertisement. Report the fake account or advertisement to the platform that hosted it, but do not publicly post sensitive account information. If identity documents or personal data were shared, tell financial institutions and contact IDCARE using details from its official site. Keep an eye on accounts and credit activity, and replace compromised passwords before the same details are reused elsewhere.
Be especially wary if the original scam began with a WhatsApp or Telegram investment group, an unsolicited online relationship, a job offer that required opening crypto accounts, or a claim of guaranteed returns. These are common approaches described by Australian consumer guidance. A polished website, influencer endorsement or early profit shown on a dashboard does not prove that an investment is genuine. Do not send more funds to withdraw a balance shown on a fake platform.
A practical response checklist
Stop all further payments and block the scammer after saving evidence. Contact your bank and crypto exchange through official channels. Record transaction IDs, addresses, dates, messages and platform URLs. Report the incident to Scamwatch, and use ReportCyber where a crypto theft or crime needs to be reported. Secure passwords and identity information, then watch for follow-up recovery approaches. Keep copies of all case references so you can provide consistent information if a bank or agency contacts you.
Australia’s official guidance is clear that crypto scams can be difficult to recover from, because digital asset transfers are not easily reversed. No article or service can promise a refund. The most useful immediate actions are limiting additional exposure, making timely reports and protecting other accounts. If you are uncertain which reporting path applies, consult Moneysmart, Scamwatch or your financial institution directly through their verified websites. Reporting a crypto scam in Australia helps build a clearer picture of threats, even when the funds are no longer accessible.