At a glance
If you've experienced a cybercrime, this page can help you recover. Learn how to identify and report common cybercrimes, and where to get help with other online issues. We can also help you find the right support services and guide you through reporting a cybercrime to police. Please note, we can’t provide technical support for your device or recover lost money.
Call 000 if there is an immediate threat to life or risk of harm. Call 131 444 for non-emergency police assistance.
Cybercrime affects everyone
Cybercrime is when someone commits a crime using computers or devices.
It is one of the fastest-growing types of crime in Australia and can affect people, businesses, critical infrastructure entities and government agencies.
Common cybercrimes include:
- online threats
- fraud
- unauthorised account access
- identity theft
- malware and ransomware attacks.
The impacts can be serious. For example, people can lose money or have their identity stolen. Businesses and other organisations can also suffer significant financial loss, reputational damage and operational disruptions.
Get support
We understand how distressing a cybercrime can be. If you feel worried, anxious or depressed:
- talk to your family or friends
- seek online or phone support
- see your doctor.
In an emergency, call 000.
Medicare Mental Health is a free service that connects you with the mental health support that is right for you. Help is available 24 hours a day, 7 days a week.
You can also contact:
- Lifeline (13 11 14)
- Beyond Blue (1300 22 4636)
- Kids Helpline (1800 55 1800).
How we can help during a cybercrime
We can help you recover and reduce the risk of it happening again.
You can call our hotline on 1300 CYBER1 (1300 292 371). We’re available 24 hours a day, 7 days a week. We can connect you with support services and guide you through how to make a report to police through ReportCyber.
Please note, we can’t provide technical support for your device or recover lost money.
Common cybercrime scenarios
Read our practical advice for common cybercrime scenarios.
You think you've been hacked keyboard_arrow_down
A malicious hacker may break into your device or account to steal information, destroy data or disrupt services.
Common ways hackers gain access include:
- phishing emails and messages
- malware
- brute-force attacks (guessing your password)
- social engineering (tricking you into giving away information or compromising your device's security).
Learn more about hacking.
Warning signs
- Suspicious account activity, including purchases you don't recognise.
- Your device often slows down or overheats.
- Changes to your device that you didn't make.
- Notifications that your details were leaked.
Act now and report it if you notice any of these signs and think you’ve been hacked.
Act now
- Contact your bank to secure any affected accounts or cards.
- Report the cybercrime to the police through our joint tool, ReportCyber.
- Get identity security support from IDCARE.
Recover
Check recover from hacking to understand:
- if you were hacked
- how to respond, recover and make a report.
Protect yourself
Find out how to protect yourself from hacking with our personal cyber security handbook.
You received a suspicious email, message or phone call keyboard_arrow_down
Cybercriminals use email, SMS, phone calls and social media to trick people into paying money or sharing personal information. They often pretend to be a person or organisation you trust.
Warning signs
A cybercriminal might ask you:
- for your bank account details, passwords or credit card numbers
- to download files or software
- to allow remote access to your device, network or account.
Act now and report it if:
- you have lost money
- your personal information has been stolen
- someone has access to your device, network or account without your consent.
Act now
- Do not respond to any threats or transfer funds.
- Do not click any links even if a message looks legitimate.
- Do not give anyone remote access to your computer or account.
- Contact your bank to secure any affected accounts or cards.
- Report the cybercrime to the police through our joint tool, ReportCyber.
- Report the scam to the business, service or platform involved, and your IT department if it affected a work device.
- Contact your state or territory fair trading agency if a scammer is impersonating an Australian business.
- Get identity security support from IDCARE.
Recover
- If you’ve been affected by a scam, learn how to recover from a scam.
- If you clicked a link, opened an attachment or installed software, learn how to recover from malware.
- If someone is demanding a ransom to restore access to your device, network or account, learn how to recover from ransomware.
- If someone has access to your account, learn how to recover from account compromise.
Protect yourself
- Learn how to watch out for threats.
- Learn how to recognise and protect yourself from scams.
- Find out how to secure your accounts and devices with our personal cyber security handbook.
- Get help with unwanted marketing texts, emails or potential scams from the Australian Communications and Media Authority.
You clicked on a link or attachment, or installed software you think is malicious keyboard_arrow_down
Malware (short for ‘malicious software’) are programs that cybercriminals use to access or harm your device or network.
You may have installed malware from an untrusted source if you:
- clicked a link
- opened an attachment
- followed instructions on how to install software.
Learn more about malware.
Warning signs
- Suspicious account activity, including purchases you don't recognise.
- Your device often slows down or overheats.
- Changes to your device that you didn't make.
- Notifications that your details were leaked.
- Unexpected pop-ups or software.
Act now and report it if:
- you have lost money
- your personal information has been stolen
- someone has access to your device, network or account without your consent.
Act now
- Run an antivirus scan to check if your device has malware.
- Contact your bank to secure any affected accounts or cards.
- Report the cybercrime to the police through our joint tool, ReportCyber.
- Get identity security support from IDCARE.
- Report the scam to the business, service or platform involved, and your IT department if it affected a work device.
- Contact your state or territory fair trading agency if a scammer is impersonating an Australian business.
Recover
- If you clicked a link, opened an attachment or installed software, learn how to recover from malware.
- If someone is demanding a ransom to restore access to your device, network or account, learn how to recover from ransomware.
- If someone has access to your account, learn how to recover from account compromise.
Protect yourself
- Learn how to watch out for threats.
- Find out how to secure your accounts and devices with our personal cyber security handbook.
Someone has access to your online account or you’ve noticed unauthorised transactions keyboard_arrow_down
Account compromise is when someone gains unauthorised access to your online account. This could be your email, banking or social media account.
Cybercriminals may use compromised accounts to steal your personal information, money or identity.
Learn more about account compromise.
Warning signs
- Suspicious account activity, including purchases you don't recognise.
- Transactions being declined when you should have enough money in your account.
- Changes to your account that you didn't make.
- Unexpected notifications about password resets or login attempts.
- Notifications that your details were leaked.
Act now and report it if:
- you have lost money
- your personal information has been stolen
- someone has access to your account without your consent.
Act now
- Change your account password if possible.
- Contact your bank to secure any affected accounts or cards.
- Report the cybercrime to the police through our joint tool, ReportCyber.
- Get identity security support from IDCARE.
Recover
- If your accounts are affected, learn how to recover from account compromise.
- If someone is demanding a ransom to restore access to your device, network or account, learn how to recover from ransomware.
- If it relates to a business email, learn how to recover from business email compromise.
Protect yourself
- Learn how to watch out for threats.
- Find out how to secure your accounts and devices with our personal cyber security handbook.
Someone has access to your device keyboard_arrow_down
Cybercriminals can target any device connected to the internet, such as smartphones and laptops. If they hack your device, they may be able to access your accounts and other sensitive data.
Warning signs
- You can’t access files or you get a ransom demand to restore access to them.
- Your device often slows down or overheats.
- Unexpected files or software on your device.
- Your web browser automatically takes you to a web page you didn’t intend to open.
Act now and report it if someone has access to your device without your consent.
Act now
- Contact your bank to secure any affected accounts or cards.
- Report the cybercrime to the police through our joint tool, ReportCyber.
- Get identity security support from IDCARE.
Recover
- If you clicked a link, opened an attachment or installed software, learn how to recover from malware.
- If someone is demanding a ransom to restore access to your device, network or account, learn how to recover from ransomware.
- If someone has access to your account, learn how to recover from account compromise.
- If it relates to a business email, learn how to recover from business email compromise.
Protect yourself
- Learn how to watch out for threats.
- Find out how to secure your accounts and devices with our personal cyber security handbook.
Someone has obtained or leaked your identity information keyboard_arrow_down
Identity theft can happen when someone obtains or exposes your personal information. Cybercriminals may use stolen information to access your accounts, commit fraud or impersonate you.
Learn more about identity theft.
Warning signs
- Suspicious account activity, including purchases you don't recognise.
- Changes to your account that you didn't make.
- Notifications that your details were leaked.
Act now and report it if:
- someone is using your personal or work identity
- someone has access to your account without your consent.
Act now
- Contact your bank to secure any affected accounts or cards.
- Report the cybercrime to the police through our joint tool, ReportCyber.
- Get identity security support from IDCARE.
Recover
- Learn how to recover from a data breach.
- If you received a data breach notification, follow any steps the organisation has suggested and contact them if you need support.
- Learn how to respond to a data breach and your rights under the Consumer Data Right system.
- If it relates to a business email, learn how to recover from business email compromise.
Protect yourself
- Learn how to watch out for threats.
- Find out how to secure your accounts and devices at protect yourself.
Someone is using your business email to scam others out of money or goods keyboard_arrow_down
Business email compromise is when a cybercriminal gains access to a business email account and uses it to scam an organisation. They may also use it to trick employees into revealing sensitive business information.
Learn more about account compromise.
Warning signs
- Someone receives emails from your account that you didn't send.
- Unexpected notifications about password resets or login attempts.
- Changes to your account that you didn't make.
- Emails have been deleted or moved to another folder.
- Someone reports a request from you to pay an invoice or change bank account details.
- Unusual emails appearing in your account.
Act now and report it if someone:
- has access to your business email account without your consent
- is impersonating you or your business.
Act now
- Change your email account password if possible.
- Contact your bank to secure any affected accounts or cards.
- Report the cybercrime to the police through our joint tool, ReportCyber.
- Get identity security support from IDCARE.
Recover
Learn how to recover from business email compromise.
Protect yourself
- Learn how to watch out for threats.
- Find out how to secure your accounts and devices with our personal cyber security handbook.
Someone is threatening or harassing you online keyboard_arrow_down
Online abuse and threats may include someone who:
- demands money, personal information or a favour and threatens consequences if you refuse
- shares or threatens to share an intimate image or video of you
- harasses or stalks you online.
Act now and report it if you are being threatened or harassed online.
Act now
- Call 000 if there is an immediate threat to life or risk of harm.
- Call 131 444 for non-emergency police assistance.
- Report the cybercrime to the police through our joint tool, ReportCyber.
Protect yourself
- Learn how to watch out for threats.
- Find out how to secure your accounts and devices with our personal cyber security handbook.
- Visit Scamwatch for information about threats and extortion scams.
Help for other online issues
The following information may help you understand or report other online issues.
Suspicious behaviour keyboard_arrow_down
You can report information about unsolved crime or suspicious behaviour to Crime Stoppers. You can report anonymously.
Spam keyboard_arrow_down
Spam is unwanted online messages, often containing ads. It is usually sent at random to a large number of people.
To stop most unsolicited telemarketing calls, register your phone number on the Do Not Call Register. You can report spam to the Australian Communications and Media Authority.
Cyberbullying, adult cyber abuse and image-based abuse keyboard_arrow_down
You can report cyberbullying, adult cyber abuse and image-based abuse to eSafety. They can help remove harmful content shared without consent, including:
cyberbullying of children
adult cyber abuse
intimate images or videos.
Visit the eSafety Commissioner for information about online safety issues.
Illegal and restricted online content keyboard_arrow_down
You can report illegal and restricted online content to eSafety. They can:
direct an online business, service or platform to remove illegal content
ensure restricted content can only be accessed by people aged 18 or over.
Online child sexual exploitation keyboard_arrow_down
You can report online child sexual exploitation, including online grooming and inappropriate contact, to the Australian Centre to Counter Child Exploitation (ACCCE). They are led by the Australian Federal Police.
Fraudulent or misleading content by an Australian company keyboard_arrow_down
You can report fraudulent or misleading content by an Australian company to the Australian Competition and Consumer Commission.
Misconduct by an Australian company keyboard_arrow_down
You can report financial or management misconduct by an Australian company to the Australian Securities and Investments Commission.
Mishandling personal information by government or a private agency keyboard_arrow_down
You can report concerns about mishandled personal information by an Australian government agency or organisation to the Office of the Australian Information Commissioner.
Discrimination or human rights concerns keyboard_arrow_down
You can report discrimination or human rights concerns to the Australian Human Rights Commission.
Defamatory content keyboard_arrow_down
We recommend seeking legal advice if you have concerns about online defamation.