I think I’ve been scammed — your first 60 minutes

Step 1: Stop and cut contact

• Stop talking to the scammer. Don’t reply, don’t explain, don’t warn them.
• Don’t send any more money — including “fees” or “taxes” to release a refund. That’s the same scam continuing.
• If they’re on your computer (remote access), turn off the Wi‑Fi or shut the computer down.

Step 2: Call your bank straight away

Use the phone number on the back of your bank card or in your banking app — never a number the scammer gave you. Tell them you’ve been scammed and ask them to freeze the transactions and secure your accounts.

• Paid by card or bank transfer? Ask about a chargeback or recall. Speed matters — minutes and hours count.
• Paid with gift cards, crypto or cash? Recovery is much harder, but still report it. Your report helps stop the next person being hit.
• Ask the bank to reset your online banking password and check for new payees you didn’t add.

Step 3: Protect your identity and accounts

• Change passwords on your email, banking and any account the scammer could know about. Start with email — it resets everything else.
• Turn on two-factor authentication (2FA) where you can.
• If you gave out your driver licence, passport or Medicare details, contact IDCARE on 1800 595 160 — they’ll build a free recovery plan with you.
• If the scammer had access to your device, run a security scan or take it to a trusted professional before using it for banking.

Step 4: Report it

• Report to Scamwatch — your report helps warn others and disrupt the scam.
• Report to ReportCyber if you lost money, your identity details, or your accounts were compromised.
• If a business’ name was used (like your bank or Australia Post), let the real business know too.

Step 5: Look after yourself

Scams are crimes, and being a victim of crime can shake you. If you’re feeling overwhelmed, anxious or low, that’s a normal reaction. Talk to someone you trust, or call one of the support lines below. There’s no shame in any of this.