In immediate danger? Call 000

Scam alert: Tax-time ATO and myGov impersonation texts are surging. The ATO never sends login links by text. See the current wave

Investment and crypto scams

5 min readReviewed October 2026 · Internet Safety Australia Editorial Team

In short

  1. Guaranteed returns don’t exist. “Risk-free” and “guaranteed” mean scam.
  2. Check the platform on ASIC’s investor alert list via Moneysmart before a dollar moves.
  3. Introduced to the investment by someone you met online? It’s a scam until proven otherwise.

Investment scams take more money from Australians than any other scam type. The modern version looks professional: a slick trading platform showing your balance growing, a “dedicated account manager” who calls you, even celebrity endorsements (deepfaked). The platform is a stage set — the numbers on screen are whatever the criminals type in.

The pattern to recognise

  • Found via social media ads, WhatsApp/Telegram groups, or a new online friend (“pig-butchering”).
  • Small first deposit “works” — you may even withdraw once, to build trust.
  • Pressure to invest more; “taxes” or “fees” demanded to release your (fake) profits.
  • The platform vanishes, or support stops replying, when you try to withdraw for real.
  • Check ASIC’s investor alert list and confirm any adviser holds an Australian Financial Services licence — via Moneysmart’s registers
  • Be certain any celebrity endorsement is real (they almost never are — check the celebrity’s official channels)
  • Treat “guaranteed” or “risk-free” returns as a confession of fraud
  • Never install trading or remote-access apps at a stranger’s suggestion
  • Take 48 hours before any investment decision — urgency is engineered

Already invested and can’t withdraw?

Stop all further payments — including “release fees”. Contact your bank immediately, report to Scamwatch and ReportCyber, and beware “recovery agents” who contact you afterwards: that’s the second-wave scam.

Common questions

Where to report this

Report to ReportCyber

Cybercrime: identity theft, online fraud, hacked accounts or devices, ransomware and online threats.

1300 CYBER1 (1300 292 371)

Go to ReportCyber (leaves our site — official service)

Report to Scamwatch

All types of scams — phishing, investment, romance, shopping, impersonation. Reports help track and disrupt scam activity.

Go to Scamwatch (leaves our site — official service)

Official sources for this guide

Reviewed October 2026 by Internet Safety Australia Editorial Team. Internet Safety Australia is independent and not a government website.