Australian consumers have reported close to $260 million in scam losses during the first three quarters of 2025, according to data from the National Anti-Scam Centre. The Scamwatch service received 159,319 scam reports from January to September, reflecting a 16% increase in total losses compared to the same period last year, even as the volume of reports fell by 20%.
Online shopping scams have emerged as a significant area of concern. In 2025, Scamwatch received 19,662 reports of shopping scams, with 9,628 resulting in financial loss. The total losses from these scams reached $8.6 million, representing a 19% rise from the previous year. The timing coincides with major online sales events, such as Black Friday, which scammers often exploit.
The majority of scam activity was initiated through online channels, including fraudulent websites, digital advertisements, social media, and mobile applications. These methods accounted for $122 million in reported losses, or nearly half of the total. Social media platforms, particularly Facebook and Instagram, have been increasingly used by scammers to impersonate legitimate users and target their networks with fraudulent offers, including fake ticket sales and investment schemes.
Scammers often compromise social media accounts and use them to reach friends and contacts, sometimes requesting one-time codes to facilitate further account takeovers. ACCC deputy chair Catriona Lowe commented: “We remind consumers to take their time, check the legitimacy of websites and its offers, and be cautious about sharing personal or financial information online. A few simple checks before making a purchase can make all the difference in avoiding a scam and keeping your money safe.”
Investment scams remained the largest source of reported losses, totalling $128.4 million, although this was a decrease from $135 million in 2024. Reports of rebate and false billing scams declined by 50% and 52%, respectively, although losses from false billing scams rose to $19.4 million. Remote access scams and phishing scams also saw fewer reports, with remote access scam losses dropping by 30%.
A recent industry assessment, reported by IT Brief, has found that many Australians continue to engage in online behaviours that heighten their exposure to scams and data breaches. Sixteen per cent (16%) of survey respondents reported falling victim to a scam in the past year, with average losses of $545 per incident and total losses exceeding $87,000 among those surveyed.
Social media was the most common channel for scam delivery, accounting for 36% of incidents, followed by email (27%), text messages (25%), and phone calls (20%). The prevalence of social media scams was higher among
The survey found that 45% of Australians share personal milestones and events on social media, while 33% post videos and 30% share achievements such as new jobs or degrees. High rates of social media use among younger Australians, particularly those aged 16 to 24, were noted as a factor increasing exposure to scams.
Password management remains a concern, with 36% of respondents admitting to writing down passwords and 18% reusing the same password across multiple accounts. While 27% use password managers, a significant portion rely on less secure methods such as browser autofill. Those who had experienced scams were more likely to have poor password habits.
Cookie management practices were also highlighted as a risk area. Forty-three percent of respondents accept all cookies by default, and 26% do not review terms before consenting. Device security is inconsistent, with just over half of Australians not installing third-party security software on their phones, and even lower rates for computers and tablets. A small percentage use work devices for personal financial transactions, creating risks for both individuals and employers.
Australians expressed varying degrees of trust in technology companies. While most trust Google and Microsoft to some extent, there is greater scepticism toward platforms such as X/Twitter, TikTok, and OpenAI. Two-thirds of respondents said they would not provide payment information to major tech companies.
Artificial intelligence is a growing concern, with 40% of respondents worried about AI-driven scams, such as deepfakes. Other concerns included job displacement and reduced human interaction. Ciprian Istrate, senior vice president of operations at Bitdefender Consumer Solutions Group, said: “These findings highlight the growing importance of cybersecurity awareness as attacks on consumers become more frequent and sophisticated in the age of AI.”
IAG, the parent company of brands including NRMA Insurance, CGU, WFI, and Rollin’, has issued a warning regarding the increasing frequency of insurance scams. The insurer is urging Australians to remain vigilant, particularly during holiday travel and storm season, when opportunistic fraud is more likely.
Insurance scams are being conducted by individuals or companies posing as insurers via online advertising, ad-spoofing, or unsolicited visits. Some claims management companies (CMCs), accident management companies, and disaster chasers are targeting individuals who have recently experienced car accidents or natural disasters.
Anthony McGrath, IAG executive manager of counter-fraud and intelligence, said: “While CMCs and disaster chasers are not illegal, some operate in a grey area, targeting and taking advantage of vulnerable Australians who have just been through an often-traumatic experience like a car accident or natural disaster. They promise quick fixes or expedited, hassle-free claims, but in reality, they can cause inflated costs, unclear communication, delays, and unnecessary stress.”
IAG’s analysis indicates that claims involving CMCs can result in costs up to 180% higher and repairs that take twice as long compared to claims managed directly with insurers. Industry data shows a 400% increase in claims involving credit hire companies between 2019 and 2022. These companies may use tactics such as inflating charges, holding vehicles until payment, or initiating legal action without clear consent.
IAG has also observed increased activity by disaster chasers following severe weather events, particularly in New South Wales and Southeast Queensland. These individuals may approach storm-affected homes uninvited, offering immediate repairs or claiming to represent insurers. McGrath said: “A legitimate insurer will never send an assessor or emergency repair team without notice and without first arranging with the customer after they’ve claimed. A builder or tradesperson sent by your insurer will never ask for payment up front and always ask to check the credentials. Most importantly, call your insurer directly if you have any doubt or suspicions.”
Louise Hayes, coordinator of disaster recovery at Financial Counselling Australia, noted that free, independent support is available from financial counsellors. “If you are struggling with your insurance claim or think you need assistance negotiating with your insurer, there is no need to pay a third party who may end up taking advantage of your situation and potentially making it worse and costing you money,” Hayes said.
Insurance professionals are encouraged to advise clients on verifying the legitimacy of claims management services and to caution against engaging with unverified third parties, especially during periods of increased scam activity.
