A new wave of crypto-related scams has emerged in Australia, where cybercriminals are impersonating police officers and misusing the national cybercrime reporting system, ReportCyber, to deceive citizens and steal their cryptocurrency holdings.
According to the Joint Policing Cybercrime Coordination Centre (JPC3), led by the Australian Federal Police (AFP), fraudsters illegally obtain victims’ personal data—such as email addresses and phone numbers—and use it to file fake reports within the ReportCyber system.
In one verified case, a victim received a call from a man claiming to be an AFP officer, who stated that a suspect had been arrested and the victim’s data was linked to a cryptocurrency-related breach. The caller provided an official-looking case number and asked the victim to check it via the ReportCyber portal, where it appeared as legitimate.
The scammer then said a representative from a crypto exchange would follow up to “secure” the victim’s assets. During the second call, the so-called representative tried to convince the victim to transfer funds to a ‘cold storage’ account for protection. Fortunately, the victim recognized the deception and hung up.
In other instances, criminals have used spoofing technology to mask phone numbers, making their calls appear to come directly from AFP lines.
“These cybercriminals carefully verify victims’ personal details to appear credible,” said Detective Superintendent Marie Andersson of the AFP. “They create a sense of urgency, moving quickly from the moment a report is filed to contacting the victim.”
Andersson noted that while the scam demonstrates the growing sophistication of cybercriminals, it also shows increased public awareness, as citizens are reporting suspicious behavior more frequently.
The AFP emphasized that ReportCyber remains a secure and trusted tool for reporting cybercrime, but users should remain vigilant, as criminals may exploit legitimate data to reinforce their scams.
“Each cybercrime report helps us trace offenders, build threat intelligence, and prevent future attacks,” Andersson added.
The JPC3 unites Australian law enforcement agencies, international partners, and private sector experts to combat cybercrime and reduce the financial and social harm caused by digital threats.
Recent incidents underscore the growing complexity of crypto-related crime in Australia:
- In June 2025, police uncovered a $190 million money-laundering scheme using digital assets and shell companies.
- In October, Deloitte Australia was caught using generative AI to fabricate data in a $440,000 government report.
- In November, authorities arrested 55 suspects and seized $38 million in crypto assets as part of Operation Ironside, following a court decision allowing encrypted AN0M messages as admissible evidence.
