Suspicion that someone you love is being deceived online often arrives as a gut feeling rather than a clear fact. A parent who becomes secretive about their phone, an aunt who mentions a romantic partner she has never met in person, or a sibling who is anxious about a "limited-time investment opportunity" can all be early signals that something is not right. In Australia, where almost every adult owns a smartphone and online banking is woven into daily routines from Sydney to Perth, the opportunities for scammers to reach vulnerable people are vast.
The numbers confirm what many families are quietly experiencing. Australians reported losses of more than 2.7 billion dollars to scams in the most recent annual figures published by the Australian Competition and Consumer Commission's Scamwatch service, with investment scams, romance scams and remote-access scams among the most damaging. These figures only capture what is reported; many older Australians never tell anyone they have lost money, often because of shame or because they do not realise the contact was fraudulent until long after the fact.
For families across Melbourne, Brisbane, Adelaide and regional centres, this means that learning the shape of these crimes is no longer optional. Conversations about online safety are becoming as ordinary as discussions about locking the front door, especially as younger relatives often become the first line of defence for older parents and grandparents. This article is written for those moments when quiet worry turns into something you cannot ignore.
The goal is not to assign blame, recover lost funds on your own, or play detective. It is to move calmly from suspicion to action, protecting the person you care about while respecting their dignity. Australia has a strong network of reporting bodies and consumer protections, and using them early can make the difference between a recoverable incident and a financial disaster.
Online fraud rarely appears out of nowhere. It usually begins with a small, plausible contact that gradually takes over a person's attention, emotions and trust. The first signs are behavioural rather than technical: a previously sociable parent becomes withdrawn, a careful relative starts hiding their screen, or someone who has never been secretive about money begins transferring funds at odd hours.
Common patterns include sudden references to cryptocurrency or offshore trading platforms, urgent requests for gift cards from Chemist Warehouse or Woolworths, and stories of "customs fees" or "emergency medical bills" for someone supposedly overseas. In Australia, the widely reported "Hi Mum" and "Hi Dad" text scam impersonating children has tricked many parents, while romance scams often target widowed or recently divorced adults on Facebook or dating apps. Investment scams, often advertised through polished Facebook pages, frequently promise unusually steady monthly returns that feel safer than a term deposit.
Many fraudulent investment offers arrive through paid Facebook posts that mimic legitimate earning opportunities, and reading about Facebook monetization helps families spot when an offer is dressed up to look like a real platform feature. A practical first step is to write down what you have observed without judgement. Specific dates, phrases, payment methods and platform names create a clearer picture than vague worry, and this record becomes valuable when speaking with the person, their bank or Scamwatch later on.
Approaching a relative you suspect is being defrauded is rarely straightforward. The scammer has usually spent weeks building trust, and any challenge to their story can feel like a personal attack. In Australian families, where respect for elders and personal independence is deeply valued, direct confrontation often backfires and pushes the person deeper into secrecy.
Choose a calm moment, ideally in person and in a familiar setting such as the family kitchen in a Brisbane suburb or a verandah in regional Victoria. Open with care rather than accusation. Phrases such as "I read about a scam that sounds a lot like what you described" or "I want to make sure we are both protected" reduce defensiveness. Bringing a printed example of the scam from the Scamwatch website is more credible than presenting your own suspicion as the only evidence.
If the person dismisses your concerns, do not push for a confession in that moment. Instead, suggest a low-stakes next step, such as reviewing their bank statements together or calling their bank's fraud team "just in case". Many banks now offer a trusted contact register that allows a nominated relative to be alerted to suspicious activity, and the conversation is easier when framed as protecting the family rather than catching them out.
Once a family member is open to taking action, securing their digital environment is a high priority. Fraudsters often retain access through saved passwords, remote-access apps or hijacked social media profiles, so changing the locks quickly limits further damage.
Start with email, banking and any platform where money or identity information has been shared. Update passwords to long, unique phrases stored in a reputable password manager, and turn on multi-factor authentication through an authenticator app rather than SMS where possible. On phones and computers, check for installed remote-access software such as AnyDesk, TeamViewer or Quick Support, which scammers commonly instruct victims to install under the guise of "technical support" or "verification".
In Australia, contact the three credit reporting bodies — Equifax, illion and Experian — to place a ban on new credit applications in the person's name, which helps stop identity thieves from opening loans or buy-now-pay-later accounts. Review recent transactions through internet banking and request a free credit report to reveal activity the family member had not noticed. A quick call to the telco to add a SIM-swap lock is another worthwhile step, as SIM-swap fraud has grown alongside online banking fraud.
Australia's reporting framework is among the most developed in the region, and using it early creates a paper trail that assists with both recovery and prevention. The primary reporting channel for consumers is Scamwatch, run by the Australian Competition and Consumer Commission, where reports help authorities identify emerging scam patterns and issue public warnings.
For matters involving financial loss, identity theft or cybercrime, a report can also be made through ReportCyber, which feeds into the Australian Cyber Security Centre and the Australian Federal Police. If the scam took place on a social media platform, the eSafety Commissioner provides pathways for reporting fraudulent profiles and can sometimes compel platforms to remove harmful content. Where personal identity documents such as a passport or driver's licence have been shared, contacting Services Australia and the relevant state road authority helps limit further misuse.
Independent support is available through IDCARE, a not-for-profit service that works with Australians whose identity or credentials have been compromised. Their counsellors can walk families through containment steps and provide written evidence that banks and government agencies take seriously when disputes arise.
When money has already moved, the bank is usually the first and most important call. The major Australian banks — Commonwealth Bank, NAB, Westpac and ANZ — all operate dedicated fraud teams reachable through a number printed on the back of debit cards or listed on their official websites. Reporting within hours rather than days increases the chance of a recall, particularly for transfers made through OSKO or BPay, which often settle in minutes.
Ask the bank to flag the account for closer monitoring, request a transaction listing for the past 90 days, and confirm whether any new payees or scheduled payments were added without proper verification. If funds were sent overseas, recovery is harder but not impossible; the bank can liaise with the receiving institution and, where appropriate, involve the Australian Financial Crimes Exchange. For scams involving superannuation, contacting the fund directly and ASIC's scam reporting line can prevent early-release requests that would compound the loss.
Families should be aware that holding joint accounts, having signing authority on a parent's account, or being listed as an authorised contact affects what the bank is allowed to discuss. Sorting out these practicalities ahead of an emergency, when everyone is calm, removes friction at the moment it matters most.
The most effective response is the one that keeps a second incident from happening. After the immediate crisis has passed, families can use the experience as a prompt to build habits that make future scams harder to land. Many Australians now hold short monthly "money check-ins" with older relatives, simply reviewing statements together over a cup of tea in the suburbs of Adelaide or during a Sunday phone call from Darwin.
Education works best when tailored. Some scams impersonate banks through SMS; others thrive on Facebook Marketplace or through WhatsApp messages. A useful starting point is to familiarise the family member with the official scam awareness pages of their bank, and to set clear household rules such as never installing software at someone's request, never sharing six-digit codes, and never sending money to someone only met online. For relatives running small side businesses from home, learning about How to set up a WhatsApp Business account for your small enterprise helps them recognise genuine business messaging, which makes fraudulent copy easier to spot.
Combining these habits with a written family agreement about checking any large payment with another relative before sending it adds a practical safety net. Scammers rely on isolation, secrecy and speed. The family's quiet superpower is the opposite: ongoing presence, patient questions and the willingness to be involved in each other's financial decisions.
This week, the most practical step is to help your relative add multi-factor authentication to their email or set up a trusted contact with their bank, treating it as the beginning of an ongoing safety routine rather than a one-off fix.