Few messages sting quite like a screenshot from a friend showing a parcel that never arrived, a tracking number that does not exist, or a "customer service" chat where the agent keeps asking for gift cards. Online shopping fraud has crept into every corner of the internet, and even careful Australians are caught off guard by stores that look polished, run flash sales, and disappear overnight. The hardest part is rarely spotting the trap yourself; it is finding the right words when someone you care about has already handed over their details, card number, or a direct deposit to a fraudulent seller.
The trick is to move from alarm to action without lecturing. People who have been duped often feel shame, and shame makes them defensive, secretive, or eager to explain the warning signs away. Your role is closer to a steady first-aid responder than a detective: stabilise the situation, gather information, point them toward the right Australian reporting channels, and walk with them through the next steps.
Australia has solid consumer protections and a dedicated reporting pathway through Scamwatch, run by the Australian Competition and Consumer Commission, as well as state police and the big four banks' fraud teams. Knowing these routes in advance means you can guide a panicked friend toward a real outcome instead of venting frustration on social media.
Most fraudulent online shops rely on the same handful of tricks: deep discounts on heavily branded items, cloned logos, fake reviews copied from legitimate sellers, and a checkout page that quietly skips security badges. Tell your friend to look for an Australian Business Number on the footer, a real ABN entry on the official register, and a physical address that matches Google Street View. A "support" email at gmail or outlook, a domain registered only weeks earlier, and a payment page that asks only for direct bank transfer are almost always warning lights.
Pressure tactics are another giveaway. Countdown timers that reset every visit, "only 3 left in stock" warnings that never change, and aggressive pop-ups pushing crypto or gift card payments are designed to short-circuit careful thinking. If a Melbourne-based friend is suddenly buying a designer handbag at a fraction of the retail price from a site registered two months ago in another country, the math should not need a calculator.
It is also worth checking the website's transparency. Australian Consumer Law requires clear identification of the seller, total costs including postage, and a functioning returns policy. Genuine Australian stores almost always list a phone number that connects to a human, a clear physical address, and Australian dollar pricing that does not magically appear after a redirect to a foreign server.
Timing matters. Bringing it up while your friend is mid-purchase, mid-argument with a chatbot, or visibly excited about a delivery is the fastest way to lose them. Wait until the conversation has slowed down, ideally over a coffee in Parramatta or a walk around your local park, and lead with concern rather than blame. A line like "Hey, I saw something today and wondered if you'd heard about this kind of scam" works far better than "You've been scammed."
Share your own mistakes first. Almost everyone has clicked on a too-good-to-be-true listing, replied to a phishing text, or ordered something dodgy in the past. Telling a story about the time you almost wired money to a fake marketplace seller, or the Sydney-based friend who lost a few hundred dollars to a counterfeit electronics site, makes your current concern feel like solidarity instead of scolding. Scammers thrive on isolation, so your job is to undo that by staying close.
Ask, do not assume. Questions like "Where did you first hear about the store?" and "How are they asking you to pay?" open the door to your friend filling in the picture themselves. The moment they realise the seller only takes cryptocurrency, or the ABN does not match the registered trading name, the scam often collapses under its own weight.
Once your friend is willing to look closely, the next step is preserving evidence while it is still fresh. Screenshots are the bare minimum: capture the website, the product listing, the order confirmation, every email and chat log, and the payment confirmation from the banking app. On phones, scrolling screenshots also capture timestamps and metadata that legal teams love. Printouts work too, but digital files travel faster when the time comes to file a report.
Bank statements are equally important. Pull the last 90 days of transactions, highlight the suspicious payment, and note whether the merchant name on the statement matches the trading name of the store. Mismatched descriptors like a luxury watch purchase labelled as "GLOBAL RETAIL PTY" or "DIGITAL GOODS 888" are typical of laundering through third-party processors and are extremely useful to the fraud team.
Save the URLs, the domain registration details, and any social media profiles of the seller. Tools like the Wayback Machine can show whether the site looked different two months ago, and a simple whois lookup reveals when the domain was created. Australian cyber crime investigators lean heavily on this kind of paperwork because it lets them link one fake shop to a wider network of fraudulent sites.
Australia offers several reporting pathways, and using more than one strengthens the case. The first stop is Scamwatch, where reports feed directly into the Australian Competition and Consumer Commission's intelligence database. The form is short, the confirmation email is immediate, and your friend's report joins thousands of others, sometimes identifying patterns across multiple victims of the same fake store.
For losses over a certain threshold, or where identity documents were shared, report to ReportCyber through the Australian Cyber Security Centre. That report is forwarded to the relevant state or territory police, and an official reference number can be requested for insurance, tax, or compensation claims. Local police stations, especially in busy jurisdictions like Brisbane's CBD or Perth's central business district, also accept walk-in reports and can advise whether further action is feasible.
The bank or card provider is the next urgent call. Most Australian financial institutions have a dedicated 24-hour fraud hotline, and they can place holds, freeze accounts, and reverse payments if reported within the right window. Encourage your friend to call rather than email, since phone calls are recorded and the conversation is treated as a formal dispute. If a buy-now-pay-later product such as Afterpay was used, the lender's fraud team should be contacted as well.
Time is the enemy here. If your friend paid by credit card, a chargeback request under the card scheme's rules can sometimes retrieve the money, especially if the merchant disappears or refuses to deliver. Debit card transactions are harder to reverse, and direct bank transfers are usually gone within minutes. Keeping a polite but persistent tone with the bank's dispute team, supplying the screenshots collected earlier, and following up in writing every few days tends to push the file forward faster than a single angry call.
After the financial bleeding is slowed, lock down every account touched by the scam. Change passwords, enable two-factor authentication through an authenticator app rather than SMS, and review the login activity on email, banking, and shopping accounts. If personal documents such as a driver's licence, Medicare number, or passport scan were shared, contact Services Australia and IDCare, the Australian identity and cyber support service, to set up protective monitoring. A free credit report ban through Equifax, Illion, or Experian can also stop anyone opening new loans in your friend's name.
This is also the moment to think about rebuilding finances. Scam losses can leave a real dent, especially when money had been earmarked for rent in Sydney or a planned trip. If short-term cash flow is tight, comparing loan offers from at least three lenders makes a real difference to the total cost of borrowing, and a practical walkthrough is worth the time. The aim is not to take on more debt but to make sure any borrowing your friend does need is on the fairest terms possible.
Once the dust settles, the best gift you can give your friend is a small set of habits that prevent the same trap from snapping shut again. Stick to Australian retailers with verifiable ABNs, or large international platforms with strong buyer protection policies. When in doubt, search the store name plus the word "scam" before paying, and check the comments on forums, Reddit threads, or product review sites that are harder to fake than on-site testimonials.
Encourage a simple payment rule. Credit cards and PayPal offer stronger dispute pathways than bank transfers, gift cards, or cryptocurrency. Setting a personal limit for first-time purchases from a new store, say fifty dollars, gives room to test a seller without exposing the family budget. For parcels, Australian services like Australia Post's tracking and the new wave of parcel lockers in suburbs from Adelaide to Hobart provide a paper trail that is easy to verify.
Finally, keep the conversation going. Share scam alerts from Scamwatch, retweet posts about new fake stores targeting Australian shoppers, and check in regularly with your friend without making every chat about the original mistake. A scam is rarely a sign of stupidity; it is a sign that the bad guys got lucky once.
With clear evidence, the right Australian reporting channels, and a handful of safer habits, the second time around almost never happens. What your friend should remember from this whole ordeal is simple: report fast, lock accounts tight, compare any future borrowing carefully, and lean on the people around them, not the people behind the screen.