Scammers Weaponize Australia's Cybercrime Portal in Crypto Heists

Cybercriminals in Australia are exploiting the government's national cybercrime reporting platform, ReportCyber, to impersonate law enforcement and steal cryptocurrency from unsuspecting victims, authorities warned. By submitting fraudulent reports using stolen personal information and then contacting victims with urgent demands for wallet access or transfers, fraudsters are leveraging the legitimacy of official systems to defraud cryptocurrency holders according to AFP. The Australian Federal Police (AFP) and its Joint Policing Cybercrime Coordination Centre (JPC3) have detailed how these scams operate, emphasizing the need for heightened vigilance amid a surge in crypto-related fraud as reported.

The scheme typically begins with criminals obtaining personal data-such as email addresses and phone numbers-through data breaches or other means. They then file fake cybercrime reports via ReportCyber, a platform designed for citizens to report digital crimes.

Using this stolen information, scammers contact victims posing as AFP officers, claiming their details are linked to cryptocurrency-related investigations. A fabricated ReportCyber reference number is provided to create the illusion of authenticity, and victims are pressured to transfer funds to "secure" cold storage wallets according to analysis. In one documented case, a victim received a call from an impersonator who cited a recent arrest tied to a supposed data breach, complete with a reference number matching the scammer's false ReportCyber submission. A follow-up call from a spoofed number mimicking a cryptocurrency platform further reinforced the deception according to reports.

AFP Detective Superintendent Marie Andersson highlighted that these scams thrive on urgency and social engineering. "The scammers verify personal information in ways that match common expectations and act quickly to create a sense of urgency," she said. Legitimate law enforcement officials never request access to cryptocurrency accounts, seed phrases, or banking details, yet the sophistication of these frauds has led to significant financial losses. In the 12 months ending January 2025, Australians lost approximately $3 million to crypto-related scams, including 150 reported incidents involving investment schemes, extortion, and romance ploys according to data.

Authorities have urged the public to terminate suspicious calls immediately and verify any claims through official channels. The AFP confirmed that real officers will never ask for sensitive financial information or demand urgent transfers. Victims are advised to report incidents via ReportCyber or contact the AFP hotline at 1300 CYBER1 (1300 292 371) to aid investigations as the AFP stated.

The warnings come as Australia intensifies regulatory action against crypto fraud. Home Affairs Minister Tony Burke recently announced plans to empower AUSTRAC, the country's anti-money laundering regulator, to restrict high-risk products like crypto ATMs. These machines, linked to money laundering and child exploitation, have seen transactions surge to $275 million annually, with 85% of heavy users falling victim to scams according to reports. Meanwhile, the Australian Securities and Investments Commission (ASIC) reported dismantling 3,015 crypto scam websites over two years, part of 14,000 fraudulent sites removed since 2022 as reported.