Scam calls, texts and emails are a real and growing concern for Victorians over 60, but reporting them is straightforward and support is available. This guide walks you through the official channels — Scamwatch, ReportCyber, your bank, and IDCARE — and explains the golden rules that keep your accounts and identity safer. Being targeted is not a reflection of intelligence or experience; it happens to careful, well-travelled people every day.
Anyone Can Be Targeted — and That Is the Point
Scammers are professionals. They work in shifts, use scripts refined over thousands of calls, and deliberately target people who are organised, financially settled, and accustomed to dealing with institutions — qualities that describe many Victorians over 60 very well. Being approached by a scammer says nothing about a person's intelligence or life experience. It says everything about the scammer's business model.
The most important thing to understand is that shame has no place in this conversation. Reporting a scam — even one that caught you out — is an act of community service. Every report adds to the intelligence picture that Scamwatch, the Australian Federal Police, and the major banks use to disrupt these operations. A report filed from a kitchen table in Melbourne's west or a spare room in regional Victoria genuinely matters.
This guide is written for people who want to act: report what happened, secure their accounts, and move forward. It covers the four main things to do — contact Scamwatch, contact ReportCyber if a crime has occurred, call your bank immediately, and reach IDCARE if personal details were shared. Each step is free, and none of them requires a solicitor or financial adviser to get started.
What Scams Are Targeting Over-60s Right Now?
Remote access scams are among the most damaging. A caller — often claiming to be from Telstra, the NBN Co, Microsoft, or a bank's fraud team — tells you that your computer or account has been compromised and asks you to download a program so they can 'fix' it. That program gives them control of your screen, and often your banking app, in real time. No legitimate tech company or government agency will ever call you unsolicited and ask to access your device.
Impersonation scams use familiar names to create urgency: the Australian Taxation Office calling about an unpaid debt, Medicare warning that your card has been used fraudulently, or the Australian Federal Police saying a warrant has been issued. These calls can feel very convincing because the caller knows your name and sometimes your address. The rule is simple: hang up, find the organisation's official number yourself (from their website or a bill), and call back independently.
Romance scams deserve particular mention because they tend to unfold slowly over weeks or months, often starting on legitimate social platforms or dating apps. The person on the other end builds genuine rapport — they may feel like a companion during quieter periods of life — before a financial crisis emerges and a request for money follows. If someone you have never met in person is asking you to transfer funds, gift cards, or cryptocurrency, that is the signal to stop and speak with someone you trust, or call IDCARE.
How to Report to Scamwatch
Scamwatch is run by the Australian Competition and Consumer Commission (ACCC) and is the main national database for scam reports. You do not need to have lost money to report — an attempted scam, a suspicious text, or a call you hung up on are all worth lodging. Head to scamwatch.gov.au and use the 'Report a scam' form. You will be asked to choose a scam category, describe what happened, and note any contact details the scammer used. The whole process takes around ten minutes.
You can report on behalf of someone else, which is useful if an older family member is uncomfortable using online forms. Scamwatch also publishes a regularly updated list of current scam types circulating in Australia — worth checking if you received something odd and want to know whether others are seeing the same thing. The site is accessible and written in plain English.
Scamwatch does not investigate individual cases or recover money directly, but it uses aggregated reports to issue public warnings, brief government agencies, and support law enforcement. When enough people report the same phone number or email domain, action becomes possible. Your report is not a formality — it is data.
When to Use ReportCyber
ReportCyber, found at cyber.gov.au, is the reporting portal managed by the Australian Signals Directorate and the Australian Federal Police. It is the right place to go when an actual cybercrime has occurred — for example, if your email or social media account was accessed without your permission, if someone used your identity to open accounts, if you transferred money under false pretences, or if your device was compromised by malware.
The form asks for details about what happened, when, and what losses occurred. You may receive a reference number, and in serious cases, particularly those involving significant financial loss, a police officer may follow up. For incidents that are clearly criminal in nature, you can also contact your local Victoria Police station in addition to filing with ReportCyber.
If you are unsure whether to use Scamwatch or ReportCyber, the practical answer is: use both. They serve different purposes — Scamwatch builds the intelligence picture across the country, while ReportCyber handles the criminal investigation pathway. Filing with both takes less than half an hour and covers all bases.
What Your Bank Must Do — and What to Ask For
If you have transferred money to a scammer, or believe a scammer has access to your banking credentials, call your bank's fraud line immediately — the number is on the back of your card or on the bank's official website. Ask them to freeze the account, reverse any transactions where possible, and flag your profile for additional monitoring. Acting within the first few hours gives the bank the best chance of recalling a payment before it settles.
Under the Scam-Safe Accord — a voluntary but significant commitment made by Australia's major banks and signed with the Australian Banking Association — member banks have agreed to a range of protections including name-checking technology for new payees, better scam detection, and clearer processes for customers who report losses. The accord does not guarantee reimbursement in every case, but it does mean banks are expected to take scam reports seriously and investigate them properly. You can read the accord's public commitments at ausbanking.org.au/scam-safe-accord.
Ask your bank what its scam reimbursement policy is — policies are evolving and vary between institutions, so it is worth asking directly and getting the answer in writing. If you feel your bank has not handled your report fairly, the Australian Financial Complaints Authority (AFCA) at afca.org.au is the independent body that handles disputes between consumers and financial firms, at no cost to you.
IDCARE: If Your Personal Information Was Shared
IDCARE is Australia and New Zealand's national identity and cyber support service, and it is free. If you gave a scammer your date of birth, Medicare number, passport details, tax file number, driver's licence, or banking login credentials — even if you are not sure what they did with the information — IDCARE is the place to start. Their specialist case managers help you understand the risk, put a response plan in place, and contact the relevant agencies on your behalf.
You can reach IDCARE by calling 1800 595 160 (Monday to Friday, business hours) or by submitting an online request through their website at idcare.org. They also publish clear, practical guides on their site for specific types of identity compromise — useful reading even before you speak to a case manager.
One thing IDCARE can help with is placing a credit ban or flag on your file with Australia's credit reporting bodies, which makes it harder for someone using your identity to open new accounts in your name. This is a precautionary step and does not affect your existing credit — it simply adds a layer of verification before new credit is issued. IDCARE walks you through how to do this.
The Golden Rules — Simple, Memorable, Effective
Pause before you act. Scammers manufacture urgency — a debt that must be paid today, a warrant that will be executed this afternoon, an account that will be closed within the hour. Legitimate government agencies and banks do not operate this way. If a call, text, or email is demanding immediate action and threatening consequences, that pressure itself is the warning sign. Hang up, close the message, and verify through an official channel you find yourself.
Never share one-time passwords, PINs, or banking login details with anyone who contacts you, regardless of who they say they are. Your bank, the ATO, Services Australia, and Medicare will never ask for these over the phone or by text. If someone claiming to represent these organisations asks for them, the call is not legitimate. The same applies to requests for gift cards — no government agency or utility company accepts payment in gift cards.
Keep a short list near your phone: Scamwatch (scamwatch.gov.au), ReportCyber (cyber.gov.au), your bank's fraud line number, and IDCARE (1800 595 160). If something feels wrong, that list is your first move. Talking to a trusted friend or family member before acting on any unsolicited contact is always a reasonable choice, and never a sign of weakness.
Key takeaways
- Report scam calls and texts to Scamwatch at scamwatch.gov.au — you do not need to have lost money to file a report.
- Use ReportCyber at cyber.gov.au when an actual cybercrime has occurred, such as unauthorised account access or money transferred under deception.
- Call your bank's fraud line immediately if you have shared banking details or transferred money — timing is critical for any chance of recovery.
- IDCARE (1800 595 160) is a free national service for anyone who has shared personal identity documents or credentials with a scammer.
- The Scam-Safe Accord commits major Australian banks to stronger scam detection and clearer processes — ask your bank directly what its reimbursement policy is.
- Legitimate government agencies and banks will never call you and demand immediate payment or ask for your one-time password or PIN.
Recommended partners and links
Indicative prices only — always confirm with the operator before booking.
Frequently asked questions
How do I report a suspicious phone call, text message, or online scam to protect my bank account?
Report the incident to Scamwatch at scamwatch.gov.au using their online form — this takes around ten minutes and is free. If a financial crime has occurred (money transferred, accounts accessed), also file a report with ReportCyber at cyber.gov.au. Call your bank's fraud line immediately using the number on the back of your card or on the bank's official website — ask them to freeze affected accounts and reverse any transactions where possible. If you shared personal identity details such as your Medicare number, passport, or tax file number, contact IDCARE on 1800 595 160 for free specialist support.
What is the Scam-Safe Accord and does it mean my bank will refund me if I am scammed?
The Scam-Safe Accord is a voluntary commitment by Australia's major banks, signed with the Australian Banking Association, to introduce stronger scam prevention measures including name-checking technology for new payees and clearer processes for customers who report losses. It does not guarantee reimbursement in every case — outcomes depend on the circumstances and the individual bank's policy. Ask your bank directly what its scam reimbursement policy is, and if you are unhappy with how your case is handled, lodge a complaint with the Australian Financial Complaints Authority (AFCA) at afca.org.au at no cost.
What should I do if I think a scammer has my personal information like my Medicare or passport number?
Contact IDCARE as soon as possible — call 1800 595 160 (Monday to Friday, business hours) or submit a request at idcare.org. IDCARE case managers are specialists in identity recovery and will help you assess the risk, contact relevant agencies, and put protective measures in place, including guidance on placing a credit flag to prevent new accounts being opened in your name. The service is free for Australians.
How do I know if a call from the ATO, Medicare, or the police is real or a scam?
Hang up and verify independently. Find the official phone number for the organisation from their government website (ato.gov.au, servicesaustralia.gov.au, or police.vic.gov.au) and call them back yourself. Do not use any number the caller gave you. Legitimate government agencies will not demand immediate payment, threaten arrest, or ask for payment via gift cards or cryptocurrency. If the original call was genuine, the organisation will have a record of it when you call back through official channels.
Are romance scams common among people over 60, and what are the warning signs?
Yes, Scamwatch data consistently shows that romance scams affect people across all ages, and the financial losses for older Australians tend to be higher per incident. Warning signs include someone you have only met online who builds a close relationship quickly, avoids video calls or in-person meetings, has a dramatic life story involving working overseas, and eventually asks for money to resolve a crisis. If someone you have not met in person asks you to transfer money, send gift cards, or invest in something they recommend, stop contact and speak with IDCARE or a trusted person before doing anything.
Got a tip, a price update or a story from this route? The community would love to hear it.
Share your views on our Facebook page— Seniors and Solo Traveller Stories
- Scamwatch – Report a Scam (ACCC)
- ReportCyber – Australian Signals Directorate
- IDCARE – National Identity & Cyber Support Service
- Scam-Safe Accord – Australian Banking Association
- Australian Financial Complaints Authority (AFCA)
- Services Australia – Scams and fraud
- Australian Taxation Office – Verify or report a scam
