Cybercriminals in Australia are exploiting the government’s official cybercrime reporting system to pose as federal police officers and steal cryptocurrency from unsuspecting victims, authorities warned on Wednesday.
The Australian Federal Police (AFP) revealed that scammers are filing false reports through ReportCyber, a platform designed for citizens to report cybercrimes.
Using stolen personal data, the fraudsters contact victims pretending to be officers from the AFP, claiming their information is linked to crypto-related investigations. The goal is to trick victims into transferring digital assets into fake “secure” wallets.
Scammers Exploit ReportCyber Data to Build Credibility and Pressure Victims
According to AFP Detective Superintendent Marie Andersson, the deception works because criminals use legitimate details from the ReportCyber platform to appear credible.
“They verify personal information in ways that match common expectations and act quickly to create a sense of urgency,” she said.
The AFP-led Joint Policing Cybercrime Coordination Centre found that the system’s design, which allows third parties to file reports on behalf of others, has been manipulated to reinforce these scams.
Once a false report is submitted, scammers call the victim with a fabricated case reference number, making the fraud look official.
In one reported incident, a victim was told their name appeared in a cryptocurrency data breach.
The scammer cited a legitimate-looking reference number and then handed the call to an alleged “crypto platform representative” who urged the victim to move funds into a supposed cold wallet for “safekeeping.”
The victim grew suspicious and ended the call before transferring any money.
Police noted that similar schemes have used spoofed phone numbers mimicking real AFP lines to boost credibility.
“Australians should check for warning signs and protect themselves. Real AFP officers will never request access to crypto accounts, seed phrases, or banking information,” Andersson urged citizens.
Authorities advised that anyone contacted about a ReportCyber submission they did not make should immediately hang up and call 1300 CYBER1.
The AFP emphasized that authentic reports are still crucial for tracking cybercriminals and preventing further scams.