Last Updated on August 14, 2025 by Arnav Sharma
Last week, my neighbor got a text claiming her “package couldn’t be delivered” with a link to “reschedule.” She almost clicked it. Sound familiar? We’re all walking targets these days.
As Aussies lean harder into digital life, cybercriminals are having a field day. But here’s the thing: knowing where to report these incidents can make a real difference. Not just for you, but for everyone.
What Exactly Counts as Cybercrime?
Think of cybercrime as any criminal activity that uses computers or the internet as its weapon. It’s not just the Hollywood hacker stereotype anymore.
Common types you might encounter:
- Hacking – Someone breaks into systems to steal data
- E-commerce fraud – Using stolen credit cards for online purchases
- DDoS attacks – Flooding websites with traffic until they crash
- Phishing – Those fake emails trying to steal your login details
- Ransomware – Locking up your files until you pay up
The consequences hit hard. I’ve seen small businesses lose months of work, families drain savings accounts, and people’s reputations get trashed online. The emotional toll? Often worse than the financial damage.
Where to Report: Your Options
Australian Cyber Security Centre (ACSC)
This is your first port of call. Think of ACSC as Australia’s cyber emergency room. They run a 24/7 hotline and actually know what they’re doing.
Contact options:
- Phone: 1300 CYBER1 (1300 292 371)
- Online: Fill out their incident report form
Police and Law Enforcement
Don’t forget the basics. Cybercrime is still crime. If someone’s in immediate danger, call 000. Otherwise, contact your local police or the Australian Federal Police at 131 AFP.
Specialized Agencies
Different crimes, different experts:
- Financial scams: ASIC or ACCC
- Online harassment: Office of the eSafety Commissioner
ReportCyber: The Digital Way
The government built ReportCyber as a one-stop shop for reporting cyber incidents. It’s basically a secure online form that feeds directly into ACSC’s systems.
How it works:
- Visit cyber.gov.au/acsc/report
- Fill out the step-by-step form
- Get a reference number to track your report
Simple as that.
What Information Should You Gather?
When reporting, more details help investigators piece together the puzzle. Collect:
- When it happened – Date and time stamps matter
- What type of attack – Phishing email? Suspicious website?
- Screenshots – Visual evidence speaks volumes
- Any technical logs – If you have them
- Victim details – Even if it’s not you personally
Quick Response Options
Sometimes you need immediate action before filing official reports:
- Financial compromise? Call your bank first. They can freeze accounts and stop transactions.
- Suspicious emails? Contact your internet provider. They can block malicious senders.
- Workplace incident? Loop in your IT department immediately. They’ll know how to contain the damage.
What Happens Next?
Once you’ve reported, investigators get to work. The timeline varies wildly depending on the complexity. Your report might help bust a larger operation, even if your individual case seems small.
Need support? The National Identity and Cyber Support Service (NICSS) offers free help for victims dealing with the aftermath.
Staying Safe Moving Forward
Here’s what actually works:
- Strong, unique passwords for everything
- Keep software updated – those patches fix security holes
- Question suspicious emails – When in doubt, don’t click
- Limit personal info online – Oversharing makes you a target
- Use decent antivirus – Basic protection goes a long way
The Bottom Line
Every report matters. Seriously. That “small” scam you encountered might be part of a massive operation targeting thousands of people. Your report could be the missing piece investigators need.
Don’t hesitate. If something feels off, report it. We’re all in this together, and the more we share information, the harder we make life for cybercriminals.
Stay safe out there.
I help organisations secure their cloud infrastructure and stay ahead of evolving cyber threats. Microsoft MVP and Certified Trainer, author of Mastering Azure Security, and founder of arnav.au — a platform for practical Cloud, Cybersecurity, DevOps and AI content.
Frequently Asked Questions
Your first port of call should be the Australian Cyber Security Centre (ACSC), which operates a 24/7 hotline at 1300 CYBER1 (1300 292 371). You can also fill out their incident report form online. If someone is in immediate danger, call 000, but for most cybercrime incidents, ACSC is the best starting point as they specialize in cyber emergencies.
You should report online harassment and related incidents to the Office of the eSafety Commissioner. This agency specializes in handling cybercrime cases involving harassment and abuse online, making them the appropriate expert for these specific types of offenses.
Gather the date and time stamps of when it happened, identify the type of attack (phishing, suspicious website, etc.), take screenshots as visual evidence, collect any technical logs if available, and document victim details even if it's not you personally. The more details you provide, the better investigators can piece together the puzzle and pursue the case.
Visit cyber.gov.au/acsc/report and fill out the step-by-step online form provided. After submission, you'll receive a reference number that allows you to track your report. ReportCyber is a secure government platform designed as a one-stop shop that feeds directly into ACSC's systems.
Call your bank immediately before filing official reports. They can freeze your accounts and stop fraudulent transactions quickly. After contacting your bank, you can then proceed with reporting the incident to ACSC or other relevant authorities to help investigate the broader crime.