Australians are being urged to slow their scroll and stop before they click on suspicious links, as data reveals unsafe online habits continue to give cybercriminals the upper hand.
In a national response, the AFP-led Joint Policing Cybercrime Coordination Centre (JPC3) has launched ClickFit, an awareness campaign designed to help Australians recognise the warning signs of cybercrime.
It comes as new findings show too many Australians are not adopting necessary safety measures online and too few are reporting incidents to police when targeted by cybercriminals.
Reporting rates in 2024 ranged from 8 per cent for malware to 22 per cent for fraud and scams. According to the Australian Institute of Criminology's Cybercrime in Australia 2024 report, many victims believed their experience was not serious enough to report or that nothing could be done.
Every cybercrime report - no matter how small - can help police track criminals, shut down their networks, assist in building intelligence on emerging cyber threats, and prevent other people from being targeted.
Supported by every state and territory police force, ClickFit encourages people to take a moment to stop their scroll, check for warning signs of scams and protect themselves from cybercrime.
AFP Acting Commander of Cybercrime Operations Marie Andersson said the message for digital consumers was clear - the online world was incredible, but it was important to develop cyber tools and skills to navigate it confidently and safely.
"Research shows our online habits directly impact our risk profile and many Australians overlook simple steps to stay secure online, which can prevent their victimisation," Acting Commander Andersson said.
"Just like drivers learn to spot hazards on the road, we want online users to learn to recognise the warning signs of cybercrime.
"After all, the more we drive, the better we get at navigating blind spots and reacting safely to avoid an accident. Online safety works the same way. The more aware we are of checking our digital blind spots - suspicious text messages, shady email attachments or fake investment ads - the better we are at steering clear of cyber threats."
The JPC3 brings together Australian law enforcement and key industry and international partners to fight cybercrime and prevent harm and financial loss to the Australian community.
In a recent case investigated by Tasmania Police, a man lost more than $400,000 to a sophisticated cryptocurrency investment scam - despite advice from his bank and police. Acting Commander Andersson said this demonstrated just how convincing and persistent scammers could be.
In another case, a mother reported to South Australia Police that she booked a family holiday for four through an online advertisement that appeared reputable, even checking the business had an ABN. However, after paying thousands of dollars for flights and accommodation, she arrived at her destination only to discover the hotel did not exist.
Despite Australians rating their tech knowledge highly, many are yet to use basic protections such as strong passphrases, multi-factor authentication and regular software updates (AIC Cybercrime in Australia 2024 Report) - a critical gap ClickFit aims to close.
Acting Commander Andersson said criminals often exploited unsafe online habits to commit cybercrime, but simple changes could help Australians break the cycle.
"Changing our online habits is just as important as locking your car door after getting out," Acting Commander Andersson said.
"ClickFit isn't about making people feel fearful or anxious about being online, it's about empowering them to take small, simple steps to dramatically reduce their risk of being impacted by cybercrime.
"By building safe habits into our everyday digital routine, such as using strong and unique passphrases, setting up multi-factor authentication and keeping software up to date, we can make it harder for cybercriminals to succeed and easier for people to navigate safely online."
ClickFit will run across 12 months and focus on four key types of cybercrime: business email compromise, romance scams, investments scams and impersonation scams.
It is built around two heroes - NetCop Gary and Agent Index - whose mission is to help Australians become ClickFit. Meet them here.
Running until December 2026, ClickFit will highlight key threats including romance scams, investment scams, impersonation scams and business email compromise scams.
Visit the campaign website for factsheets, digital resources, and take the interactive 'Are You Fit to Click?' quiz.
What Makes You ClickFit?
ClickFit offers six simple steps everyone can introduce to their digital routines to help protect them from cybercrime and keep them safe online:
1. Create strong passphrases - Long, unique passphrases for every account.
2. Enable Multi-Factor Authentication - Adds an extra lock even if your password is stolen.
3. Install software updates - Keeps your devices and apps secure.
4. Be alert to scams - Stay up to date with emerging threats.
5. Stop and think before you click - Don't rush as cybercriminals rely on urgency and distraction.
6. Verify the source - Check directly with the legitimate organisation/trusted source before clicking a link, calling a number, or paying an account
If you are a victim of cybercrime, report it to police using ReportCyber.
If there is an immediate threat to life or risk of harm, call 000.
Being a victim of cybercrime can have devasting impacts. If you, or someone you know needs help, we encourage you to contact Lifeline on 13 11 14 or Beyondblue on 1300 224 636, who provide 24/7 support services.
Scam case studies and quotes
Victoria Police Crime Command Acting Commander Jason Kelly said everyone should be hypervigilant when it comes to their online activities.
"Opportunistic scams like these end up hitting everyday Victorians where it really hurts, but there are many steps you can take to stay secure online, including using strong passphrases, multi-factor authentication and regularly updating your software," Acting Commander Kelly said.
"Never click on suspicious links and be wary of scam websites. Always check that the website is secure - all official websites will use 'https' to ensure an encrypted connection between the retailer and the customer. If you're unsure, type the full company URL into the address bar yourself.
"If something looks too good to be true, it probably is. Slow down and consider the legitimacy of something that looks too remarkable or even slightly unusual.
"If you think you've fallen victim to a scam, contact your bank immediately and they may be able to stop a transaction or cancel your card. You can also utilise services such as IDCARE who support people dealing with scams, identity theft or cyber threats.
"I want to assure the community that Victoria Police is committed to investigating these matters and holding offenders to account. We encourage anyone who has been subject to an online scam to speak to police."
Romance scam - SAPOL
Romance scammers are highly manipulative and sophisticated in building trust with victims, spending weeks to months forming false connections, interests and storylines, before exploiting their trust for financial gain.
Six months ago, a woman met someone she believed was the love of her life on an online dating platform. She shared a lot in common with her newfound love, with plans for this partner to fly from the US to Adelaide and buy a house together. However, her new partner fell ill, and unable to pay for their hospital bills, asked if the woman would help. She sent $5000 to cover the initial hospital bill, but her partner soon required surgery and needed additional money. After $20,000 was sent, her partner was better, but they began having issues with their visa and asked the woman to send through money to help. She sent through another $5000 to get this partner to Perth, but once there they fell ill again, requiring more money for surgery. The woman was about to send more money, but her daughter was able to stop her, convincing her mother she was being scammed.
Investment scam - SAPOL
A man came across an investment opportunity on social media, backed by a famous entrepreneur. The man visited the website and watched an interview where the celebrity explained the stock trading platform, stating it was 'the next big thing' with an opportunity to get rich. The man followed the link at the end of the video, which lead to a call from a receptionist at the "investment platform", and invested $25,000. Two weeks later, after being shown the profits he had already earned, the man transferred a further $10,000. It wasn't until he tried to withdraw his money - and the multiple and increasing 'transaction fees' that he realised scammers had stolen his $35,000.
Assistance scam - SAPOL
Assistance scam - NSWPF
While playing a PC game, the screen froze and displayed a pop-up instructing the victim to contact a Microsoft support team via a provided number. The victim called and spoke to a man, and was contacted by several other 'support staff' over the following days who claimed to be working on the issue. The scammers remotely accessed his computer, advised him not to use the internet, and he observed unusual activity, including a black screen and a moving cursor. They then asked him to provide his bank cards to pay for a 'protective layer' and arranged for a 'courier' to collect his cards. The man realised he had been scammed when the 'support staff' became uncontactable. He contacted his bank and froze his accounts. However, by this stage the scammers had already stolen about $150,000.
Risk Warning: Cryptocurrency is a unregulated virtual notoriously volatile instrument with a high level of risk. Any news, opinions, research, data, or other information contained within this website is provided for news reporting purposes as general market commentary and does not constitute investment or trading advice.
