Scammers Exploit ‘ReportCyber’ to Steal Your Crypto

• Scammers are abusing Australia’s ReportCyber system to impersonate police and steal crypto.
• Criminals use stolen personal info to submit fake reports and build credibility.
• Authorities urge citizens to remain vigilant and verify any police contact.

Australian authorities have issued an urgent warning about a sophisticated scam where fraudsters are exploiting the country’s national ReportCyber system to impersonate Australian Federal Police (AFP) officers and steal cryptocurrency.

The AFP stated Wednesday that criminals are filing false reports through the ReportCyber portal. They use stolen personal information to make the reports appear legitimate before contacting the victims.

The Mechanics: Weaponizing Stolen Data and Official Portals

The AFP’s Joint Policing Cybercrime Coordination Centre (JPC3) uncovered cases where scammers submitted these fraudulent reports using victims’ personal details. They then posed as AFP officers and cited the legitimate report reference number to the victim. This tactic makes the scam highly credible, as ReportCyber allows third-party reporting.

In one incident, a target received a call from someone claiming to be from the AFP, alleging that their identity had been found in a data breach involving cryptocurrency. The scammer provided a legitimate-looking reference number and encouraged the victim to check it on ReportCyber.

Related: Australia Joins the Chorus of Regulators Demanding More From Binance

A follow-up caller, posing as a representative from the victim’s crypto platform, instructed them to transfer their assets to a so-called “Cold Storage” account, a ruse to steal funds. The alert target hung up before sending any money.

AFP Detective Superintendent Marie Andersson warned that the scam offers legitimacy and preys on people’s trust in government systems. The cybercriminals verify personal information in ways that match common expectations, she said.

“We encourage Australians to adopt necessary safety measures online and take a moment to stop their scroll, check for warning signs of scams and protect themselves from cybercrime,” 

Broader Context: AUSTRAC Targets Crypto ATM Scams

Meanwhile, financial intelligence agency AUSTRAC is seeking expanded powers to reduce the misuse of crypto ATMs, which have become major tools for scams and money-laundering. Proposed changes would allow AUSTRAC to restrict or ban entire categories of crypto services, not just individual operators.

According to AUSTRAC, about 85% of high-volume crypto ATM transactions are linked to scams or money-mule activity. The machines process roughly 150,000 transactions annually, worth about $275 million, with users aged 50–70 accounting for 72% of total value.

Despite the exploit, the AFP reassured Australians that ReportCyber remains a “safe and secure tool” for reporting cyber incidents.

However, the agency urged people to be cautious. If contacted about a report they didn’t file, citizens should hang up and call 1300CYBER1 to verify. The AFP stressed that real officers will never ask for access to crypto wallets, seed phrases, or banking credentials.

Related: Australia’s Bold Move: Taxing Bitcoin and Stocks on Unrealized Gains