Reporting Cyber and Identity Crimes in Australia

<  Back to Fact Sheets
Should I report this to the Police, AFP or ReportCyber?

In Australia, we have state and territory police, the Australian Federal Police, and the Australian Cyber Security Centre which operates ReportCyber.  It can be hard to know where and how to report a cyber or identity crime. This fact sheet provides some basic information on the roles of each of the above, and links to where you can find out more. In all cases, if you believe there is an immediate threat to life or risk of harm, call 000.

State or Territory Police
  • State and territory police take reports for crimes where your identity documents have been physically stolen.
  • When you report the crime, you will receive a report number which may assist you in your response journey, such as applying for the extension of bans or suppressions with the Credit Reporting Agencies.
  • Where the crime has been committed online, they will almost certainly refer you to the online ReportCyber portal.

Australian Federal Police
  • The Australian Federal Police (AFP) may be involved in the investigation of identity or cyber related crimes.  
  • If you believe you have been a victim of an identity crime, the AFP website advises you report this to your local state or territory police.
  • Report online child sexual exploitation directly to the AFP here, or call 000 if the child is in immediate danger.
  • Report all other cybercrimes to ReportCyber.
  • For more information about the role of the AFP and identity crime, click here.
  • For more information about the role of the AFP and cybercrime, click here.

  • ReportCyber is an online cybercrime reporting system operated by the Australian Cyber Security Centre (ACSC).
  • Common cybercrimes you can report include cyber abuse, online image abuse, online shopping fraud, relationship fraud, identity theft with an online component, email compromise, ransomware and malware.
  • Individuals, businesses and government agencies or departments can all use ReportCyber to submit reports.
  • ReportCyber will give you a reference number when you submit your report which can be of use if you believe your identity has been compromised or misused. For example, it may allow the extension of bans or suppressions with the Credit Reporting Agencies.
  • Information you submit to ReportCyber is sent to the appropriate police jurisdiction (state, territory or federal) for assessment.  
  • However, please note that as stated by the ACSC, “By reporting you are not making a formal police statement.  Not all reports are investigated by law enforcement agencies, however your report assists to disrupt cybercrime operations and make Australia the safest place to connect online.”
  • For more information about ReportCyber click here.
  • To submit a report click here.

For additional support or information, contact IDCARE by submitting a Get Help Form or call 1800 595 160 (Aus) or 0800 121 068 (NZ).


Identity Care Australia & New Zealand Ltd (IDCARE) provides identity and cyber security incident response services (the Services) in accordance with the following disclaimer of service:

  • IDCARE is Australia and New Zealand’s national identity and cyber incident community support service. IDCARE is a not-for-profit and registered Australian charity.
  • The Services provided do not constitute legal advice. IDCARE recommends that you consult your own legal counsel in relation to your legal rights and obligations, including but not limited to your legal rights or obligations under Australian and international privacy and data protection laws.
  • While every effort has been made to ensure the accuracy of the content provided, to the maximum extent permitted by law all conditions, terms, representations, and warranties (in each case, whether express or implied) in connection with the provision of the Services which might otherwise be binding upon IDCARE are excluded.
  • IDCARE’S liability for any loss or damage suffered by any person or organisation (including, without limitation, any direct, indirect or consequential loss or damage) arising out of or in connection with the Services (including without limited liability for any negligent act or omission, or statement, representation or misrepresentation of any officers, employees, agents, contractors or consultants of IDCARE) shall be limited to the fees paid by you to IDCARE in respect of the Services. For the avoidance of doubt, this limitation of liability extends to any liability arising from any actions performed or not performed as a result of any recommendations made in the course of providing the Services.
  • If you would like to provide feedback please use our Feedback Form.


IDCARE is here to provide you with specialist support and guidance when faced with a cyber and identity related issue. Contact one of our Identity & Cyber Security Case Managers to learn more about our Support Services and how we can help you.   

Get help

Submit a web request

Call Centre Icon


1800 595 160

Mon - Fri: 8am - 5pm AEST

QLD: 07 3555 5900
ACT & NSW: 02 8999 3356
VIC: 03 7018 2366
NT, SA & WA08 7078 7741

Call Centre Icon

call our NEW ZEALAND

0800 121 068

Mon - Fri: 10am - 7pm NZST

AKL: 09 884 4440