I've Been Scammed Online – What Should I Do in the First 60 Minutes?
If you've just realised you've been scammed online, breathe. The first 60 minutes are not about catching the scammer — they're about stopping the loss, locking down accounts, and capturing the truth before it disappears. KNOMI is the Australian service families call when something goes wrong online, and this is the exact triage we walk people through every day.
Minutes 0–10: Stop the money moving
If you've paid money or shared bank details, call your bank's fraud line straight away — every major Australian bank publishes a 24/7 number on the back of your card. Ask them to freeze the account, recall the transaction, and place a block on the receiving account. The faster you call, the more often money can be recovered before it's withdrawn or moved offshore.
If the scam involved cryptocurrency, contact the exchange immediately and report the destination wallet. Some exchanges can flag funds even after they've moved.
Minutes 10–30: Lock down accounts
Scammers reuse what they learn. Assume any password, code or document you shared is now in the wrong hands. Change passwords for email, banking, MyGov, and social accounts — starting with email, because email controls everything else.
Turn on multi-factor authentication everywhere it's offered. If you can't get into an account, use the official recovery flow — never click links in messages claiming to help.
Lock down in this order
- Primary email account
- Banking and superannuation
- MyGov and the ATO
- Apple ID / Google account
- Social media (Facebook, Instagram, TikTok)
Minutes 30–60: Capture evidence and report
Before you delete anything, capture it. Screenshot messages, transaction records, profile pages, and email headers. Write down what happened in your own words while it's fresh. KNOMI Cyber specialists build evidence packs that are accepted by police, eSafety and your bank — the rules around timestamps, hashes and chain-of-custody matter.
Report the scam to Scamwatch (scamwatch.gov.au) and ReportCyber (cyber.gov.au). If the scam involved threats, intimate images, or a minor, contact eSafety. If you're not sure what to do next, that's exactly when KNOMI helps.
Frequently asked questions
Can I get my money back after a scam in Australia?
Sometimes — speed matters. Banks can occasionally recall funds if you call within minutes. The ePayments Code and the new scams framework also give some protections. KNOMI Cyber helps you document the incident in a way that strengthens any claim.
Should I confront the scammer?
No. Don't reply, don't pay 'recovery fees', and don't try to trick them back. Engagement gives them more information and time. Preserve the evidence and report instead.
When should I call KNOMI?
Any time you're unsure. KNOMI is Australia's cyber first-responder for families and individuals — we triage the incident, guide the next steps, and prepare evidence for police, eSafety or your bank.