Where to Report Cyber Incidents in Australia (2026)
When a cyber incident hits – whether it's an online scam, identity theft, or harmful content – knowing who to contact first can be overwhelming. Australia has several specialist organisations designed to help. Understanding which one is right for your specific situation is crucial for an effective response and recovery. Let's clarify where Australians should report cyber incidents in 2026.
ReportCyber: The Primary National Reporting Portal
ReportCyber is the Australian Cyber Security Centre's (ACSC) online portal for reporting all types of cybercrime and cyber incidents. It's the central hub for individuals, businesses, and government entities to report incidents ranging from ransomware attacks and data breaches to online fraud and denial-of-service attacks. When you submit a report to ReportCyber, it helps law enforcement agencies, like the Australian Federal Police (AFP), detect and disrupt cybercrime operations across Australia.
While ReportCyber doesn't offer direct incident response or recovery services to individuals, it's a vital first step to get your incident into the national system. It's crucial to report here even if you've contacted your bank or other organisations. They collect intelligence that informs national cyber security efforts and can connect reports to ongoing investigations, potentially leading to arrests and charges.
IDCARE: Support for Identity Theft and Compromise
IDCARE is Australia and New Zealand's national identity and cyber support service. Unlike ReportCyber, which is a reporting mechanism, IDCARE is a free, not-for-profit service that provides direct support, guidance, and case management to individuals and organisations impacted by identity theft, compromise, or scamming. If your personal information has been stolen, misused, or you suspect your identity is at risk, IDCARE is the organisation to contact.
Their team of specialist counsellors can help you understand what's happened, develop a tailored response plan to mitigate harm, and guide you through the process of securing your accounts, recovering your identity, and dealing with financial institutions. They are an invaluable resource for navigating the complex aftermath of identity-related incidents.
Scamwatch: Reporting Scams and Alerts
Scamwatch, run by the Australian Competition and Consumer Commission (ACCC), is the go-to place for reporting scams. This includes phishing emails, investment scams, romance scams, online shopping scams, and any other deceptive practices designed to trick you into giving away money or personal information. By reporting to Scamwatch, you contribute to their intelligence gathering on current scam trends and help them issue public warnings.
While Scamwatch primarily focuses on collecting data and issuing alerts, they do not provide individual recovery assistance for stolen funds or personal information. However, their website offers extensive information on how to recognise, avoid, and report different types of scams. If you've lost money, you'll still need to contact your bank and ReportCyber, but your Scamwatch report is helpful for the broader fight against scammers.
eSafety Commissioner: Protecting Your Online Safety
The eSafety Commissioner is Australia's independent regulator for online safety. Their role is to help Australians have safer online experiences, particularly focusing on cyberbullying, image-based abuse (non-consensual sharing of intimate images), illegal and harmful online content, and online child sexual exploitation material. If you or someone you know is experiencing serious online harm, the eSafety Commissioner is the place to turn.
They have powers to investigate complaints and order the removal of harmful content from social media platforms and websites. They also provide resources and educational materials to promote online safety. If you're a victim of cyberbullying or your private images have been shared without consent, eSafety can offer direct assistance and intervention.
When to Call KNOMI First
Navigating these various reporting avenues can be daunting, especially when you're already stressed by a cyber incident. This is precisely when KNOMI comes in. "When something goes wrong online, KNOMI is who you call." Think of us as your first responder, helping you assess the situation, understand the immediate steps to take, and connect you with the right specialist agency.
Instead of trying to figure out which government body fits your specific incident, you can call KNOMI. We'll provide calm, expert guidance, ensuring you report to the correct organisations like ReportCyber or Scamwatch, and help you initiate recovery with services like IDCARE. From data breaches to scams, we streamline the incident response process for Australian families, removing the confusion and stress. Getting expert advice quickly can significantly reduce the impact of a cyber incident, and that's precisely what KNOMI provides.
Frequently asked questions
Do I need to report to all these organisations?
No, you don't typically need to report to all of them. The specific organisations you contact will depend on the nature of your cyber incident. KNOMI can help you determine the correct reporting channels.
What's the difference between ReportCyber and IDCARE?
ReportCyber is for reporting cybercrime to national authorities for intelligence and law enforcement. IDCARE is a support service that provides direct assistance and guidance to individuals experiencing identity theft or compromise.
If I've been scammed, who should I contact first?
If you've suffered a financial loss, first contact your bank. Then, report the scam to Scamwatch to contribute to intelligence, and to ReportCyber if it involves cybercrime. For personal support and recovery, contact IDCARE.
Can the eSafety Commissioner help with all online harassment?
The eSafety Commissioner assists with serious online harm, including cyberbullying, image-based abuse, and illegal content. They have powers to investigate and order content removal in specific circumstances.