All articles Incident Response

Who To Contact After A Cyber Incident

5 min read

After a cyber incident, the question Australians ask first is usually: 'Who do I even call?' The answer depends on what happened — but there's a small, consistent map of contacts that covers most incidents. KNOMI Cyber uses this map every day.

Money or banking involved

Call your bank's 24/7 fraud line first. Then report to Scamwatch (scamwatch.gov.au) and ReportCyber (cyber.gov.au). If a large amount has been transferred, also notify the AFP via ReportCyber — they coordinate cybercrime intake nationally.

Identity, intimate images or harassment

For identity theft, contact IDCARE — Australia's free national identity support service — and place a credit ban with Equifax, illion and Experian. For intimate-image abuse, contact eSafety; their image-based abuse scheme can issue removal notices. For threats or stalking, contact your state police.

KNOMI's contact map

  • Bank fraud line — for any financial incident
  • Scamwatch + ReportCyber — for all scams
  • IDCARE — for identity issues
  • eSafety — for image abuse, cyberbullying
  • State police — for threats, stalking, urgent danger
  • KNOMI Cyber — to coordinate the above

Where KNOMI fits

KNOMI Cyber is the team that helps Australians work through this list calmly. We triage the incident, prepare evidence packs that each agency accepts, and stay with you until it's resolved — so you're not bouncing between hotlines while everything is still on fire.

Frequently asked questions

Should I call police first?

If you're in immediate danger, yes — call 000. Otherwise the bank or ReportCyber is usually the right first step.

Do these services share information?

Partially. KNOMI Cyber helps you make sure the right details land with each, in the right format.

Is reporting worth it if I won't get my money back?

Yes. Reports feed the national picture and unlock support pathways you might not realise you qualify for.