Fight back! – How to report Cyber Crime in Australia

Cybercrime in Australia has evolved from isolated phishing attempts into a sophisticated, multi-billion-dollar criminal ecosystem. Every year, Australians lose hundreds of millions of dollars to scams, fraud, identity theft, and ransomware attacks.

Many victims don’t report cybercrime because of embarrassment, fear, or the perception that “nothing will happen.” As IT professionals, we know that reporting is not optional—it is critical. Every report helps law enforcement identify trends, disrupt criminal networks, and protect others.

Whether you’re an individual, a small business, or an IT administrator managing a corporate network, understanding how to report cybercrime, what tools exist, and how to mitigate risk is essential.

What Counts as Cybercrime?

Cybercrime is any criminal activity that uses technology—computers, networks, or the internet—as a target or medium. While financial loss is the most obvious consequence, the emotional and reputational impact is significant.

Common forms of cybercrime include:

• Phishing Attacks: Emails or messages designed to trick users into giving passwords, banking details, or other sensitive information.
• Hacking: Unauthorized access to computers, servers, or networks to steal data, disrupt services, or install malware.
• Identity Theft: Misusing stolen personal information, such as passports, driver’s licenses, or financial records.
• Child Exploitation: Distribution or possession of illegal material; online grooming of minors.
• Ransomware: Malware that encrypts files and demands payment for release.
• Cyber-Terrorism: Inciting or spreading extremist content or disrupting critical infrastructure.

Pro Tip (From the Field): As an IT professional, I’ve observed that phishing is still the most common vector for attacks. Organizations with strong email filtering and end-user awareness training can cut successful attacks by 70–80%.

Reporting Cybercrime in Australia: ACORN

The Australian Cybercrime Online Reporting Network (ACORN) is the central hub for reporting cybercrime securely. ACORN is supported by:

• All Australian police agencies
• The Australian Attorney-General’s Department
• The Australian Competition and Consumer Commission (ACCC)
• The Australian Communications and Media Authority (ACMA)

What Can You Report?

• Online fraud or scams
• Phishing attacks
• Unauthorized access to devices or networks
• Identity theft
• Illegal online content or activities

ACORN serves as a secure reporting and referral service, forwarding actionable reports to the relevant law enforcement or regulatory body.

How to File an ACORN Report

1. Go to: https://www.acorn.gov.au
2. Provide detailed information: Include emails, screenshots, IP addresses, and timestamps. The more context you give, the better.
3. Do NOT share sensitive credentials or banking info: ACORN doesn’t need your passwords or card numbers.
4. Save evidence locally: Keep copies of emails, transaction logs, or affected files in case law enforcement needs them.

Once submitted, ACORN provides a reference number via email. While not all reports result in immediate investigations, each report contributes to a national understanding of cybercrime trends.

Expert Insight: I often advise IT teams to integrate ACORN reporting into incident response procedures. Doing so ensures timely escalation and helps track attack patterns across the organization.

Why Reporting Matters

Some users think, “It’s just one scam, why bother?” Here’s why reporting is crucial:

1. Data-driven enforcement: Police and regulators analyze aggregated reports to identify hotspots and criminal tactics.
2. Preventing repeat offenses: Scammers rely on anonymity. Reports help authorities trace and stop recurring schemes.
3. Protecting others: Your report could prevent family members, coworkers, or clients from falling victim.
4. Legal documentation: In cases of identity theft or ransomware, a report can serve as evidence in disputes or insurance claims.

Real-World Tip: A colleague in Sydney reported a sophisticated phishing attack through ACORN. Weeks later, that report contributed to dismantling a larger criminal network targeting small businesses nationwide.

Preventing Cybercrime: IT Expert Recommendations

Prevention is better than cure. Here’s a comprehensive approach:

1. Strengthen Email Security

• Enable multi-factor authentication (MFA) for all email accounts.
• Use AI-based spam and phishing detection filters.
• Educate staff and family members to verify URLs and sender addresses before clicking.

2. Secure Your Devices

• Keep operating systems and applications up-to-date.
• Use endpoint protection, including antivirus and anti-malware solutions.
• Implement least-privilege access policies.

3. Social Media Awareness

• Avoid oversharing personal information online.
• Review privacy settings regularly.
• Be cautious with friend requests and messages from unknown users.

4. Safe Online Shopping

• Use verified retailers and payment processors.
• Avoid sending payment outside secure platforms.
• Monitor bank accounts for unusual transactions.

5. Protect Personal Data

• Use password managers to create unique, strong passwords.
• Regularly audit personal data exposure.
• Encrypt sensitive files and backups.

6. Parental Controls and Education

• Employ parental control software to filter inappropriate content.
• Teach children basic digital hygiene and how to report suspicious online behavior.

Insider Tip: In my experience, cybercrime prevention is as much about culture and training as it is about technology. End-users are often the first line of defense.

Legal Implications of Not Reporting

Failing to report cybercrime doesn’t make it legal, but it limits law enforcement’s ability to act. Certain cybercrimes, such as child exploitation or ransomware attacks targeting infrastructure, carry severe criminal penalties. Reporting also provides documentation for civil actions, such as identity theft recovery or insurance claims.

ACORN Success Stories

While ACORN may not resolve every report, it has tangible successes:

• Coordinating multi-state cybercrime investigations
• Partnering with the ACCC to stop online scams
• Providing targeted alerts and warnings to Australians

Example: In 2022, ACORN coordinated with state police to take down a phishing scam that targeted thousands of seniors in Victoria. The operation led to multiple arrests and prevented millions of dollars in losses.

Conclusion: Take Action, Don’t Stay Silent

Cybercrime thrives in silence. Every Australian who reports, educates, and secures themselves online contributes to a safer digital ecosystem.

For IT professionals, it’s not enough to implement technical safeguards; you must also educate, report, and advocate for responsible online behavior.

If you, a colleague, or a client falls victim to a scam, don’t hesitate:

1. Report via ACORN
2. Secure devices and accounts
3. Educate yourself and others

The fight against cybercrime is ongoing, but your actions can make a measurable difference.

Remember: Cybercrime is a community problem. Reporting is how Australians fight back — one incident at a time.

References & Resources

• ACORN: https://www.acorn.gov.au
• Stay Smart Online (Australian Cyber Security Centre): https://www.staysmartonline.gov.au
• Australian Federal Police Cybercrime: https://www.afp.gov.au/what-we-do/crime-types/cybercrime

SuperTechman – Cyber Safety – Protecting your Kids Online

Daniel Lutton

From my early days on the helpdesk through roles as a service desk manager, systems administrator, and network engineer, I’ve spent more than 25 years in the IT world. As I transition into cyber security, my goal is to make tech a little less confusing by sharing what I’ve learned and helping others wherever I can.