Fraudsters Abuse Australia’s Cybercrime Portal to Impersonate Police and Steal Crypto

Australia’s cyber defenders are sounding the alarm: Sophisticated scammers are hijacking the nation’s trusted ReportCyber platform to pose as federal police officers, luring victims into surrendering cryptocurrency holdings under the guise of urgent investigations. The Australian Federal Police (AFP), through its Joint Policing Cybercrime Coordination Centre (JPC3), exposed the scheme on November 12, highlighting how fraudsters exploit the portal’s third-party reporting feature to fabricate credibility and orchestrate wallet drains.

The Deceptive Playbook: From Fake Reports to Phishing Calls

Armed with pilfered personal data—emails, phone numbers, and financial details—cybercriminals submit bogus cybercrime reports via ReportCyber, Australia’s official portal for flagging digital threats. They then spoof AFP lines to contact targets, claiming the victim’s name surfaced in a cryptocurrency data breach tied to an arrest. A fabricated reference number matches the portal entry, prompting victims to log in and “verify” details—sealing the illusion.

In a chilling real-world case, a caller posing as an AFP officer urged a transfer to a “secure cold storage wallet” for protection, only for a second fraudster—masquerading as a crypto exchange rep—to reinforce the ploy with the same ID. Official-looking emails, logos, and urgency tactics build trust, leading to irreversible seed phrase disclosures or fund shifts to scammer-controlled addresses. Detective Superintendent Mary Andersson warned, “These organized criminals are well-drilled, exploiting our generosity with calculated scripts.”

Crypto Carnage: Mounting Losses in a High-Stakes Arena

The fallout is stark: Australia’s cybercrime reports surge every seven minutes, with crypto scams claiming millions annually—over $3 million from ATM fraud alone in 2024. Victims, often elderly or romance scam targets, face six-figure wipeouts as laundered funds vanish through global wallet networks. This portal abuse underscores digital assets’ vulnerability, blending social engineering with blockchain’s irreversibility.

AFP’s Counterstrike and Essential Safeguards

The AFP is bolstering ReportCyber’s verification, launching awareness drives, and probing international links via Operation Firestorm. Key advice: Independently verify contacts via official channels—never share keys or transfer on demand. Hang up on unsolicited calls and dial 1300 CYBER1 (1300 292 371).

Safety Essentials:
1. Enable 2FA on all wallets; avoid “trust” transfers.
2. Cross-check reports directly on ReportCyber without caller guidance.
3. Report anomalies immediately—your intel tracks these predators.
4. Remember: Legitimate cops never solicit crypto access.

This breach of a bastion like ReportCyber exposes cybercrime’s evolution, preying on institutional trust. As Andersson urges, “Pause, verify, protect.” Crypto holders: Vigilance is your vault in 2025’s threatscape.