Credit card and banking fraud

Scammers may steal your credit card or bank account details, or your identity. They will use these to pay for goods or services or take out a loan in your name.

About credit card and banking fraud

There are many ways fraudsters can get access to your credit card and bank account details. They will use different scams to:

trick you into revealing your credit card details via phone or email by claiming they are someone else
steal your card details when you use them on an unsecure website or public Wi-Fi
steal your physical credit or banking card
use hidden devices during an ATM or EFTPOS transaction (skimming and shimming)
steal your PIN by looking over your shoulder in an ATM queue (shoulder surfing)
'skim' your credit cards at shops or restaurants and using it to create a clone card.

How scammers use your credit card information

Once the scammers steal your credit card details, they can:

use your credit card details for online purchases
make payments with your physical card by tapping it in a shop or forging your signature
use your card to withdraw cash from ATMs
make money transfers using stolen card data
take out a loan in your name.

Advice to protect yourself from credit card and banking fraud

You should keep your identity and your credit card and bank details safe and secure at all times.

Here are some steps to help protect you from credit card and banking fraud.

Consider the security of your physical banking or credit card at all times.
You should:
- Secure your mail by locking your letterbox.
- Never lend your card to another person.
- Sign the back of a new card as soon as you receive it.
- Consider picking up a new or replacement card in person.
- Let your bank know immediately if your card has been stolen or lost to stop any further transactions.
- Shred all documents that contain any personal information before you get rid of them.
Don't make your credit card security information within easy reach:
- Keep your PINs and passwords secret and strictly to yourself.
- If you have to write down your PINs and passwords, disguise them as something else. Keep this record separate to your credit cards.
- Choose PINs and passwords that are hard to guess. Don't use obvious giveaways such as:
  - your date of birth
  - part of your name
  - your address or other information thieves could easily guess if they know you or steal your bag or wallet.
- Secure your devices with passcodes.
- Do not use your login and other details on a shared or public device.
Fraudsters can trick you into stealing your details or identity.
- Always think before you tap or click on a link you receive via email or text message.
- Do not store internet banking passwords on your computer.
- Make online payments and transactions through secure websites only (the URL should start with 'https' and have a padlock icon next to it).
- Don't share unnecessary personal details with an online business.
Keep an eye on your bank and credit card transactions.
- Regularly check and reconcile your credit/debit card account records.
- If you see something that doesn't look right, contact your bank/card issuer immediately.
Keep your card with you at all times.
- Do not give your card to a waiter and allow them to take it away.
- Be wary of employees who swipe your card on more than one card reader.

If you have been affected by credit card or banking fraud

If you suspect someone has been using your cards or accounts fraudulently, call your bank immediately.

You should also contact a credit reporting body who can check your credit score and send you the report. You can also ask them to place a ban against the use of your details.

Check your credit score

Get your credit score checked if you have been affected by credit card or banking fraud. Apply for a credit report with one of Australia’s main credit reporting bodies. They can check your credit score and send you the report. You can also ask them to place a ban against the use of your details.

The main credit reporting bodies are:

Equifax: call 138 332 or visit Equifax(opens in a new window)
Experian: call 1300 783 684 or visit Experian(opens in a new window)
Illion: call 1300 734 806 or visit illion(opens in a new window).

Each credit reporting body may hold different information about you. You may need to ask for a copy of your credit report from each one.

Putting a ban on your credit report

You can ask credit reporting agencies for a ban to ‘freeze’ access to your credit report.

This means that credit reporting agencies can’t send your consumer credit information to credit providers.

They can only disclose this information if:

you give them permission in writing, or
they are required to by law.

If a ban is placed on your credit report, you can still:

use your credit cards
repay existing loans.

A ban won’t affect your current credit line or credit payments unless your credit card is about to expire.

You can complete online forms for each credit reporting body to ask for a ban to be placed on your credit report:
Credit report bans are valid for 21 days. Sometimes the credit reporting body may give you an extension if you have evidence that you:
- are a victim of fraud
- may become a victim of fraud.
If the credit reporting agency decides to extend the ban period, they must let you know in writing. They must also tell you the length of the extension.
In most cases, you will need to show evidence that you have either:
- a police report
- a ReportCyber report number.

Find out more about credit reports at the Office of the Australian Information Commissioner(opens in a new window).

Report credit card or banking fraud

If you have been affected by a credit card or banking fraud, you should act fast to minimise the damage. You should:

Call your bank, card issuer or your financial institution as soon as possible to let them know your cards or banking details have been stolen. They will let you know about their process for investigating the incident.
- If you are not happy how your bank or financial institution has been handling your complaint or the result of their investigation, you can lodge a report with the Australian Financial Complaints Authority (AFCA).
If someone is using your identity, or if you receive an email or text asking for your bank account details, report it via ReportCyber.

About reporting to ReportCyber

ReportCyber is run by the Australian Cyber Security Centre (ACSC). This is a secure reporting service for cybercrime incidents that may be in breach of Australian law. ReportCyber will send some reports to law enforcement and government agencies for further investigation.

When making a report, remember to include as much information as possible. This will help ReportCyber process your report.

If you have applied for a credit score

If you have already applied for a credit score report with Equifax, Experian or illion, you should include these details when reporting to ReportCyber:

reference number
company and employment details
address details.

To find out more about reporting cybercrime visit Report online abuse, cybercrimes, fraud and scams.

Instore credit card fraud

Crime prevention tips to prevent credit card fraud at your business or shop.

Updated 20 November 2024