What to Do If You Gave a Scammer Your Bank Details

Realising you have handed bank or card details to a scammer is a horrible moment. Your stomach drops and it is easy to freeze. Take a breath. What you do in the next hour matters far more than how it happened, and there is a clear plan to follow.

This guide sets out the steps in order, calmly. It also explains the protections Australian banks now offer, and what to do if you are not happy with your bank’s response. Acting quickly gives you the best chance of keeping your money safe. You will find more advice like this in our main guide to staying safe online.

Step 1: Call your bank straight away

This is the most important step, and it comes first. Australian banks now run round-the-clock channels for reporting scams. Call the number on the back of your card, or the one on your bank’s official website, not any number from the scam message. Explain what you gave away: a card number, online banking login, or a payment you made yourself. Ask them to stop the card, watch for unusual activity, and tell you what protection they can offer.

Step 2: Change your passwords and PINs

If you gave away an online banking password, change it as soon as the bank has secured the account. Change it anywhere else you used the same one, too, which is why a unique password per account matters. While you are there, turn on two-factor authentication for an extra lock, and read our guide on creating a strong password if you need a hand.

Step 3: Report the scam

Report it to Scamwatch at scamwatch.gov.au, and to ReportCyber at cyber.gov.au if it involved hacking, phishing or online fraud. Reporting matters for two reasons: it helps the authorities track the criminals, and a report number can be useful when you talk to your bank about your case. If you shared personal details such as your driver licence or passport number, call IDCARE free on 1800 595 160 for help protecting your identity.

Will you get your money back?

Be a little careful here, because this is where false hope can creep in. Australia does not have a scheme that automatically refunds scam losses. What your bank can do depends on the situation. If they catch it in time, they may be able to stop, trace or recall a payment, and money taken without your say-so, such as a fraudulent card charge, is often refunded. Money you were tricked into sending yourself is harder to recover, which is exactly why calling the bank quickly matters so much.

The good news is that protection is getting stronger. Under the new Scams Prevention Framework, banks, phone companies and online platforms now have legal duties to help prevent and respond to scams, and most banks have rolled out a name-check called Confirmation of Payee to catch payments going to the wrong account. If you feel your bank has not met its responsibilities or treated you fairly, you can take a free, independent complaint to the Australian Financial Complaints Authority, AFCA, on 1800 931 678 or at afca.org.au. Keep notes of every call, including dates, names and what was said.