AUSTRAC has warned that scammers are impersonating the regulator and its staff to get money and sensitive business information. Genuine AUSTRAC staff will never ask you to pay in cryptocurrency or through social media apps such as WhatsApp or Telegram, so if a message claiming to be from AUSTRAC doesn't feel right, stop, don't click any links, and contact AUSTRAC using the details on its official website (Cyber Daily; AUSTRAC: frauds and scams).

If you've only recently become regulated, hearing from AUSTRAC at all can be unsettling. You're still getting used to new obligations, and a message that sounds official and urgent can make anyone want to act quickly. That's exactly what scammers are counting on. The good news is that a few simple checks will help you tell the difference.

What are the AUSTRAC impersonation scams?

AUSTRAC has described two main approaches (Real Estate Business):

  • The "investigator contact". After someone complains about losing money, a scammer gets in touch claiming to have access to an "AUSTRAC investigator". They use a real staff member's name and a fake LinkedIn-style profile, move the conversation to WhatsApp, and offer to recover the funds quickly.
  • The "helpful contact". Scammers pose as senior AUSTRAC officials, including the CEO, and offer to connect people with the regulator's general counsel.

Contact can come by phone, email or message, often with a promise to recover funds, speed up a process or resolve a complaint (Cyber Daily).

Why are scammers targeting businesses now?

AUSTRAC says scammers are capitalising on its growing public profile (Cyber Daily). Since 1 July 2026, tens of thousands of real estate agencies, accountants, lawyers and other businesses have come under AUSTRAC's oversight for the first time, and AUSTRAC has started issuing infringement notices to businesses that haven't enrolled (AUSTRAC).

That means more businesses are expecting to hear from the regulator, which makes a convincing fake easier to fall for. AUSTRAC CEO Brendan Thomas stated that "these scams are designed to look credible" and that "scammers are using the names and publicly available information of real AUSTRAC staff" (Real Estate Business.

How does AUSTRAC genuinely contact businesses and take payments?

Knowing what normal looks like makes the unusual easier to spot. Based on what AUSTRAC has said publicly:

  • AUSTRAC does take payments from regulated businesses, for example for levies and infringement notices, and you may receive legitimate invoices (Cyber Daily).
  • It will never ask you to pay in virtual or cryptocurrencies, or through social media apps such as WhatsApp or Telegram.
  • Its staff don't ask for an extra payment to handle a complaint or resolve a matter.
  • It doesn't use messaging apps to handle cases, and it doesn't recover lost investment funds for consumers (Real Estate Business).

What should I do if I get a suspicious message?

AUSTRAC's advice is simple: if "something doesn't feel right, stop, don't click any links" (Real Estate Business). Then:

  • Don't pay or share information until you've checked the request through official channels.
  • Contact AUSTRAC directly, using the contact details on its official website, not the ones in the message (AUSTRAC).
  • Be wary of urgency. Pressure to act now is a common tactic designed to stop you checking first.
  • Let your AML/CTF compliance officer know, so they can check the message and give the rest of your team a heads-up.

If you think you've already paid a scammer, Scamwatch advises contacting your bank or card provider immediately to report it and stop any payments in progress, then reporting the scam to Scamwatch (Scamwatch).

Visibl founder and certified AML specialist Kaan Yuksel says a well-briefed team is the best protection: "Your people are your first line of defence. When you train your team on the fundamentals of your compliance program and share real examples of scams like these, they feel far better equipped to spot something that doesn't add up. That's time well spent."

FAQs

Does AUSTRAC contact businesses through WhatsApp?

AUSTRAC says it doesn't use messaging apps to handle cases, and will never ask you to pay through social media apps such as WhatsApp or Telegram (Real Estate Business; Cyber Daily).

Will AUSTRAC ever ask me to pay in cryptocurrency?

No. AUSTRAC says it will never ask you to pay in cryptocurrencies (Cyber Daily).

Can AUSTRAC help me recover money I've lost to a scam?

No. AUSTRAC says it doesn't recover lost investment funds for consumers (Real Estate Business). If you've lost money, contact your bank immediately and report the scam to Scamwatch (Scamwatch).

How do I check a message really came from AUSTRAC?

Don't use the contact details in the message. Contact AUSTRAC directly using the details on its official website (AUSTRAC).

Next step

Knowing your obligations makes it much easier to spot a request that doesn't add up. If you'd like a clear picture of what AUSTRAC expects from your business, and a team of certified AML specialists to call when something doesn't feel right, talk to Visibl.



This article is general information only and isn't legal advice. Firms should seek advice on their specific obligations.