Australia’s financial crime regulator and multiple industry outlets warned on October 13, 2026 that scammers are increasingly impersonating officials from the Australian Transaction Reports and Analysis Centre, urging victims to move conversations off official channels and to make payments using cryptocurrencies or messaging apps such as WhatsApp. The surge in impersonation attempts comes as AUSTRAC and other agencies step up enforcement and outreach tied to new anti money laundering and counter terrorism financing obligations.
How the scam works
According to the regulator and Australian industry reporting, fraudsters typically begin with a seemingly routine contact, often by email or a phone call that uses AUSTRAC branding and the names of real employees. Scammers then press for urgent action, offering to help resolve a supposed compliance breach or recover lost funds. The conversation is steered to private messaging platforms, where victims are asked to transfer money or provide sensitive information. In multiple reported cases, scammers requested payment in cryptocurrencies or instructed victims to use apps that facilitate anonymous transfers.
Why criminals are using crypto and messaging apps
Cybersecurity and financial crime experts say two features make this attack pattern attractive to criminals. First, private messaging platforms such as WhatsApp and Telegram provide a channel that is harder for victims to verify and for authorities to monitor in real time. Second, cryptocurrency transfers can be executed quickly and, in certain forms, with greater anonymity than traditional bank payments. Combined, those factors let scammers pressure victims into fast decisions and then make it difficult to trace or recover funds.
AUSTRAC has emphasised it will never ask people to pay unexpectedly, and it will not demand payments in virtual currencies or on social media platforms. The regulator reiterated these warnings to businesses and the public as it increases public engagement tied to enforcement of the AML CTF regime.
Regulatory backdrop
The warnings arrive in the context of broader regulatory activity in Australia this year. AUSTRAC has been intensifying supervision and compliance work for reporting entities, while the Australian Securities and Investments Commission and other agencies have been updating guidance and enforcement approaches for digital asset businesses. That heightened regulatory profile has increased public visibility of agencies such as AUSTRAC, something fraudsters appear to be exploiting to make their approaches appear credible.
Industry bodies and major banks are already circulating guidance reminding customers how to recognise legitimate communications and avoid becoming victims. The guidance includes practical steps such as verifying contact details through official agency channels, pausing before responding to urgent requests, and never sending funds or credentials through links or messages you did not initiate.
Practical protections for businesses and consumers
Experts recommend several concrete precautions. Organisations should train staff to spot impersonation techniques, keep an up to date list of official regulator contact points, and avoid passing regulatory discussions to informal messaging platforms. Consumers should confirm any unexpected contact by calling official agency numbers listed on regulator websites, check for inconsistencies in message content, and refuse requests to move discussions to private messaging apps or to make payments in cryptocurrency as a condition of resolving a government query.
Financial institutions and payment providers say victims who are asked to make crypto payments should immediately contact their bank and the crypto platform, record all communications, and report the incident to local law enforcement, AUSTRAC, and Scamwatch. Early reporting increases the chances that platforms or intermediaries can take measures to freeze suspicious transfers, although recovery of funds is often difficult.
What this means for the crypto sector
The trend highlights an ongoing tension for the crypto industry: while decentralised payments provide utility and speed, they also create a higher risk profile when used by fraudsters. Regulators and incumbent financial services are pushing for stronger controls and clearer public messaging to reduce the sector’s appeal to criminals. For legitimate digital asset businesses, the developments increase the urgency of robust anti money laundering and counter terrorism financing compliance.
AUSTRAC and other authorities say community awareness is a vital line of defense. The message to Australians is straightforward: regulators will not demand payment through untraceable channels, and anyone contacted should verify through official, published contact details before acting. As authorities push enforcement and outreach, industry and consumers will need to keep their defences current to prevent impersonation scams from converting into major financial losses.
For those who believe they have been targeted or defrauded, report the matter promptly to AUSTRAC, local police, and Scamwatch, and notify any financial institutions involved.