Loading story…
Australia enacted a pioneering Scam Prevention Framework, touted as the world's toughest anti-scam law, aiming to make the country a hostile environment for fraudsters by involving not only banks but also technology companies and telecommunications providers. Despite initial global praise and high expectations, the law remains inactive nearly nine months after its passage due to bureaucratic delays and the absence of critical sector-specific controls and reimbursement mechanisms from the Treasury.
The framework's implementation has been further hindered by political factors, including a federal election and the departure of key government officials, resulting in a legislative logjam. As a result, the promised protections and compliance requirements for organizations and consumers remain undefined, leaving the legislation dormant and the anticipated benefits unrealized.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
A commentary piece titled "Australia's Scam Prevention Framework: The Bubble That Burst" was published by GovInfoSecurity and BankInfoSecurity. No underlying incident details or dated real-world developments are provided in the reference content.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Australia's proposed Scams Prevention Framework has come under scrutiny for omitting several critical scam-enabling entities from its regulatory scope. While the framework aims to impose mandatory prevention, detection, and response obligations on banks, telecom providers, and major digital platforms, stakeholders have raised concerns that non-bank payment service providers, cryptocurrency platforms, email services, and VoIP communications are not included. Treasury submissions argue that these channels are central to how scams are initiated and monetized, with the National Anti-Scam Centre highlighting email as a major entry point for scammers and noting that 46% of fraudulent calls originate from VoIP-enabled devices. The exclusion of these entities is seen as a significant gap that could undermine the effectiveness of the framework in protecting consumers from evolving scam tactics. The debate reflects broader concerns about the adequacy of regulatory responses to modern, industrialized fraud, which increasingly leverages advanced technology and global infrastructure. Experts warn that without comprehensive coverage, regulatory frameworks risk leaving critical vulnerabilities unaddressed, allowing fraudsters to exploit gaps in oversight. Calls for expanding the framework underscore the need for a holistic approach to fraud prevention that keeps pace with the rapidly evolving threat landscape and the sophisticated methods used by cybercriminals to target individuals and organizations alike.
Jun 29, 2026
The UK unveiled a national fraud strategy that shifts more responsibility for stopping scams onto telecom providers, technology platforms, and financial firms, backed by a new **Online Crime Centre** with more than **£30 million** to coordinate the National Crime Agency, GCHQ, police, and private-sector partners. The plan focuses on disrupting fraud infrastructure upstream by blocking scam texts, freezing accounts, and removing fraudulent online profiles, while replacing Action Fraud with a new **Report Fraud** system and pursuing a national capability to trace scam calls across networks. The broader UK push builds on earlier action to ban illegitimate **SIM farms**, a tool used to send mass scam texts and create large numbers of verified accounts, with operators already reporting more than **1 billion** suspected scam messages blocked since 2023.
Jun 29, 2026Major Australian banks are leveraging AI-powered bots from Apate.ai to impersonate potential scam victims, gather real-time intelligence, and disrupt scam operations. These bots operate across voice, text, and social media platforms, feeding actionable data into fraud detection systems used by banks, telecoms, and government agencies. The system adapts to evolving scam tactics, helping to keep the bots undetected and effective.
Jun 29, 2026