Loading story…
Australia's proposed Scams Prevention Framework has come under scrutiny for omitting several critical scam-enabling entities from its regulatory scope. While the framework aims to impose mandatory prevention, detection, and response obligations on banks, telecom providers, and major digital platforms, stakeholders have raised concerns that non-bank payment service providers, cryptocurrency platforms, email services, and VoIP communications are not included. Treasury submissions argue that these channels are central to how scams are initiated and monetized, with the National Anti-Scam Centre highlighting email as a major entry point for scammers and noting that 46% of fraudulent calls originate from VoIP-enabled devices. The exclusion of these entities is seen as a significant gap that could undermine the effectiveness of the framework in protecting consumers from evolving scam tactics.
The debate reflects broader concerns about the adequacy of regulatory responses to modern, industrialized fraud, which increasingly leverages advanced technology and global infrastructure. Experts warn that without comprehensive coverage, regulatory frameworks risk leaving critical vulnerabilities unaddressed, allowing fraudsters to exploit gaps in oversight. Calls for expanding the framework underscore the need for a holistic approach to fraud prevention that keeps pace with the rapidly evolving threat landscape and the sophisticated methods used by cybercriminals to target individuals and organizations alike.
See the reporting duties and controls this puts on the clock.
3 events from the most recent confirmed update back to the earliest known activity.
Industry stakeholders and critics warned that excluding non-bank payment providers, cryptocurrency platforms, email services, and VoIP providers leaves major gaps in Australia's anti-scam regime. They also called for clearer liability and reimbursement rules and stronger intelligence-sharing requirements to disrupt scam networks and mule accounts.
Australia's proposed Scams Prevention Framework was introduced to impose mandatory anti-scam obligations on banks, telecommunications providers, and major digital platforms. The proposal aims to reduce scam-related harm but does not cover several other service categories critics consider important.
The National Anti-Scam Centre reported that investment scams caused $34.9 million in losses in the fourth quarter of 2024. One source said cryptocurrency accounted for $10 million of those losses, underscoring the role of crypto in scam monetization.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Australia enacted a pioneering Scam Prevention Framework, touted as the world's toughest anti-scam law, aiming to make the country a hostile environment for fraudsters by involving not only banks but also technology companies and telecommunications providers. Despite initial global praise and high expectations, the law remains inactive nearly nine months after its passage due to bureaucratic delays and the absence of critical sector-specific controls and reimbursement mechanisms from the Treasury. The framework's implementation has been further hindered by political factors, including a federal election and the departure of key government officials, resulting in a legislative logjam. As a result, the promised protections and compliance requirements for organizations and consumers remain undefined, leaving the legislation dormant and the anticipated benefits unrealized.
Jul 12, 2026
The UK unveiled a national fraud strategy that shifts more responsibility for stopping scams onto telecom providers, technology platforms, and financial firms, backed by a new **Online Crime Centre** with more than **£30 million** to coordinate the National Crime Agency, GCHQ, police, and private-sector partners. The plan focuses on disrupting fraud infrastructure upstream by blocking scam texts, freezing accounts, and removing fraudulent online profiles, while replacing Action Fraud with a new **Report Fraud** system and pursuing a national capability to trace scam calls across networks. The broader UK push builds on earlier action to ban illegitimate **SIM farms**, a tool used to send mass scam texts and create large numbers of verified accounts, with operators already reporting more than **1 billion** suspected scam messages blocked since 2023.
Jun 29, 2026
A dramatic increase in banking and financial scams has been observed globally, with a 65% rise in scam activity over the past year, according to data from BioCatch. Financial institutions serving nearly 350 million consumers across five continents have reported explosive growth in various scam types, including a tenfold increase in SMS-based phishing (smishing) attacks. Voice phishing (vishing) attempts have doubled, romance scams have risen by 63%, and investment scams have climbed by 42%. Purchase scams remain the most common form of fraud, with a 14% increase in attempts. The Global Anti-Scam Alliance estimates that consumers now lose over $1 trillion annually to scams, a figure that continues to escalate. Much of this surge is attributed to organized criminal operations exploiting the financial system, as noted by the U.S. Department of the Treasury. Scammers are leveraging current events and government programs, such as New York State’s inflation refund initiative, to launch targeted phishing campaigns. These campaigns often impersonate official agencies, urging recipients to provide sensitive payment information under the threat of losing their refunds. The phishing messages typically originate from foreign numbers and direct victims to fake websites designed to harvest personal data, including Social Security Numbers and bank account details. In the private sector, attackers are targeting users of popular financial platforms like Robinhood, sending convincing text messages that warn of suspicious account activity and prompt users to log in via fraudulent links. These fake login pages are crafted to closely mimic legitimate sites, and after stealing credentials, some even redirect victims to the real site to avoid suspicion. Additionally, credential phishing campaigns are evolving rapidly, with scammers impersonating Google Careers to target Google Workspace and Microsoft 365 users. These emails, sent in multiple languages and using frequently changing sender details, lure recipients into multi-step traps involving fake verification pages and credential harvesting sites. Attackers abuse legitimate services such as Salesforce and Recruitee to distribute these phishing emails, and the malicious domains are often newly registered to evade detection. The sophistication and adaptability of these scams make them increasingly difficult for both individuals and organizations to detect and prevent. Financial institutions and cybersecurity experts emphasize the need for heightened vigilance, robust anti-phishing training, and advanced fraud detection technologies to combat this growing threat. The widespread nature of these scams underscores the importance of cross-sector collaboration and public awareness to mitigate financial losses and protect sensitive information. As scammers continue to refine their tactics, the risk to consumers and businesses remains high, necessitating ongoing adaptation of security measures. The convergence of social engineering, technical deception, and exploitation of current events highlights the evolving landscape of financial cybercrime. Authorities and industry leaders are calling for increased investment in behavioral biometrics and real-time fraud monitoring to stay ahead of these sophisticated threats. The ongoing battle against banking and financial phishing scams is expected to intensify as attackers leverage new technologies and social trends to expand their reach.
Jun 29, 2026