News Centre

The AFP-led Joint Policing Cybercrime Coordination Centre (JCP3) is urging consumers to be vigilant of online shopping scams this festive season, with Australians reporting nearly $4 million in losses to this scam type in 2024*.

As of October 2024, ScamWatch had received more than 13,500 reports of online shopping scams this year*, with the total annual numbers expected to increase as more scammers target busy online shoppers in the lead up to Boxing Day.

An online shopping scam involves cybercriminals creating fake online stores or profiles that appear legitimate, often advertising items at heavily reduced prices. They may also post convincing ads on social media, online marketplaces, or fake reviews to deceive customers into making purchases.

Once a buyer places an order, items are either not delivered or fake products are delivered in their place.

AFP Commander Graeme Marshall said cybercriminals were becoming more sophisticated and deceptive in their techniques to steal consumer’s personal details and money.

“The potential risk to those shopping online increases significantly during the holiday season as cybercriminals seek to exploit time-poor consumers seeking a bargain in the lead up to Christmas Day and Boxing Day,” Commander Mashall said.

“There are a number of red flags for consumers to look out for to help them avoid becoming a victim of these scams, including unusually low prices compared to other websites, a lack of contact information, and immediate or unusual payment requests.

“Cybercriminals will often request payment by bank transfer or cryptocurrency, and some may even request deposits upfront for items.

“We are urging consumers to take the time to check their online safety shopping checklist to prevent a not-so-Merry festive shopping season.”

Steps to protect yourself online

• Always use a secure payment platform, such as PayPal or credit cards, which offer buyer protection;
• Avoid direct bank transfers or payments through gift cards or cryptocurrency;
• Search directly for the official website of the organisation – don’t rely on ads or the top results in an internet search, as these may lead to fake sites;
• When making a payment look for a website address that starts with ‘https’ and features a closed padlock symbol;
• Research the seller and look for customer reviews on independent websites – be wary of websites with no reviews, or those with overly positive feedback that seems fake;
• Avoid websites which don’t have any terms and conditions, ABN or privacy policy; and
• Be cautious of emails or messages from retailers that ask you to click on links to verify your order. Legitimate companies will not request this.

If you believe you are the victim of a cybercrime, you should notify your financial institution and report it to police immediately via ReportCyber at www.cyber.gov.au.

The AFP-led Joint Policing Cybercrime Coordination Centre (JCP3) brings together Australian law enforcement and key industry and international partners to fight cybercrime and prevent harm and financial loss to the Australian community.

We are committed to equipping all Australians with the knowledge and resources to protect themselves against cybercrime.

Watch our cybercrime prevention videos and protect yourself from being a victim of cybercrime.

If there is an immediate threat to life or risk of harm, call 000.

If you, or someone you know needs help, we encourage you to contact Lifeline on 13 11 14 or Beyond Blue on 1300 224 636, who provide 24/7 support services.

If you are concerned that your identity has been compromised, contact the national identity and cyber support service IDCARE at www.idcare.org. 

Suspected scams should also be reported to www.scamwatch.gov.au to help others avoid similar scams.

*Source: ScamWatch for period January 2024 to October 2024.