1. Work out what actually happened
Your next steps depend on how far it went:
- Clicked a link but entered nothing: lower risk. Close the page, run a malware scan (step 6) and stay alert.
- Entered a password: the scammer may have it. Change it immediately (step 3).
- Entered card or bank details: call your bank now.
- Downloaded a file or installed something: treat the device as infected.
- Let someone remotely control your computer (often after a fake "Telstra", "NBN", "Microsoft" or bank call): disconnect from the internet now (step 2).
- Shared licence, passport or Medicare details: see step 8.
2. If you installed something or gave remote access: disconnect
Turn off WiFi or unplug the network cable straight away. This cuts the scammer off. Remote access tools such as AnyDesk, TeamViewer or similar may have been installed. Don't log in to banking or email on that computer until it's been checked and cleaned. A professional check is strongly recommended here.
3. Change your passwords from a safe device
Use a different device you trust, such as your phone, and change passwords in this order:
- Your email account, because it can be used to reset every other password.
- The account you entered details into (if it was a fake login page).
- Banking, myGov, PayPal and shopping accounts.
- Any other account that used the same or a similar password.
Use a long, unique password for each account. A password manager makes this realistic.
4. Turn on multi-factor authentication (MFA)
MFA means a stolen password alone isn't enough to get in. Turn it on for email, banking, myGov, social media and any work accounts, using an authenticator app where possible rather than SMS.
5. Check your email for sneaky changes
Attackers who get into an email account often set up rules to hide what they're doing, then use the account to send fake invoices or change bank details on real ones. In your email settings, check:
- Forwarding: is your email being forwarded to an address you don't recognise?
- Rules: any rules moving, deleting or marking emails as read?
- Sent items: emails you didn't send?
- Signed-in devices and sessions: sign out of all sessions, then sign back in.
For businesses, also check whether any invoices or bank-detail change requests went out, and warn your customers and suppliers if needed.
6. Scan the device
On Windows, open Windows Security → Virus & threat protection → Scan options → Full scan, followed by the Microsoft Defender Offline scan. Remove any programs you didn't install. On a phone, delete any app you installed because of the message, and update the phone's software.
7. Report it
- ReportCyber at cyber.gov.au, the Australian Government's cybercrime reporting service. For urgent help, call the Australian Cyber Security Hotline on 1300 CYBER1 (1300 292 371).
- Scamwatch at scamwatch.gov.au, which tracks scams and warns others.
- The organisation being impersonated: most banks, Australia Post, the ATO and myGov have scam-reporting addresses.
8. If your identity documents were exposed
If you shared your driver licence, passport, Medicare card or tax file number, contact IDCARE, Australia's free national identity and cyber support service, on 1800 595 160. They'll help you work out which documents to replace and how to protect your credit file.
9. Tell the people who might be targeted next
If your email or social media was taken over, let friends, family and customers know so they don't click links sent "from you".
How to spot the next one
- Urgency and threats: "your account will be suspended", "pay this toll today".
- Links in texts from "Australia Post", "Linkt", "the ATO" or "myGov". Go to the official app or website yourself instead.
- Callers asking to remotely access your computer. Telstra, NBN Co, Microsoft and banks don't cold-call to fix your computer.
- Requests to change bank details on an invoice. Always confirm by phone using a number you already have.
When to get professional help
Call us straight away if a scammer had remote access to your computer, your business email may have been compromised, or you're not sure what was taken. We'll clean and check the device, lock down your accounts, review email rules and sign-ins, and put protections like MFA and email filtering in place so it's much harder next time.
Quick answers
What should I do if I clicked a scam link in Australia?
If you entered nothing, close the page and run a malware scan. If you entered a password, change it from a safe device and turn on MFA. If you entered bank details, call your bank immediately. Report the scam to ReportCyber and Scamwatch.
Who do I report a scam to in Australia?
Report cybercrime to ReportCyber through cyber.gov.au or call 1300 CYBER1 (1300 292 371), report scams to Scamwatch, and contact IDCARE on 1800 595 160 if your identity documents were exposed.
A scammer accessed my computer remotely. What now?
Disconnect it from the internet, don't use it for banking or email, change your passwords from another device, call your bank, and have the computer checked and cleaned by a professional.