Crypto Scams in Australia: Civil Recovery Through the Courts

By the time most people realise they have been scammed, the money has already moved twice. The trading platform that showed your balance growing week after week stops processing withdrawals. The "account manager" who messaged you daily goes quiet — or, worse, asks for a release fee. Somewhere between your bank account and a wallet address on another continent, your savings have become a row of transactions on a blockchain: visible to anyone, controlled by someone you cannot name.

Australians report scam losses running to billions of dollars a year, and investment scams — increasingly denominated in cryptocurrency, or routed through it — are consistently the largest category. The criminal justice system prosecutes few of these cases and compensates almost none of the victims. When money comes back, it usually comes back through civil process: tracing, freezing, disclosure, judgment, enforcement.

This guide covers that civil route in Australia: what to do in the first 48 hours, how stolen crypto is traced, the orders Australian courts will make against exchanges and unknown wallet holders, the realistic — and mostly unpromising — claims against the banks and platforms that carried the payments, and the question that should be asked before any of it: whether what you lost justifies what recovery will cost.

The first 48 hours: move before you litigate

Nothing a court later does will matter as much as speed at the start. Crypto stolen by professional scammers is typically split, hopped across chains and cashed out through exchanges within days. Four things should happen immediately, and none of them needs a lawyer:

Call your bank. If you paid the scammer by transfer or card — even a transfer to a legitimate Australian exchange to buy the coins you then sent on — ask the bank to attempt recall of the funds and to flag the receiving account. Recalls fail more often than they succeed, but they cost nothing and the window is short.
Contact every exchange in the chain. If your crypto touched an exchange you can identify — the platform you bought on, or an exchange address the funds went to — email its fraud or compliance team, report the theft, give the transaction details and ask it to freeze the destination account. Exchanges rarely confirm what they have done, but a fraud report puts them on notice, and many will restrict an account internally while they investigate.
Report to ReportCyber and Scamwatch. ReportCyber is the national portal for cybercrime reports and feeds the police; Scamwatch reports feed the National Anti-Scam Centre's disruption work. Neither is a recovery service, but a police report number is something banks, exchanges and courts will all expect you to have.
Preserve everything. Wallet addresses, transaction hashes, the platform URL, screenshots of your account and its fictitious balance, every chat message, and the phone numbers and handles the scammer used. Blockchain transactions are permanent; scam websites and messaging accounts are not. The evidence that wins these cases is captured in the first week or not at all.

One warning before anything else. The moment your details enter a scam ecosystem, expect approaches from "recovery agents" who claim they can retrieve your crypto for an upfront fee. This is the same scam, second act. No legitimate recovery process begins with you paying a stranger who contacted you first.

Following the money: how tracing actually works

The paradox of crypto theft is that the ledger is public. Every movement of your coins is recorded permanently and visibly; what is missing is the name behind the receiving address. Tracing is the discipline of following stolen value across wallets, chains and swap services until it reaches a point where a name can attach. That point is almost always an exchange, because an exchange is where crypto becomes money that can be spent — and because exchanges, unlike wallets, keep customer records.

Scammers know this and wash the funds on the way: splitting them across dozens of addresses, hopping between blockchains through bridge services, passing them through mixers built to break the chain of attribution. Mixers complicate tracing; they do not always defeat it. Professional analysts use clustering techniques to follow value through the wash, and courts have accepted their reports as the evidential backbone of urgent applications. For a victim the practical points are simpler: a tracing report from a reputable firm is close to a precondition for serious court relief; it costs real money before any claim is issued; and its most valuable output is a short list of attribution points — deposits of your traceable funds into identified accounts at named exchanges.

Freezing orders over crypto and exchange accounts

Once tracing shows where the funds sit, or through which exchange they are moving, the first court remedy is a freezing order — an injunction restraining dealings with assets before they disappear. We explain the general doctrine in our guide to freezing orders; what matters here is the crypto application of it.

Both the Federal Court and the Supreme Courts of the states and territories grant freezing orders under broadly harmonised rules, and both have shown themselves willing to make them over cryptocurrency and over exchange accounts. Australian courts have had no real difficulty treating crypto as property capable of interim protection, consistent with the approach taken across the common law world. In fraud cases the application is made urgently and ex parte — without notice to the defendant — precisely because notice would be an invitation to move the coins.

Three features of the crypto version deserve emphasis. First, the order is commonly directed not only at the scammer, named or unknown, but is also served on the exchange holding the deposit account — which, as a practical matter, is the party that actually stops the money. Second, the price of urgent relief is candour and exposure: an applicant must give full and frank disclosure of everything that weakens the case, and must give the usual undertaking to compensate anyone wrongly harmed by the order. Third, speed is not a nicety. A freezing order obtained three weeks after the theft usually freezes an empty wallet.

Unmasking the account holder: disclosure orders against exchanges

A frozen account is only useful if you can find out whose it is. Australian procedure offers the tool the wider common law knows as a Norwich Pharmacal order: an order compelling an innocent third party mixed up in wrongdoing — here, the exchange that received the stolen funds — to disclose information identifying the wrongdoer. In the Federal Court and the state courts this is typically pursued as preliminary discovery: an application, supported by the tracing evidence, for the exchange to produce the account holder's identity documents, contact details, linked bank accounts and transaction history.

Exchanges within the jurisdiction generally do not resist these orders; they require them. Privacy obligations and their own terms prevent a regulated exchange handing over customer records on request, so a court order is the key both sides expect to be used. The disclosed material then does double work: it identifies, or helps identify, the defendant for the substantive claim, and it frequently reveals the next hop — the bank account or second exchange the money moved to.

Why AUSTRAC registration matters

Businesses that exchange crypto for Australian dollars must register with AUSTRAC under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), and registered providers must verify their customers' identities and keep records. For a victim this has two consequences worth internalising. An AUSTRAC-registered exchange is an Australian-regulated entity: it has a local presence to serve, records worth disclosing, and every commercial reason to comply with court orders. An unregistered offshore platform is the opposite on all three counts. Where your traced funds ended up is therefore not just a fact about the money — it is close to a verdict on your recovery prospects.

Suing persons unknown

Scam victims usually cannot name their defendant on day one, and Australian courts do not require them to. Proceedings can be issued against persons unknown, described by what is known: the person or persons in control of a specified wallet address, or the operators of a named scam platform. Courts have also been pragmatic about service, permitting substituted service through the channels the scammer actually used — the email address, the platform's contact form, the messaging accounts through which the fraud was run.

Two sobering notes. A defendant who never appears will usually see the claim end in default judgment, which sounds like victory but is only a document unless it can be enforced against identified assets. And if disclosure later puts a name to the wallet, the proceedings are amended and pursued conventionally. The persons-unknown device keeps a claim moving; it does not, by itself, find anyone.

Suing the bank or exchange that carried the payment

Every victim asks it: the scammer may be a ghost, but my bank and the exchange are right here — can I sue them? The honest answer is sometimes, narrowly, and less often than the recovery industry implies.

The core difficulty is that in most investment scams you authorised every payment. A bank that executes its customer's clear instruction is doing what its contract requires, and Australian law imposes no general duty on a bank to save a customer from the customer's own payment decisions. Claims tend to be arguable only at the margins: where the bank's own systems flagged the transactions as likely fraud and it processed them anyway without warning; where recalled funds were mishandled; or where the institution's conduct crossed into the statutory prohibitions on unconscionable conduct — a deliberately high bar that a mere failure to stop a scam will rarely clear. Before litigating against a bank, complain — first internally, then to the Australian Financial Complaints Authority. AFCA is free, it can award compensation up to a substantial cap, and its expectations of banks' scam handling have tightened year on year.

Claims against exchanges are contractual at their core: the terms you accepted govern. An exchange that freezes, releases or transfers funds in breach of its own terms, or fails to follow its stated security procedures, can be sued like any counterparty — our guide to breach of contract in Australia covers the anatomy of that claim. An exchange that moved stolen funds on after being put on notice of the fraud is in a more uncomfortable position still, which is one more reason the day-one notification emails matter.

The landscape is shifting, prospectively. In early 2025 the Commonwealth Parliament legislated a Scams Prevention Framework imposing anti-scam obligations on banks, telecommunications providers and digital platforms, with the detail arriving through sector codes and penalties and dispute pathways attached. It is new law phasing in, not a retrospective compensation scheme — but it signals that the era in which institutions could treat scam losses as entirely the customer's problem is closing.

Judgment is the halfway point: the offshore problem

Assume everything goes right: funds traced, account frozen, holder disclosed, judgment entered. What you hold is an Australian judgment, enforceable by Australian courts against assets within their reach. If the frozen exchange account still holds value, that is your recovery, and the freezing order will have earned its cost many times over.

But most scam proceeds leave Australia quickly, and most scam operators were never here. Enforcing an Australian judgment offshore means starting recognition proceedings in the country where the assets sit, under that country's rules, at that country's prices — assuming you can locate assets in a jurisdiction with a functioning enforcement system at all. Against organised syndicates operating from uncooperative jurisdictions, the trail usually ends in a judgment that is legally sound and practically worthless. Which is why the whole strategy compresses to one principle: the case is won or lost at the freezing stage. Money stopped inside Australia, at a regulated exchange, early, stands a real prospect of coming back. Money that has left is a lottery ticket.

Proportionality: when litigation is worth it

Now the arithmetic nobody enjoys. A tracing report, an urgent ex parte freezing application, a preliminary discovery application and a substantive claim are each real legal work; together, even run lean, they can consume tens of thousands of dollars before a dollar comes back — and the undertaking in damages adds contingent exposure on top. Against that, weigh three variables: the size of the loss, the strength of the attribution points (funds sitting at an Australian exchange, or vanished through a mixer?), and how fast you moved.

Some rough honesty by bracket. For small losses of a few thousand dollars, the courts are not a realistic route; bank recall, exchange fraud reports, AFCA and the reporting channels are the whole toolkit. Mid-range losses justify the diagnostic step: a preliminary tracing exercise costs far less than proceedings and tells you whether court relief has anything to aim at. Six-figure losses with live attribution points are what the machinery described above was built for — and the cases where a day's delay costs most. Whatever the bracket, spend in this order: preservation first, tracing second, court orders only once tracing shows something worth freezing.

The nearer target: local promoters of failed schemes

Not every crypto disaster is an anonymous offshore syndicate. A recurring Australian pattern is the local scheme: an investment program, mining operation or token launch promoted by identifiable people — at seminars, in Facebook groups, through friends — which then collapses. To the investors it feels like the same scam, but it litigates very differently, and often far better. The defendants are named, present and serveable; they may hold Australian assets; and the promises made — guaranteed returns, no risk, funds held safely — are precisely the material of a claim for misleading or deceptive conduct under the Australian Consumer Law, alongside contract and, where promoters helped themselves to investors' funds, breach of trust. Our companion guide to misleading or deceptive conduct covers that cause of action in depth.

If your loss traces to people with Australian names and Australian assets rather than to a wallet address, reframe the problem. It is not a crypto-tracing case at all: it is ordinary civil litigation about false promises — older law, better odds.

The race, plainly stated

Crypto scam recovery in Australia is neither the write-off cynics describe nor the routine service the recovery industry sells. It is a race: evidence preserved in days, funds traced in weeks, orders obtained before the money finishes moving, judgment enforced against whatever was caught inside the jurisdiction. The law will hold what you can catch. The question, always, is whether anything is left to hold by the time you get there — which is why the cheapest, fastest steps at the very start are worth more than everything that follows them.

This article is published by CommonBench for informational purposes only and does not constitute legal advice. If you are deciding whether the crypto you lost to a scam can realistically be traced, frozen and recovered through the Australian courts, try CommonBench — AI-powered legal research with verified citations across five common law jurisdictions.