Scams Prevention Act 2025 - Australian fraud crisis and regulatory response

1 June 2025

michael.v

Australia’s War on Scams: Can a New Law Outsmart Criminals?

The Scams Prevention Framework Act 2025 was hailed as a groundbreaking victory against the flood of fraud overwhelming Australians. In 2024, nearly half a million scams cost Australians $2 billion—a stark reminder of the crisis’s scale.

The federal government touted the Act as a “world-first” approach, mandating banks, telcos, and digital platforms to collaborate and face hefty penalties for non-compliance.

But as a new ACCC phone scam—where criminals spoof government numbers to demand payments—sweeps through communities, a question looms: Is this law a costly bureaucratic bandage on a hemorrhage of fraud?

A Necessary First Step

Supporters argue the Act isn’t a silver bullet. They say its early impact—a 24% drop in scam reports in 2025—shows progress.

The Act’s strength lies in forcing industries to innovate and share intelligence, laying a foundation for future improvements. Banks, for instance, have praised the Act for incentivizing real-time fraud detection systems.

Yet, this long-term focus overlooks the immediate threat. Scammers operate in the now, exploiting vulnerabilities faster than laws can adapt.

The Agility of Crime

The Act’s intent is noble, but scammers seem unfazed. Taxpayer money has funded new regulatory powers, and industries must take “reasonable steps” to prevent, detect, and disrupt scams.

So why are scammers still winning? Criminal syndicates are agile and ruthless, adapting faster than legislation can respond.

Scammers don’t read government notices—they exploit headlines about new weaknesses. When one telco tightens phone number spoofing controls, scammers pivot to email or encrypted apps like WhatsApp.

Their global networks operate beyond Australian jurisdiction, making enforcement a game of whack-a-mole where the moles multiply and morph.

The Ambiguity of “Reasonable Steps”

The Act’s “reasonable steps” mandate is vague. For example, it requires platforms to implement scam detection, but doesn’t specify whether a small startup must match a major bank’s AI-driven systems.

This ambiguity risks a box-ticking mentality. Industries may meet the law’s letter—deploying basic filters—while failing to proactively stop scams.

Regulators and industries will likely clash over what “reasonable” means, delaying effective action.

A Race Against Time

The Act, passed in February 2025, needs time to mature. Developing systems, sharing protocols, and crafting sector-specific codes will take months, if not years.

Meanwhile, scammers are sprinting ahead. They’re already using AI for hyper-realistic deepfakes and voice cloning, like mimicking a tax official’s voice to demand payment.

New phishing techniques and social engineering tactics evolve daily. The law is playing catch-up in a race where scammers hold the lead.

The Human Factor

No law can fully protect against psychological manipulation. The ACCC phone scam preys on trust in authority, targeting vulnerable groups like the elderly with threats of legal action.

These emotional triggers bypass rational thought. Even vigilant individuals fall victim.

Without a dynamic public education campaign—evolving as fast as scams—Australians remain the last line of defense, and often the ultimate victims.

Reasons for Hope

There’s cause for cautious optimism. The 24% drop in scam reports in early 2025, likely driven by increased industry scrutiny, suggests progress.

Banks and telcos are reviewing security protocols, and collaboration is improving. These early wins show the Act can work, though losses remain high.

A Roadmap for Improvement

To turn intent into protection, we must act swiftly:

Clarify “reasonable steps”: Regulators should issue sector-specific guidelines, like mandating AI-based fraud detection for banks and call-blocking for telcos, ensuring compliance is practical and effective.

Invest in technology: Encourage banks, telcos, and platforms to share real-time threat intelligence. Singapore’s model—blocking international calls spoofing local numbers—cut scam calls from 900 million in 2022 to 4 million in 2024.

Strengthen global cooperation: Scams cross borders. Australia should lead global task forces, like the US did by sanctioning a Nigerian scam ring leader in 2024, and join Europe’s anti-scam summits in the Netherlands, Portugal, and Belgium.

Prioritize public education: Launch dynamic campaigns, like real-time scam alerts via SMS or apps, targeting vulnerable groups. Traditional campaigns often fail to teach scam detection, so innovation—like gamified apps—is key.

Legislation Is Just the Start

The Scams Prevention Framework Act is a bold step, holding industries accountable. The 24% drop in scam reports is promising, but the fight is far from over.

By clarifying expectations, investing in innovation, and empowering Australians, we can turn this law into lasting protection.

Scammers won’t wait. Neither should we. Let’s act now to protect our communities and stay one step ahead in this relentless battle.

Laws lag, but vigilance can’t – stay informed, question demands, and report scams to protect your community.


© 2025 South Burnett Advocate (kingaroy.org)

About the Author

Michael Vaughan is a seasoned journalist, public historian, and community advocate who has transitioned from full-time journalism to focus on his passion for regional storytelling through regular contributions to South Burnett Advocate.