December 16, 2025
January 8, 2026
Scammers do not need to break Bitcoin. They just need to break your attention.
Right now in Australia, the highest-success scams are not exotic hacks.
They are impersonation, urgency, and getting you to “help” by moving your own funds. Authorities have been warning about exchange impersonation texts and calls, plus fake police reports designed to scare people into handing over seed phrases or sending coins to a “safe wallet”.

Patterns and rules to keep you safe
1) “Your exchange account is compromised” SMS that lands in a real message thread
This one is nasty because the text can appear inside an existing SMS thread, making it feel legit. The message claims your account is under attack and tells you to call a number or transfer funds to a “trust” or “safe” wallet. Australian authorities have warned about exactly this style of exchange impersonation scam. 
Reality check: if anyone tells you to move bitcoin to protect it, they are the threat.
2) “Police are investigating, we have your ReportCyber number”
Scammers are impersonating police and creating fake ReportCyber reports using victims’ details, then using that fear to extract seed phrases or force transfers. Scamwatch and the AFP have both warned about this pattern. 
Reality check: police do not need your seed phrase. Nobody legitimate needs your seed phrase.
3) “Account compromise” phishing that gets you to hand over logins, 2FA codes, or approve “security steps”
The National Anti-Scam Centre has flagged a big rise in phishing that tries to convince people their bank or crypto accounts are compromised, pushing them into rushed actions and credential sharing.
Reality check: any request for codes, passwords, or “confirmations” under time pressure is the tell.
4) Remote access “support” scams
This one often starts as “we’re from your bank”, “we’re from telco”, “we’re from security”, then they push you to install remote access tools (AnyDesk, TeamViewer, ScreenConnect etc) so they can “fix” it. Major banks have public warnings about this style of scam. 
Reality check: once you give remote access, it is not “help”. It is a live robbery.
5) Crypto ATM funnels (the cash-out ramp for scammers)
Scammers love crypto ATMs because it converts your cash into irreversible transfers fast. Police and media reporting have highlighted large losses through crypto ATMs, often linked to romance, investment, impersonation, and “recovery” scams.
Reality check: if someone directs you to a crypto ATM, assume scam until proven otherwise.
⸻
The Bitaroo rules (print these, tape them to your monitor)
1. Never share your seed phrase. Not with “support”, not with “police”, not with “a recovery specialist”.
2. Never move bitcoin to a “safe wallet” someone else gives you. That wallet is theirs.
3. Slow down. Scams run on urgency. Take 10 minutes and the spell breaks.
4. Do not trust inbound contact. Verify outbound. If you receive a call or text, hang up. Find the official number yourself and call back.
5. Do not install remote access software because someone asked you to. Ever.
6. Treat “I’m from ASIC / police / cyber / your bank” as a claim, not proof. Impersonation is common.
7. Use self-custody for meaningful amounts. The best time to learn was yesterday. The second-best time is before you are under pressure.
8. Test transactions beat confidence. When moving funds, do a small test send first.
9. Separate devices if you can. Do not manage wallets on a computer used for random downloads.
10. If it feels like a script, it is a script. Because it is.
⸻
If you think you are being targeted
• Stop. Do nothing else. Do not click links, do not install anything, do not send funds.
• Contact your preferred exchange using verified channels. Use the website or app you normally use, not the number in the message.
• Follow our step-by-step scam checklist.
• Report it. Scamwatch and cyber reporting channels exist for a reason, and Scamwatch has specific alerts for these crypto impersonation patterns.
• If you have already shared personal info, consider IDCARE support (listed by Scamwatch as a recommended step).
