Shared ID with a crypto scam? Steps for Australians

Inventory what was exposed

A fake platform may request a passport, driver licence, selfie, bank statement, or authentication code under a know-your-customer explanation. Genuine services can have identity checks, but a convincing form does not prove the collector was genuine.

Write down each document, the date supplied, the destination website, and any account or password you used. Note whether the scammer had device access too. Do not send another document to a supposed deletion service or pay to remove information from the scammer’s database.

Protect existing and possible new accounts

Notify your bank or exchange of the disclosure. Secure exposed email and reused passwords through genuine provider settings. Moneysmart recommends identity-protection steps, checking credit reports, and considering measures to stop new credit applications where appropriate.

IDCARE is an identity and cyber-support option identified in Moneysmart’s guidance. Use its official channel to get advice tailored to the documents involved. Contact issuing authorities where relevant rather than assuming all Australian documents need the same replacement process.

Keep a record of misuse

Save suspicious account-opening messages, unexpected credit enquiries, changes to contact details, and new payment requests. Keep a log of organisations contacted and action taken. Share relevant updates with your existing fraud report and affected institutions.

Do not publish copies of identity documents to warn others. Redact sensitive details from any public account of the incident, and use secure verified channels when an authority needs originals. Continue to watch for recovery offers that use stolen information to appear credible.

Where to act in Australia

Contact the bank or crypto platform you used immediately through a genuine channel. Moneysmart recommends reporting scams to Scamwatch; fraud, theft, and cybercrime can also require local police or ReportCyber. Scamwatch collects information to identify and disrupt scams, rather than promising individual refunds. If identity documents were exposed, consider IDCARE support. Do not wait for one report to be processed before securing accounts.

Checklist

1. List exposed documents, passwords, and codes.
2. Contact your financial institutions.
3. Secure email and reused credentials.
4. Seek verified IDCARE guidance.
5. Check for unfamiliar accounts or credit activity.