Helping Australians Choose Wisely.

Understand before you buy

How to Recognise an Investment Scam Before You Lose Your Money

Learn how investment scams build trust, fake legitimacy and block withdrawals, plus the independent checks Australians should complete before sending money.

Person pausing at a laptop displaying an investment warning symbol

Investment scams can look like legitimate share, bond, property, cryptocurrency or trading opportunities. They may use polished websites, real company details, convincing account dashboards, artificial-intelligence-generated endorsements and patient personal contact. The safest response is to pause, verify every important claim independently and never let the person offering the investment control how you check them.

Quick answer: Treat guaranteed or unusually high returns, urgency, unsolicited contact, secret opportunities, celebrity endorsements, remote-access requests and difficulty withdrawing as major warning signs. Find the business and licence through ASIC’s own websites—not a link supplied by the promoter—then independently contact the licensed business using verified details.
If you may have paid a scammer: Stop sending money and contact your bank or financial institution immediately. Ask whether transactions can be stopped or recalled, secure affected accounts, preserve evidence and report the scam to Scamwatch. Be alert for recovery scammers who promise to retrieve your money for an upfront fee.

Investment scam warning signs at a glance

Warning sign Why it matters Safe response
High or guaranteed returns with little risk Real investments involve risk, and returns cannot be guaranteed merely by a persuasive salesperson Ask for formal documents and compare claims with independent, qualified advice
Pressure to act today Urgency prevents proper checks and creates fear of missing out End the conversation and take as long as you need
Unsolicited message, social-media ad or new online friend Scammers manufacture trust before introducing a fake opportunity Do not use supplied links; research from a clean starting point
Payment to a person, crypto wallet or unrelated business The destination may not match the claimed investment provider Verify the account name and payment process independently before transferring anything
Requests for remote access, passwords or verification codes This can give a criminal control of your device or accounts Refuse, disconnect and contact the institution through its official channel
A small withdrawal succeeds, then larger fees appear Early withdrawals can be used to build confidence before demanding more money Do not pay tax, insurance or release fees to unlock supposed profits
Licence details appear genuine Scammers impersonate real licensees and copy legitimate company information Verify the person, website, phone number and relationship to the licensee independently

Australians reported losing more than $837 million to investment scams in 2025, according to the National Anti-Scam Centre figure published by Moneysmart. Large losses do not happen because every victim ignores an obvious warning. Modern scams are designed to survive a quick search and can unfold over weeks or months.

How a modern investment scam develops

1. The hook

The first contact may be a social-media advertisement, search result, email, text, phone call, online investment group or relationship formed through a dating or messaging platform. The content may impersonate a bank, fund manager, stock exchange, financial publication or public figure.

A professional-looking advertisement is not evidence of legitimacy. Paid advertisements, fake news pages and fabricated video or audio can all be created or distributed by criminals.

2. Trust building

The scammer may ask sensible questions about your goals, discuss ordinary market concepts and avoid demanding a large amount immediately. They may move the conversation to an encrypted messaging app, introduce a supposed adviser or add you to a group filled with fake members celebrating their returns.

This stage creates social proof and a feeling of personal attention. The scammer wants the eventual payment to feel like your considered decision.

3. The convincing platform

You may receive login details for a polished website or app showing trades, account balances and rising profits. Those figures can be entirely fictional. A dashboard controlled by the scammer does not prove that any asset was purchased or held for you.

4. The first payment

The initial deposit may be deliberately affordable. Some scammers allow a small withdrawal or return a little money to make the platform appear genuine. The next request is usually larger and may be presented as a time-limited trade, account upgrade or chance to recover a supposed loss.

5. The withdrawal trap

When you ask to withdraw, the platform may demand more money for tax, insurance, verification, anti-money-laundering clearance, a margin shortfall or an account-unlocking fee. Paying usually triggers another demand. Legitimate Australian tax is not ordinarily paid to an unknown platform merely to release an account balance.

6. The recovery scam

After the loss, another person may claim to be a lawyer, regulator, investigator, bank employee or recovery specialist. They may already know details of the original scam because victim information is shared or sold. A request for an upfront recovery payment, wallet fee or confidential banking access is another serious warning.

The verification process to use before investing

  1. Stop the sales conversation. Do not verify an investment while the promoter is on the phone, watching through screen sharing or directing your searches.
  2. Write down the exact claims. Record the legal entity name, Australian Financial Services licence number, website, product name, investment structure, fees, withdrawal terms and payment destination.
  3. Open a new browser session. Navigate independently to ASIC and Moneysmart. Do not use a link, QR code, search result advertisement or document supplied by the promoter.
  4. Check the professional registers. Confirm whether the relevant entity is licensed or authorised for the financial service being offered.
  5. Check the Investor Alert List. A match is a strong reason not to proceed. No match does not prove legitimacy because the list cannot include every scam.
  6. Check the exact contact details. A scammer may copy a real company’s name and licence. Compare the domain, email and phone number with independent records.
  7. Contact the genuine licensee separately. Use contact details you found independently and ask whether the named person, website and product belong to it.
  8. Understand what you will legally own. Ask who issues, holds and administers the asset and what evidence proves ownership.
  9. Read the documents away from the salesperson. Check fees, risks, cooling-off rights where applicable, complaint arrangements and withdrawal conditions.
  10. Seek independent advice. Use an appropriately qualified adviser or lawyer who has no connection to the promoter.
  11. Verify payment instructions again. Confirm the recipient through an independently sourced channel immediately before paying.
  12. Walk away if anything cannot be verified. Missing information is not a minor inconvenience when your savings are at risk.
The independence test: A check is not independent when the promoter supplied the website, phone number, adviser, testimonial, review, app or person who performed it. Start from an official source and build the verification chain yourself.

How to check an Australian financial licence properly

An Australian Financial Services licence can be an important check, but the existence of a real number is not enough. Criminals copy the identity, Australian Business Number, address and licence details of legitimate firms.

Confirm all of the following:

  • the legal name matches the entity offering the product;
  • the licence or authorisation covers the service being offered;
  • the representative is genuinely connected to that licensee;
  • the website domain and email address match independently verified details;
  • the phone number has not come solely from the caller, advertisement or promotional document; and
  • the licensed business confirms the product and payment instructions.

ASIC warns consumers to use its professional registers and Investor Alert List. The alert list is useful but not exhaustive, and scammers frequently change names, websites and contact details.

Fake bonds and term-deposit offers

Imposter bond scams may copy the name and branding of a real bank or investment firm, then offer government or corporate bonds with attractive fixed returns. Victims may receive professional brochures, application forms and calls from a supposed adviser.

Warning signs include returns materially above comparable products, a personal bank account or unexpected payee, pressure linked to a limited allocation and contact details that differ subtly from the genuine institution.

Do not call the phone number in the brochure to verify the brochure. Find the institution through its official website or independently verified listing and ask whether it issued the offer.

Fake cryptocurrency and trading platforms

Cryptocurrency and foreign-exchange scams often claim that software, artificial intelligence or an expert trader produces reliable profits. A platform may show active trades and rising balances while the real money has already been transferred to criminals.

Be particularly cautious when someone:

  • guarantees profits or claims the algorithm rarely loses;
  • asks you to buy crypto through a legitimate exchange and transfer it to a wallet they control;
  • insists on remote-access software to help set up the account;
  • asks for a screen share while you log in to banking or an exchange;
  • provides a download outside an official app store;
  • discourages you from speaking to your bank, family or adviser; or
  • demands extra deposits before a withdrawal will be released.

Registration of a virtual-asset service provider is not the same as an endorsement of an investment, a guarantee of returns or proof that the person contacting you controls the registered business.

Celebrity endorsements and AI-generated promotions

A recognisable presenter, investor, athlete or business leader can appear to promote a scheme through a fabricated article, edited video, cloned voice or synthetic image. The scam page may imitate a genuine news website and include fake comments from supposed investors.

Do not treat realistic video as verification. Check the person’s official channels and reputable reporting independently, but remember that even a genuine endorsement would not remove investment risk. The product, provider, licence and custody arrangements still require full checks.

Social-media and relationship-based investment scams

Some scams begin with friendship or romance rather than finance. After building trust, the person introduces a relative, mentor or trading platform that supposedly created their wealth. They may guide every step and celebrate early apparent profits.

Refusing a video call does not prove fraud, and completing one does not prove legitimacy. Images and identities can be stolen, and synthetic media can be convincing. Never transfer money because the relationship feels genuine; verify the investment separately.

Payment methods that deserve extra caution

Payment request Risk What to verify
Bank transfer Funds may move quickly through mule accounts Recipient name, institution, account purpose and instructions through a separate official channel
Cryptocurrency transfer Transfers can be difficult or impossible to reverse Who controls the wallet, why crypto is required and the regulated status of every service involved
Card payment A fake merchant can capture both money and card details The merchant and website independently; contact the card provider promptly if concerned
Money transfer app The account may not belong to the claimed investment business Whether the provider allows the transaction type and whether the recipient is genuine
Gift cards or cash These are inappropriate for a legitimate regulated investment Do not proceed; treat the request as a major scam warning

Why testimonials and online reviews prove very little

Testimonials can be invented, purchased, copied from another business or posted by accounts controlled by the scam network. A group chat may contain dozens of fake participants. Reviews can also describe a legitimate company while the link takes you to an impersonating website.

Independent research means checking regulatory information, company identity, product documents, custody, complaints history and credible reporting. It does not mean counting five-star reviews.

Questions a genuine provider should answer clearly

  • What is the full legal name of the product issuer and service provider?
  • What licence or authorisation permits the service?
  • What asset will I own, and in whose name will it be held?
  • Where is my money sent and why?
  • How are returns generated, and what could cause a loss?
  • What are every upfront, ongoing, withdrawal and performance fee?
  • When can withdrawals be suspended, delayed or refused?
  • What formal disclosure document applies?
  • Who handles complaints, and is an external dispute-resolution scheme available?
  • How can I verify these answers without using your links or contacts?

Evasive answers, hostility toward questions or instructions to keep the opportunity secret are reasons to stop.

What to do if you have already shared information

Act even if no money has left the account. Personal details, identity documents, banking information, passwords and device access can be used later.

  1. Contact the relevant bank or financial institution. Use the number in its official app, website or on your card.
  2. Change compromised passwords. Start with email and financial accounts, use unique passphrases and enable multi-factor authentication.
  3. Remove remote-access software. Disconnect the device from the internet and obtain trusted technical help if someone accessed it.
  4. Review account access. Check new payees, linked devices, forwarding rules, recovery details and transactions.
  5. Protect your identity. Follow guidance from IDCARE and the relevant document issuer if identity information was exposed.
  6. Preserve evidence. Save messages, email headers, websites, phone numbers, receipts, wallet addresses and transaction references.
  7. Report the incident. Use Scamwatch and ReportCyber where appropriate, and follow advice from your financial institution.

What to do if you have sent money

Speed matters. Contact your bank, card provider, exchange or payment service immediately. Explain that the transaction relates to a suspected scam and ask what can be frozen, stopped, recalled or investigated. Do not wait for the scammer to miss a promised deadline.

Then:

  • send no more money, including supposed taxes or recovery fees;
  • block the scammer after preserving evidence;
  • report the scam to Scamwatch;
  • report relevant cybercrime through ReportCyber;
  • contact police when advised or where immediate threats are involved;
  • seek support from IDCARE if identity or account security is affected; and
  • warn trusted family members because scammers may target them or contact you again under a new identity.
Do not chase the loss: Scammers may show a larger fake balance, claim one final payment will release everything or threaten legal consequences. Another payment normally increases the loss. Speak directly with your financial institution and official reporting services.

Common mistakes to avoid

  • Trusting a licence number by itself: Verify the person and contact details, not merely the copied identity of a real licensee.
  • Using supplied verification links: The scammer may control both the offer and the fake checking website.
  • Believing the dashboard: On-screen profits are not proof of ownership or withdrawable funds.
  • Assuming a small successful withdrawal proves legitimacy: It may be bait for a larger deposit.
  • Keeping the offer secret: Isolation helps the scammer. Discuss it with a trusted person and independent professional.
  • Installing remote-access software: A supposed adviser does not need control of your device or online banking.
  • Sharing verification codes: Banks and legitimate services tell customers not to disclose security codes.
  • Paying to release profits: Repeated tax, clearance, insurance or withdrawal demands are classic escalation tactics.
  • Feeling too embarrassed to report: Anyone can be targeted, and rapid reporting may protect both you and others.

Frequently asked questions

Does an AFS licence guarantee that an investment is safe?

No. A licence is an important regulatory check, not a government guarantee of performance or capital. You must also confirm that the person is genuinely connected to the licensee and authorised for the service offered. Scammers may copy real licence details.

If a company is not on ASIC’s Investor Alert List, is it safe?

No. The list is not exhaustive, and new scams or changed identities may not yet appear. Continue every independent check and do not treat absence from a warning list as approval.

Can investment scammers let you withdraw money?

Yes. A small early withdrawal may be used to establish credibility and encourage a much larger deposit. The important test is whether the investment, provider, ownership and payment path can be independently verified.

Should an investment adviser ask to access my computer?

No genuine investment opportunity requires an unsolicited caller to control your device, watch you log in or move money through your accounts. Refuse remote access and independently contact the claimed institution.

Can my bank definitely recover a scam payment?

No. Recovery depends on the payment method, timing, destination and what happened after the transfer. Contacting the provider immediately gives the best opportunity for action, but reimbursement or recovery is not guaranteed.

Where should Australians report an investment scam?

Report it to Scamwatch and contact the relevant financial institution immediately if money or account details are involved. Report cybercrime through ReportCyber where appropriate. ASIC’s Moneysmart website provides investment-scam checking and reporting guidance.

Verdict: The best protection is a verification process that the promoter cannot control. Stop, record the claims, use ASIC and Moneysmart from a clean starting point, confirm the exact person and payment instructions with the genuine licensee, and seek independent advice. If urgency, guaranteed returns, remote access or extra withdrawal fees appear, do not send money.

Sources and further reading

Published by

Adrian Muller

Better Life Decisions

Honest. Independent. Australian.

Need a second opinion?

Ask Adrian before making the decision.

Tell us what you are choosing between, what matters most to you and what you have already checked.

Ask Adrian