The Cybercrime in Australia series aims to provide high-quality and robust evidence on self‑reported cybercrime victimisation, financial losses and other harms, help-seeking behaviour and, importantly, changes over time. This report offers insights into the experience of cybercrime among Australian individuals and small to medium businesses.

In 2025, 10,593 online Australians participated in the Australian Cybercrime Survey. Nearly half of all respondents reported having been a victim of some form of cybercrime in the 12 months prior to the survey. This included online abuse and harassment, followed by malware, identity crime and misuse, and fraud and scams. One in five respondents experienced multiple types of cybercrime. Between 2024 and 2025, the proportion of respondents who had been a victim of online fraud and scams increased.

As with previous years, certain sections of the community were more likely than others to fall victim. For the second year running, the proportion of respondents who said they were using various online safety strategies decreased from the year before. However, fewer respondents participated in online activities associated with a higher risk of victimisation or engaged in unsafe online behaviours like sharing passwords. 

Most cybercrime continues to go unreported to police and ReportCyber. The harm to individual victims remained steady in 2025, but the proportion of small to medium business operators who reported impacts on their staff and legal or regulatory issues due to cybercrime increased.