Crypto scam losses of $1.47m in five days sparks Qld police alert to new phishing threat

Jul 2026
A physical letter phishing scam is targeting crypto customers in Queensland. Photo: diana.grytsku on Magnific
A physical letter phishing scam is targeting crypto customers in Queensland. Photo: diana.grytsku on Magnific

New crypto scams have stolen almost $1.5 million in five days from Queensland residents as state police warn of a new phishing threat.

The state’s Financial and Cyber Crime Group says cryptocurrency scammers are using new tactics to steal savings.

Police say they were recently alerted to an elaborate, highly-targeted phishing scam that encourages crypto users to scan a QR code on a physical letter delivered to their mailbox; this letter includes all of the recipient’s personal details and links to a legitimate website that claims to contain an important security update.

Cryptocurrency scams: can come in many forms, including phishing, fake investment offers,
employment scams, impersonating trusted organisations and romance scams. Source: Qld Police

Detective Superintendent Craig McGrath, of the cyber crime group, says that from July 3-7, victims lost more than $1.47 million statewide.

“Police are advising anyone who receives physical or digital correspondence relating to cryptocurrency or digital assets to be cautious of scanning QR codes or clicking unverified links and always verify the authenticity of the sender before taking any action,” he says.

CRYPTO SAFETY TIPS

“Cryptocurrency holders should never disclose private keys, seed phrases, or other authentication credentials to anyone, without confirming the legitimacy of the request.”

He also offers the following safety tips:

  • Always check the legitimacy of any cryptocurrency platform or investment opportunity; look for reviews, licensing and contact details.
  • If it sounds too good to be true, it probably is. Avoid schemes promising guaranteed high returns.
  • When securing your wallet, use strong passwords, enable two-factor authentication and ensure your private keys are stored securely.
  • Never share your wallet details, passwords, or private keys with anyone.
  • Be wary of unsolicited messages, mail or calls. Always check the identity of the person or organisation trying to contact you by doing your own research and don’t rely on links or QR codes.
  • If you’re a victim of an investment scam, report it to your bank and then to police via www.cyber.gov.au/report.

If you think you have lost money, immediately report the transaction/s to your bank or financial institution and change your online banking passwords to secure your online accounts.

Learn more about scams at www.scamwatch.gov.au and R U In Control

CONTACT DETAILS

If you have information for police, contact Policelink by using an online suspicious activity form 24 hours a day at www.police.qld.gov.au/reporting.

Report crime information anonymously via Crime Stoppers, call 1800 333 000 or report online at www.crimestoppersqld.com.au.


OTHER RELATED STORIES: Tensions with banks on the rise

Scroll to Top