Report fraud involving APRA

Learn how to identify and report fraud involving APRA, including scams, impersonation and suspicious activity. Guidance to ensure your concern reaches the correct agency.

Overview

If you believe someone has attempted to deceive, impersonate or mislead the Australian Prudential Regulation Authority (APRA), you can report it to us.
This page explains what constitutes fraud against APRA, what does not fall under this category, and the correct pathways to report your concern.

Fraud against APRA includes attempts to:

  • impersonate APRA or our staff
  • forge documents claiming to be from APRA
  • manipulate information provided to APRA
  • improperly influence APRA decisions
  • access APRA systems or information through deceptive means

If you are unsure whether your concern relates to APRA, use the guidance below before submitting a report.

If your concern is about a financial institution or regulated entity

APRA does not handle consumer complaints or misconduct issues involving banks, insurers or superannuation funds.

If your concern relates to the behaviour, actions or misconduct of an entity regulated by APRA, please contact:

  • Australian Securities and Investments Commission (ASIC)
    For misconduct by financial institutions, misleading behaviour, or concerns about financial products.
    Website: asic.gov.au 
  • Australian Financial Complaints Authority (AFCA)
    For complaints, disputes or poor service received from a financial institution.
    Website: afca.org.au

Please do not use the APRA fraud form for these matters. You will not receive a response, and your issue will not reach the correct agency.

When to report fraud to APRA

Use APRA’s fraud reporting form only if your concern involves:

  • scams using APRA’s name, branding, or staff
  • fraudulent communications claiming to be from APRA
  • attempts to access APRA systems or data through deception
  • manipulation of information provided to APRA
  • suspicious activities that threaten the integrity of APRA processes

If your concern falls into these categories, please submit a report through our secure online form.

How to report fraud against APRA

You can report fraud to APRA using one of the following methods:

Online form (preferred)

Submit details securely using the APRA fraud reporting form. A link to the form is provided below.

Email

fraud@apra.gov.au 

Post

post your report marked "CONFIDENTIAL" to: 

Chief Risk Officer, APRA
GPO Box 9836
Sydney NSW 2001

Please provide as much detail as possible, including dates, names, evidence, screenshots or documents if available.

What happens after you report?

  • Your report will be reviewed by APRA’s Operational Risk team.
  • APRA may contact you if further information is required.
  • While reports help us identify and address risks, you may not receive a detailed update due to confidentiality and security considerations.

To lodge a report now, proceed to the Reporting Fraud Against APRA form.

While APRA will accept an anonymous report, it is preferable that you provide your contact details to assist in any investigation into the matter. You may assume that only those APRA employees investigating it will know your identity. We will not reveal your identity outside this group except:

  • where we are under a legal obligation to do so;
  • where that information is already in the public domain;
  • on a strictly confidential basis to a professionally qualified lawyer or other advisor for the purposes of obtaining advice;
  • where you consent to your identity being revealed; or
  • to the police or as otherwise required by legislation.

If there are any other circumstances in which we are required to reveal your identity, we will discuss this with you first. 

Footnotes