Australian Police Prevent and Recover $465 Million in Business Email Scams Under Operation Dolos

Australian law enforcement agencies working under Operation Dolos have prevented or recovered $465 million in losses from Business Email Compromise (BEC) scams since January 2020, prompting police to issue an urgent plea for heightened vigilance as part of a new awareness campaign.

Operation Dolos is a collaborative cybercrime initiative that includes the Joint Policing Cybercrime Coordination Centre (JPC3), state and territory police, and industry partners. The multi-agency effort focuses on disrupting criminal networks that execute payment redirection schemes targeting individuals and Australian businesses.

According to the National Anti-Scam Centre's Targeting Scams Report, BEC scams accounted for $166.8 million in reported losses last year. This ranks payment redirection as the second most financially damaging scam type in Australia, trailing only investment scams.

In response to the scale of the threat and coinciding with Cyber Security Action Month, the JPC3 has launched the "ClickFit" campaign to boost community education. BEC schemes typically involve offenders unlawfully accessing an email inbox to monitor communication for weeks or months, gathering intelligence on upcoming transactions. Scammers often use typosquatting—registering email addresses that closely mimic legitimate businesses—and alter inbox rules to send fraudulent invoices with modified bank details.

High-value transactions such as property settlements, construction projects, and supplier invoices are frequent targets. Perpetrators often employ high-pressure tactics and time their requests ahead of weekends or public holidays to discourage independent verification.

AFP Detective Superintendent Marie Andersson stated that cybercriminals rely on individuals being rushed or distracted to force quick decisions. Andersson noted that stopping to verify payment requests directly impairs the criminals' ability to succeed.

Police detailed several recent investigations and case studies highlighting the operational reach of these scams:

• Gold Bullion Scheme (May 2026): Three individuals were arrested in Sydney and charged with offences including dealing with proceeds of crime and participating in a criminal group related to an alleged $600,000 scam. Authorities recovered approximately $300,000 after funds were allegedly used to buy gold bullion.
• Northern Territory Government Scam (July 2025): A 38-year-old Sydney man was charged with dealing with proceeds of crime worth $1 million or more after allegedly tricking a government agency into sending more than $3.58 million to a fraudulent account mimicking a construction contractor. The majority of the funds were recovered.
• Personal and Small Business Cases: Other reported incidents include a Tasmanian couple who lost $47,500 after a builder's invoice was intercepted by US-based criminals, a Victorian victim who paid $2,300 on a compromised gravestone invoice, and a property buyer who transferred a $45,000 deposit to a scammer impersonating a conveyancer.

Police urge the public and businesses to follow key precautions before transferring funds, including pausing before acting, comparing account details with prior records, verifying bank changes through trusted phone numbers or in person, watching for artificial urgency, and immediately reporting suspicious transactions to banks and cyber.gov.au.

Source