What is the most common cybercrime in Australia?

What is the most common cybercrime in Australia according to Australian Cyber Security Centre Annual Cyber Threat Report 2023-2024 and Australian Federal Police is phishing and email compromise, including business email compromise and online shopping scams. Phishing accounts for about 30% to 35% of all cybercrime reports to ReportCyber, with over 30,000 phishing reports per year. Phishing is where attackers send fake emails or SMS that look like they are from trusted organisations like MyGov, ATO, Australia Post, Commonwealth Bank, Microsoft 365 or Telstra, tricking people into clicking malicious links and entering credentials. The second most common is online shopping and online banking fraud, including fake online stores and investment scams, which caused losses over $500M. Business Email Compromise is the most financially damaging, where attacker compromises business email and sends fake invoice with changed bank details, average loss $30,000 and total losses over $100M per year. Identity theft and data breach extortion, like the Optus and Medibank breaches, are also major. Ransomware is less common by volume but most damaging for businesses, with about 300 to 400 major ransomware incidents reported per year, average ransom $50K for small business and downtime 21 days. For individuals, most common is phishing SMS about toll fees, parcel delivery and bank verification, with toll scam Links like Linkt being extremely prevalent in 2024-2025. ACSC says 90% of cyber incidents start with phishing and human error, so most common cybercrime is email and SMS phishing.