Australian whole-of-ecosystem framework imposing prevention, detection, disruption, reporting and response duties on designated sectors. Its scope covers scams affecting Australian consumers.

The main requirements are to implement governance and sector-code controls to prevent, detect, disrupt, report and respond to scams.

Fraud prevention and reimbursement answer different questions. Prevention aims to stop a harmful transaction; reimbursement allocates loss after it occurs. The distinction between an unauthorised transaction and a payment the customer authorised after being deceived can change the applicable rules, as can the customer's status and the payment rail used.

An investigation needs to reconstruct the instruction, authentication, warnings, recipient information and the parties' actions. Successful authentication can establish that credentials were used without proving that a customer understood the true purpose of a payment. Equally, a name-check result can confirm account details without establishing that an underlying invoice or investment is legitimate.

The practical framework connects controls before payment with fair and evidence-based handling of claims afterwards. Eligibility, exclusions, reimbursement limits and procedural requirements belong to the specific instrument. Those conditions should be kept separate from a provider's voluntary goodwill policy and from a commercial dispute with a legitimate merchant.

The instrument also addresses reporting and evidence: share intelligence, report scams and maintain internal dispute-resolution pathways.