By legislation

Scam laws, explained.

New rules in the UK, the US, Australia, the EU and Singapore put more responsibility on banks, telcos and platforms to stop impersonation scams. See what applies where you operate.

Pick a region to read the guide

All legislation

Five regions, one direction.

Each guide covers who the rules apply to, key dates, penalties and what they mean for brand impersonation, in plain English.

A simplified summary as of October 2026, not legal advice.

Key dates

Scam rules are tightening everywhere.

Every region is moving the same way: more responsibility on banks, telcos and platforms to stop impersonation scams, and more need to show what you did.

Already in force to Oct 2026

  1. Feb 2024EUDigital Services Act applies to all online platforms
  2. Apr 2024USFTC Impersonation Rule takes effect
  3. Oct 2024UKAPP fraud refunds start for bank customers
  4. Dec 2024SGShared Responsibility Framework starts
  5. Mar 2025UKOnline Safety Act illegal content duties apply
  6. May 2026AUFirst sectors designated under the SPF

Coming next from Oct 2026

The common thread is evidence. Every case we handle comes with screenshots, timelines and an audit trail you can show a regulator.

See how takedown works →

Quick check

Which rules apply where you operate?

Pick a region for a one-minute summary. Each guide has the detail.

Where you operate

Somewhere else? Talk to us →

Australia

Scams Prevention Framework

In force · most duties from 31 Mar 2027
Who it covers
Banks, telcos and digital platforms first, with more sectors to follow.
What it means for impersonation
Covered businesses must prevent, detect, disrupt, respond to and report scams, including brand impersonation, and keep records to prove it.

A simplified summary as of October 2026, not legal advice.

FAQ

Common questions about scam laws.

Which laws deal with brand impersonation?

Australia's Scams Prevention Framework names impersonation scams directly. The US FTC Impersonation Rule makes impersonating a business unlawful. The UK, EU and Singapore tackle it through platform duties, scam ad rules and bank refunds.

Do these laws apply to my business?

It depends on your sector and where you operate. Most duties fall on banks, telcos and online platforms, but any brand that gets copied is affected. Each guide has a quick check to see if you're covered.

Is this legal advice?

No. These pages are simplified summaries as of October 2026. Some rules are still in draft, so check the official sources linked on each page and speak to your legal team.

How does Unphish help with compliance?

We find, verify and take down impersonation scams, and keep the evidence: screenshots, timelines and an audit trail for every case. That record helps show what you did to prevent, detect and disrupt scams.

What's changing next?

Singapore's scam ad rules for social media apply from 31 January 2027, most Australian SPF obligations start on 31 March 2027, Ofcom's final UK scam ad codes are expected in 2027, and the EU Payment Services Regulation is expected to apply around 2028.

Do you cover other countries?

Yes. We take down threats wherever they're hosted. These guides cover five regions with major scam rules, and we're happy to talk through others.

See Unphish in action

Get ready for the next rule change.

Book a demo to see how Unphish keeps the evidence regulators ask for.