By legislation

Scam laws, explained.

New rules in the US, the UK, the EU, Australia and Singapore target impersonation scams and put more responsibility on banks, telcos and platforms. See what applies where you operate.

Pick a region to read the guide

All legislation

Five regions, one direction.

Each guide covers who the rules apply to, key dates, penalties and what they mean for impersonation, in plain English.

A simplified summary as of October 2026, not legal advice.

Key dates

Scam rules are tightening everywhere.

Every region is moving the same way: more responsibility on banks, telcos and platforms to stop impersonation scams, and more need to show what you did.

Already in force to Oct 2026

  1. Feb 2024EUDigital Services Act applies to all online platforms
  2. Apr 2024USFTC Impersonation Rule takes effect
  3. Oct 2024UKAPP fraud refunds start for bank customers
  4. Dec 2024SGShared Responsibility Framework starts
  5. Mar 2025UKOnline Safety Act illegal content duties apply
  6. May 2026AUFirst sectors designated under the SPF

Coming next from Oct 2026

The common thread is evidence. Every case we handle comes with screenshots, timelines and an audit trail you can show a regulator.

See how takedown works →

Quick check

Which rules apply where you operate?

Pick a region for a one-minute summary. Each guide has the detail.

Where you operate

Somewhere else? Talk to us →

Australia

Scams Prevention Framework

In force · most duties from 31 Mar 2027
Who it covers
Banks, telcos and digital platforms first, with more sectors to follow.
What it means for impersonation
Covered businesses must prevent, detect, disrupt, respond to and report scams, including brand impersonation, and keep records to prove it.

A simplified summary as of October 2026, not legal advice.

FAQ

Common questions about scam laws.

Which laws deal with impersonation?

In the US, the FTC Impersonation Rule makes impersonating a business unlawful, and the FTC can seek penalties up to $53,088 per violation. Australia's new scam rules name impersonation scams directly. The UK, EU and Singapore tackle it through platform duties, scam ad rules and bank refunds.

Do these laws apply to my business?

It depends on your sector and where you operate. Most duties fall on banks, telcos and online platforms, but any brand that gets copied is affected. Each guide has a quick check to see if you're covered.

Is this legal advice?

No. These pages are simplified summaries as of October 2026. Some rules are still in draft, so check the official sources linked on each page and speak to your legal team.

How does Unphish help?

We detect, disrupt and document impersonation scams. Every case comes with screenshots, timelines and an audit trail, so you have a clear record of what was found and what was taken down.

What's changing next?

In the US, the FTC is consulting on platform ad tools in November 2026. Singapore's scam ad rules for social media apply from January 31, 2027, Australia's main scam obligations start on March 31, 2027, Ofcom's final UK scam ad codes are expected in 2027, and the EU Payment Services Regulation is expected to apply around 2028.

Do you cover other countries?

Yes. We take down threats wherever they're hosted. These guides cover five regions with major scam rules, and we're happy to talk through others.

See Unphish in action

Get ready for the next rule change.

Book a demo to see how Unphish keeps the evidence regulators ask for, or read our guide to the FTC Impersonation Rule.