A Melbourne man charged as part of an international police takedown of a cybercrime platform has been ordered to pay $34,990 compensation for fraud-related offences.
The man, 21, was sentenced today (7 March, 2025) in Melbourne Magistrates' Court after pleading guilty on Monday (3 March, 2025) to seven charges.
In addition to the compensation order, the man was sentenced to an 18-month community corrections order to perform 200 hours of community service. He was also sentenced to three months' imprisonment to be served as a good behaviour order in the community under a Recognisance Release Order.
The man was a user of LabHost, a now defunct cybercrime platform allegedly marketed as a 'one-stop-shop' for phishing, which was brought down in April, 2024.
Phishing is a technique that criminals use to trick victims into providing personal information such as their banking logins, credit card details and passwords, often through fraudulent text and email links to seemingly legitimate websites.
The LabHost platform enabled cybercriminals to fraudulently replicate more than 170 websites of reputable banks, government entities and other major organisations, to trick unsuspecting victims into believing they were legitimate.
They would then send texts and emails to potential victims with a prompt to log in to their accounts via the fraudulent website and unwittingly provide sensitive personal information.
As part of the international takedown, an Australian-based operation coordinated by the AFP-led Joint Policing Cyber Crime Coordination Centre (JPC3) resulted in more than 200 investigators from the AFP and state and territory police execute 22 search warrants across five states.
Investigators took down 207 criminal servers and charged two men with cybercrime offences, including the Melbourne man.
The Melbourne man had fraudulently obtained the personal information of 11 victims, including birth dates, addresses and phone numbers, via a phishing scam. He then used the information from two victims to steal $34,990.
Following his arrest, investigators found a conversation on an encrypted messaging platform with images of multiple victims' personal information, including Medicare cards, passports, taxation notices and credit card details.
The man pleaded guilty to:
- One count of possessing identification information, contrary to section 192C of the Crimes Act 1958 (Vic);
- One count of using identification information to commit indictable offence, contrary to section 192B of the Crimes Act 1958 (Vic);
- One count of dishonestly obtain or deal with personal financial information belonging to another without their consent, contrary to section 480.4 of the Criminal Code (Cth);
- One count of attempting to obtain a financial advantage by deception, contrary to sections 82 and 321M of the Crimes Act 1958 (Vic);
- One count of obtaining a financial advantage by deception, contrary to section 82 of the Crimes Act 1958 (Vic); and
- One count of refusing to comply with a 3LA order, contrary to section 3LA(6) of the Criminal Code (Cth).
AFP Detective Acting Inspector Kris Wilson said the takedown of LabHost was a reminder of the impact a united, global law enforcement front could achieve.
"The AFP has proven experience in working side-by-side with our international and domestic law enforcement partners to take the fight to any type of criminal, or cybercriminal, who targets Australians," Det a/Insp Wilson said.
"Cybercriminals will use any tools and tricks to exploit people for their own profit - in this case, it is mimicking trusted websites to swindle a significant sum of money.
"We urge Australians to be wary of phishing scams and 'think before they click' - take your time when reading text messages and emails, look out for strange letters or symbols in hyperlinks and avoid any deal that seems too good to be true."
The JPC3 brings together Australian law enforcement and key industry and international partners to fight cybercrime and prevent harm and financial loss to the Australian community.
If you believe you are a victim of a phishing scam, or see any discrepancies in your bank account, please contact your bank and report the matter to Report Cyber.
We are committed to equipping all Australians with the knowledge and resources to protect themselves against cybercrime.
Watch our cybercrime prevention videos and protect yourself from being a victim of cybercrime.
If there is an immediate threat to life or risk of harm, call 000.
If you are a victim of cybercrime, report it to police using Report Cyber.
*The court ordered compensation is paid to the Victorian State Government victims of crime fund. Victims in relation to this matter can apply to be compensated for their loss from this victim of crimes fund.
