Australian cybercrime and digital forensics
A phone, a USB device and an online threat feature in three recent AFP updates. Together, the releases offer a useful view of digital evidence at different stages of the criminal process.
The Australian Federal Police published three relevant updates between 20 and 23 October 2026. Two describe social media investigations in which devices were seized for forensic examination. The third records a conviction and sentence for an online threat against a foreign embassy.
The distinction between those stages matters. A charge records an allegation. A guilty plea and conviction record a different outcome. Reading each release on its own terms gives a clearer account of what has actually been established.
20 October: phone and USB seized in Mount Colah
In its 20 October release, the AFP reported that National Security Investigations officers had charged a 73-year-old northern Sydney man with four counts of publicly displaying prohibited Nazi symbols.
The investigation began in June after a report about an online user allegedly publishing prohibited symbols and antisemitic comments. The AFP said investigators searched a Mount Colah home and seized electronic devices, including a mobile phone and USB, for forensic examination.
The man was granted conditional bail to appear in Hornsby Local Court on 11 November 2026. These are charges, with the allegations still to be determined through the court process.
22 October: a separate social media investigation
A separate AFP release published on 22 October reported six charges against a 45-year-old NSW woman for allegedly displaying prohibited Nazi symbols on social media.
The AFP said its investigation began in August following a report about an account allegedly publishing prohibited symbols and antisemitic material. Investigators searched a Point Frederick home on the NSW Central Coast and seized a mobile phone for forensic examination.
The woman was served with a court attendance notice for Gosford Local Court on 3 December 2026. The AFP described the two social media investigations as unrelated.
23 October: an online threat reaches sentencing
The AFP's 23 October update concerns a completed prosecution at a different stage. A 47-year-old Sydney man was convicted and sentenced by Penrith Local Court to a nine-month recognisance order for an online threat directed at a foreign embassy in Australia.
The AFP said the investigation began in June following a report from a foreign law enforcement partner. The man was arrested at a Colyton home on 9 July and later pleaded guilty to using a carriage service to make a threat to cause serious harm.
A recognisance order is the outcome reported here. The release does not describe a nine-month prison sentence.
What the releases establish about digital evidence
The two social media cases expressly identify devices retained for forensic examination. They place that examination within a wider investigation that began with a report about online activity.
Our reading is that the useful connection across these updates is the progression from online conduct to investigation and, in the separate threat case, a recorded court outcome. Each stage answers a different question: what was reported, what police allege and what a court has determined.
The AFP releases identify device seizures and procedural outcomes. They leave the examination tools, recovered artefacts and technical findings unspecified. The public record therefore supports an account of the investigative steps, while detailed claims about particular software or extraction results would require further evidence.
Read the primary sources
- NSW man charged for allegedly displaying Nazi symbol on social media platforms, AFP, 20 October 2026.
- NSW woman charged for allegedly displaying Nazi symbol on social media platforms, AFP, 22 October 2026.
- Sydney man sentenced for online threat against foreign embassy, AFP, 23 October 2026.
Prepared from the AFP releases available on 27 October 2026. Court dates are those reported in the releases.