Guide
Your consumer rights when software is sold to you in Australia
Software sold to consumers here comes with guarantees that cannot be signed away, and with limits on what a seller may claim. Both are worth knowing before you need them.
Quick answer
The Australian Consumer Law applies to goods and services supplied to consumers in Australia, including digital products and subscriptions, and including those sold by overseas vendors to Australian customers. It provides consumer guarantees — that what you bought is fit for purpose, matches its description and is of acceptable quality — and it prohibits misleading or deceptive conduct in trade. Those protections sit alongside a vendor's own terms, and a term in a contract cannot remove them. The ACCC is the national regulator; individual disputes are generally handled by state and territory consumer agencies.
The consumer guarantees, applied to software
Consumer guarantees are automatic. They are not a warranty a seller grants, and they do not depend on a receipt being filed correctly or on a policy being generous. Applied to a security product, the guarantees that come up most often are these.
- Acceptable quality
- The product should do what a reasonable person would expect of a product of that kind, at that price, given the way it was described. Software that will not install on the platform it was sold for, or that stops functioning because the vendor withdrew a component mid-term, is the kind of thing this guarantee addresses.
- Fitness for a disclosed purpose
- If you told the seller what you needed it for, or the seller's own material says it is for that purpose, it should be suitable for it. A product sold as covering five devices across named platforms should cover those devices on those platforms.
- Matching the description
- What is delivered should match what was advertised. Where a bundled component named on the sales page turns out to be unavailable in Australia, the description and the delivery have parted company.
- Services supplied with due care and skill
- Subscription services, including support, are services. This is the guarantee that is relevant when something is promised as part of the package and then not provided.
When a guarantee is not met, the remedy depends on how serious the problem is. For a major failure, the consumer generally chooses between a refund and a replacement; for a minor one, the supplier is usually entitled to put it right first. The ACCC's published material sets out that distinction, and it is the source worth reading before making a claim, because framing the request correctly changes the response.
Terms that try to remove a guarantee
A clause stating that a product is supplied "as is" with no warranties of any kind, or that all liability is excluded, does not remove the consumer guarantees for a consumer in Australia. Nor does the fact that a vendor is based overseas, if the supply was to a consumer here. The unfair contract terms rules for standard form consumer contracts are a separate protection again, and the ACCC publishes guidance on both.
Misleading claims, and why they matter in this category
The prohibition on misleading or deceptive conduct in trade applies to advertising, to product pages, and to anybody publishing promotional material — including affiliate publishers such as this site. It is not limited to statements that are literally false; an overall impression that misleads is enough, and an omission can do it.
In the security software category this shows up in familiar forms: protection described as complete or guaranteed, comparative claims with no method behind them, urgency created by suggesting a device is currently at risk, and prices presented in a way that obscures what renewal costs. A reader who encounters that pattern is looking at something that is a compliance problem for the advertiser, which is a reasonable signal about the seller more generally.
This is also the reason nothing on this site carries a rating, a test score or a detection percentage. We are a publisher in trade, the same standard applies to us, and a number we cannot substantiate is not one we should print.
Where to go, depending on what you want
Australian consumer agencies have distinct roles, and sending a matter to the wrong one costs weeks. This is the short version.
| What you want | Where it goes | What that body does |
|---|---|---|
| A refund, repair or replacement | The seller first, in writing | Most matters end here. Quote the guarantee you are relying on and what you want. |
| Help with an unresolved individual dispute | Your state or territory fair trading or consumer affairs office | Handles individual complaints and can often conciliate; escalation is usually to a state tribunal. |
| To report conduct that looks systemic | ACCC | Enforces the Australian Consumer Law nationally and uses reports to identify patterns. It does not resolve individual disputes. |
| To report a scam or a fraudulent charge | Scamwatch, and your bank immediately | Collects scam reports for the National Anti-Scam Centre and publishes guidance on what to do next. |
| To complain about how your personal information was handled | OAIC | Regulates privacy under the Privacy Act 1988 (Cth) and handles privacy complaints after you have raised them with the organisation. |
| To report a cyber incident affecting your devices or accounts | Australian Cyber Security Centre | Provides guidance and a reporting channel for cyber security incidents. |
Your privacy rights, briefly
Security software collects information about the device it runs on, and identity monitoring features involve handing over more. The Privacy Act 1988 (Cth) and the Australian Privacy Principles govern how organisations covered by the Act handle personal information, including a right to ask what is held about you and to have it corrected. Where information goes overseas — which is usual for vendors headquartered outside Australia — the Act imposes obligations on the disclosing organisation about that transfer.
The practical step is small: before enabling an identity monitoring feature, read what the vendor's privacy policy says it will do with the document numbers and addresses you are about to supply. If the answer is unsatisfactory, the feature is optional. The OAIC is where a complaint goes if raising it with the organisation itself does not resolve matters.
Making the complaint well
Complaints that succeed tend to look the same. They are in writing, they are short, they state the purchase, they state what went wrong, they name the guarantee relied on, and they say plainly what outcome is being asked for and by when. They do not threaten, and they do not recite the entire history. Attach the confirmation and the terms as they stood on the day of purchase — the reason to save that page rather than the link is that terms pages change, and the version you agreed to is the one that matters.