Tyro Health is aware of the recent article published in The Australian on 12th October 2025, regarding fraudulent activity involving stolen healthcare payment terminals. The article refers to incidents in Victoria where criminals physically stole terminals and used them to process unauthorised transactions.
Clarifying the Issue
The incidents described do not relate to Medicare Easyclaim or private health insurance claiming functionality. These claiming services continue to operate securely and we are not aware of any issues with these services.
The fraudulent activity instead involved a payments feature known as Unmatched Refunds, which allows refunds to be processed to a card other than the original payment card. This function, while legitimate and protected by PIN set by the practice administrator, was exploited when terminals were stolen from a small number of healthcare practices.
Tyro Health identified seven affected practices in Victoria. Once aware of the issue, Tyro immediately disabled the Unmatched Refund feature for all Tyro Health merchants, introduced additional fraud and risk controls, and supported impacted customers.
Our ongoing security measures
Tyro Health works continuously to strengthen the security of our payment and claiming systems. We have taken proactive steps in response to these incidents, including:
enhancing fraud detection and control mechanisms;
supporting law enforcement investigations; and
proactively providing guidance to healthcare providers on securing terminals and using strong device passwords.
We remind all merchants to keep terminals secured when unattended and to follow recommended security practices to reduce the risk of theft or misuse. Click here to read more about best practices.
Assurance to healthcare providers and patients
There has been no impact to Medicare Easyclaim, private health insurance claiming, or patient data. The fraudulent activity was limited to a small number of stolen terminals being used to process card payment transactions.
Tyro Health remains committed to supporting healthcare providers and maintaining the highest standards of payment and data security across our systems.
For any media enquiries, please contact media@tyro.com.
For any business questions, please contact Adrian Perillo, CEO Tyro Health (aperillo@tyro.com).