Australians are embracing new forms of digital finance products and services, which includes purchasing cryptocurrencies and non-fungible tokens (NFTs). There has been an increase in investment scams associated with cryptocurrencies. In this article, we sought to understand from cryptocurrency and NFT investors, who is vulnerable and what vulnerabilities exist. We surveyed 745 Australians aged 18 and over who have purchased cryptocurrencies or NFTs. We used sociological perspectives of consumer vulnerability that focus on internal and external factors to analyse our findings. We found that both socioeconomic advantaged and disadvantaged Australians are vulnerable. The vulnerabilities include concerns over security, unsolicited advice, limited options for learning, and insufficient financial and IT literacy. The findings suggest that online financial education is needed from trusted independent sources to help combat scams and to keep Australians and their crypto assets safe. We recommend that more opportunities to educate individuals about alternative forms of financial products are offered in compulsory, vocational and higher education settings.