ATO Email Scam Reports Surge 300%: Protect Your Identity Now

3-min Read4 Comments

  • ATO Scams
  • Identity Protection
  • Tax Time Security

ATO impersonation scams are rising fast, especially during tax time. Learn how to protect your personal and business data from financial and reputational harm.

ATO Scam Emails Are on the Rise — Are You Prepared?

As tax time rolls around, scammers are ramping up their efforts to exploit busy Australians and small businesses. According to the ATO, email scam reports have risen by over 300% compared to the same time last year. These phishing attempts often appear during the end-of-financial-year period — a time when you’re likely distracted and expecting communication from the ATO.

Why Scammers Target Tax Time

Tax season is a prime opportunity for scammers. You’re receiving legitimate ATO correspondence, managing EOFY reporting, and possibly under stress. Scammers exploit this by sending fake emails, SMS messages, and social media prompts designed to look like official ATO communication.

Their goal? To collect personal information, such as your Tax File Number (TFN), bank details, and ATO login credentials. Once they have your identity, they can commit fraud in your name — and it can take months (or longer) to recover.

3 Simple Steps to Stay Safe This Tax Season

  • STOP: Never share your myGov or ATO online service credentials. Only provide your TFN or bank info if you’re sure who you’re dealing with.
  • CHECK: Pause before clicking any link or QR code. Ask yourself — is this really from the ATO? If you’re unsure, call them directly.
  • PROTECT: If something feels wrong or you spot unusual activity in your ATO or banking accounts, act immediately and report it.

What the ATO Will and Won’t Do

  • May send: An email or SMS asking you to contact them — but never with links asking for login details or personal info.
  • Will NEVER:
    • Ask you to click a link or scan a QR code to verify or update your details.
    • Request payments or documentation via Facebook, Instagram, LinkedIn, or X.
    • Send unsolicited messages demanding your TFN, passwords, or bank details.

Why This Matters for Business Owners

Protecting your business means protecting your people. If your team shares sensitive data with scammers, the consequences could include:

  • Financial theft and fraudulent transactions
  • Reputational damage if client data is compromised
  • Lengthy recovery periods to restore identity and accounts

That’s why scam awareness isn’t just a personal responsibility — it’s part of running a secure business.

How to Respond to a Suspected Scam

  • Don’t reply or click any links.
  • Report it immediately: Visit the ATO’s official scam reporting page or call 1800 008 540.
  • Alert your bank: If you’ve shared financial details or notice suspicious transactions.

Final Reminder

Scammers are counting on you to be busy and distracted. Take the time to double-check every message, especially at tax time. Trust your instincts — if it feels off, it probably is. The best defence against identity fraud is awareness and quick action.


Comments from our readers

C
Checketts

More awareness needed

While the article is informative, it lacks specific examples of scams. More detailed scenarios could help readers better identify potential threats and protect themselves.

H
Hazel

Tax time scams

Great article! It's crazy how scammers ramp up during tax season. Definitely going to be more vigilant this year. I'll remind everyone in my network to watch out for dodgy emails and messages!

A
Abruzzo

Great advice

Thank you for this timely reminder! It’s crucial for all of us, especially small business owners, to stay vigilant against scams during tax season. I appreciate the clear steps outlined here – they’re very helpful in ensuring we protect our personal information. Keep up the good work!

A
Anonymous

Scam awareness vital

This article outlines critical strategies for mitigating the rising threat of ATO scams, particularly during peak tax periods. It highlights the importance of vigilance and proactive measures for both individuals and businesses, underscoring that investing in scam awareness and training can significantly reduce vulnerability to identity theft.