Tax Time Scam Alert: $48K Lost to ATO Impersonators in WA

• Tax Scams
• Cybersecurity
• Consumer Protection WA

Consumer Protection WA warns of a spike in tax scams as EOFY nears, urging residents to safeguard their myGov and ATO accounts.

WA Residents Warned as Tax Scams Surge at End of Financial Year

With the 2024–25 financial year drawing to a close, Consumer Protection WA is sounding the alarm over a growing number of tax scams targeting Western Australians. According to WA ScamNet, scammers have stolen more than $48,000 from seven victims this financial year—nearly double the losses reported the previous year.

How the Scams Work

Scammers are gaining access to victims’ myGov and Australian Tax Office (ATO) accounts, either by hacking directly or through credentials stolen in third-party data breaches. Once inside, they lodge fake tax returns and redirect refunds to their own accounts.

In some cases, victims are tricked into revealing their credentials via phishing emails or texts, claiming things like:

• “You are due to receive an ATO Direct refund”
• “You have a new message in your myGov inbox – click here to view”

Other scams involve phone calls—sometimes robocalls—from individuals impersonating ATO officials. These scammers may demand urgent payment or claim to be correcting errors in your account.

Commissioner’s Advice: ‘Practice the Pause’

Commissioner for Consumer Protection, Trish Blake, emphasises the importance of slowing down when contacted unexpectedly. “Regularly changing strong passwords and enabling Multi-Factor Authentication (MFA) creates a crucial second barrier,” she said.

She also reminded the public that the ATO and myGov will never:

• Send emails or texts with hyperlinks or ask for login or bank details
• Use pre-recorded voice messages or threaten immediate arrest
• Request payment via gift cards or cryptocurrency

Tips to Avoid Tax Scams

Protect Against Hacking

• Change passwords regularly and use strong, unique combinations
• Use a passkey like facial recognition or fingerprint authentication
• Update your myGov settings to sign in using a username rather than an email or mobile number
• Enable MFA using SMS or the myGov Code Generator app
• Monitor your online accounts regularly for unusual activity

Spot Phishing Attempts

• Delete unsolicited messages or emails that ask you to click links
• Legitimate myGov emails come from 'noreply@my.gov.au'
• Never share your myGov password or PIN

Handle Suspicious Calls

• Ask for the caller’s name, title, and purpose
• Call the ATO on 1800 008 540 to verify the contact
• Never give out financial details to unknown callers

What To Do If You're Targeted

If you notice suspicious activity or believe your myGov or ATO account has been compromised, call Services Australia's scam and identity theft helpline on 1800 941 126 immediately. If you've provided financial information, contact your bank or financial institution without delay.