Tax Time Scam Alert: How to Protect Yourself from ATO Phishing

• Tax Scams
• myGov Security
• Phishing Alerts

As tax season approaches, learn how to protect your myGov and ATO accounts from scammers using phishing and impersonation tactics.

Tax Season Brings Spike in Scams: Here’s What You Need to Know

With tax time just around the corner, millions of Australians are gathering documents and preparing their tax returns. But this time of year also sees a sharp rise in tax-related scams. In the first four months of 2025 alone, over $119 million has been lost to scams, many exploiting the tax system and government platforms like myGov.

What is a Tax Scam?

Tax scams involve criminals impersonating trusted agencies such as the Australian Taxation Office (ATO) or myGov to steal your personal information or money. They often use phishing emails or texts to trick you into clicking malicious links or sharing sensitive data like your myGov credentials, bank details, or Tax File Number (TFN).

Key Tips to Avoid Tax Scams

• Verify the source: myGov emails always come from @my.gov.au. Don’t respond unless you're certain it’s legitimate.
• Avoid clicking links: Go directly to https://www.my.gov.au by typing the address into your browser.
• Beware of urgency or threats: Scammers pressure you with messages about suspension or urgent refunds. Stay calm and verify independently.
• Never share personal details: The ATO and myGov will never ask for your password, bank details, or TFN via text or email.
• Enable two-factor authentication (2FA): Add an extra layer of security to your myGov account with a second verification step.
• Educate others: Spread awareness among family and friends, especially those less familiar with online threats.
• Monitor your myGov activity: Regularly check linked services (ATO, Centrelink, Medicare) for unusual activity.

How to Report a Tax Scam

• To the ATO:
  • Call their scam line: 1800 008 540
  • Forward suspicious emails to: ReportScams@ato.gov.au
  • Send screenshots of phishing messages to the same address
• To the Australian Cyber Security Centre (ACSC) or the myGov Help Desk

What to Do If You’ve Been Scammed

• Immediately contact your bank or financial institution to stop further loss
• Contact IDCARE, Australia’s national identity support service, for a personalised response plan
• Be alert for follow-up scams that pretend to help you recover lost funds

Staying Scam-Safe at Tax Time

Customer-owned banks and financial institutions are reinforcing protections for their members through initiatives like the Scam-Safe Accord. You can take part by staying informed, being cautious online, and taking proactive steps to protect your personal data.