Every tax time brings a wave of ATO and myGov impersonation scams, and this year's wave is running at full height. Scamwatch and the ATO have both issued fresh warnings, and the fakes are no longer full of typos and strange grammar. Some are pixel perfect.
What the scams look like
The classic is an SMS or email that looks like the ATO or myGov: a refund waiting for you, a compliance problem with your return, or an account that needs urgent verification. The link leads to a counterfeit myGov sign in page, and the moment you type your credentials, someone else has your tax accounts. From there they can redirect refunds, lodge fraudulent returns in your name, or harvest enough identity data to open accounts elsewhere. Phone versions exist too, complete with threats of arrest that the real ATO never makes.
One rule beats them all
Never open myGov or ATO services through a link in a message. The real ATO and myGov may notify you that something is waiting, but you should always get there by typing the address yourself or using the official app. Adopt that single habit and every link based scam bounces off you, no matter how convincing the message.
Quick checklist
- The ATO will not send links asking you to sign in, and will not demand payment by gift card or crypto, ever.
- Never share your myGov sign in details with anyone, including anyone claiming to be helping you lodge.
- Unsure whether contact is real? Hang up or do not click, then call the ATO's dedicated scam line on 1800 008 540.
- Clicked something? Change your myGov password immediately, call the ATO, and if bank details were entered, call your bank. Report it to Scamwatch as well.
Business owners: forward this to your team. The person doing your invoicing with access to your accounts is exactly who these messages are hunting.