Online security

Ensure your online security

Identity theft is one of the fastest growing crimes in the world. It has become more organised, sophisticated and widespread. The internet has facilitated the problem by allowing perpetrators to collect peoples' personal details.

Tips for protecting yourself online

• Ensure your computer has up to date security software. This includes anti-virus, anti-spyware, anti-spam and firewall protection which protects your computer from malicious programs. These programs are often carried in something that looks harmless such as an email, but can allow an intruder to access your computer without your knowledge. Ensure that this software is kept up to date, install any updates immediately to protect yourself from the latest threats, and allow a regular scan of your computer.
• Enable automatic updates for your computer's operating system and applications including your web browsers to ensure they remain up to date.
• Ensure you install and enable a firewall on your computer before connecting to the Internet.
• Download and regularly use a malware removal program.
• Use discretion and common sense when using the Internet. Don't click on online advertisements/emails or go to sites you think may be untrustworthy.
• Use a SPAM filtering product to help block fake or virus-related emails. If you receive a spam email, delete it. Do not open email attachments from unknown sources.
• When using social networking sites such as Facebook, Twitter and LinkedIn never publish personal information such as your date of birth, TFN, bank account details or personal contact details such as your home address. Remember to customise your security settings to ensure your profile is only accessible to those you trust.
• Never provide confidential personal information including your TFN when applying for work online. You should only provide this information to your employer once you commence work.

Tips for recognising and avoiding tax scams and fraud

You should be wary of unsolicited emails claiming to be from the ATO. Hoax emails and websites can look very convincing; however they are often poorly worded and contain spelling and grammatical mistakes. We have developed some simple tips that you should follow to protect yourself online against identity fraud:

1. Report emails that offer tax refunds in exchange for entering personal information

We can only calculate tax refunds after you have reported information to us about your financial activity for the year. Based on that information we automatically pay any refund due into your nominated bank account or send you a cheque. Any email that requests additional information before a refund can be released is a hoax.

2. Report emails which inform you that you owe us money or your account is in arrears and we will now be taking you to court

We will never email you with this information. Once we have processed your information, we will send you a notice or account statement to let you know of your total tax liability and if you owe money. This will also tell you when you need to make any payments.

If you are having difficulty paying your tax debt, it is important you contact us. If you fail to address your debt we will contact you via:

• phone - generally during normal business hours. We also make phone contact between 5.00pm and 8.30pm, which is more convenient for many people
• mail - this will be sent to the postal address we have on our records
• an external collection agency
• a personal visit.

We will never contact you about owning us money without sending out a notice or account summary. We will also not start any legal action until we have tried various other methods (including setting up a payment plan) to collect the money.

• Any email you receive which demands payment or advises we're taking legal action for the amount owed without us contacting your first, is a hoax.

If you have any questions about managing your debt please contact us on 13 11 42.

3. Always use our online services by visiting www.ato.gov.au

Following this practice ensures you are logging into the genuine ATO website. You will always be prompted to sign with your AUSkey before you can enter the Business, BAS, and Tax Agent Portals. If you aren't asked to do this, the website is a fake.

As an extra precaution we recommend you type internet addresses directly into your internet browser rather than clicking on links embedded in emails. You can also check the URL of the page you are visiting to ensure the site is genuine.

4. Make sure you keep your tax file number (TFN) and passwords secure

We recommend you change your passwords on a regular basis. Try using one that consists of a combination of numbers, letters (both upper case and lower case), punctuation, and special characters. Don't share your password with others and never reply to emails with your password or other sensitive information, including your TFN. Keep your password and TFN secure.

Read more about identify theft and your tax file number.