Show download pdf controls
  • Online security

    We take the security and privacy of your personal information very seriously. We have steps in place to ensure your data and online transactions with us are secure and safe.

    Of course, you can also help ensure your online transactions with us are safe by taking some simple precautions.

    If you suspect an ATO-related scam or fraudulent activity, you can report your concern to us.

    Find out about:

    See also:

    How we protect you

    We keep your personal information safe by:

    • confirming your details when you contact us (as a precaution)
    • having a range of systems and controls to ensure your data and transactions with us are secure
    • logging all accesses to your personal information (to identify any unauthorised behaviour).

    To help you stay safe online, we will not:

    • ask you for your tax file number (TFN) or bank details via email or SMS
    • contact you via social media like Facebook or Twitter to ask for your personal information
    • send you an email from an unsolicited email address
    • provide your personal information to anyone without your consent, unless the law permits us to do so
    • communicate with you on behalf of another government agency.

    What you can do to stay safe online

    • Be cautious when clicking on hyperlinks embedded in SMS and emails. Do not click on links or attachments in emails from unknown sources.
    • Always access our online services via or or the ATO app.
    • If you are unsure about the legitimacy of a myGov notification you have received, go directly to the myGov homepageExternal Link, sign in, then check your myGov Inbox for messages. If the notification in question is not there, phone us.
    • Keep your TFN and passwords secure. Don't share your password with others. Never reply to emails with your password or other sensitive information (such as your TFN) – including to prospective employers. We recommend you change your passwords regularly.

    See also:

    How to report ATO-related scams

    If you suspect an ATO-related scam, you can phone us on 1800 008 540 to report it. This includes instances where:

    • you're unsure of the legitimacy of a communication claiming to be from the ATO
    • you've received fraudulent communication (claiming to be the ATO or on behalf of the ATO)
    • you think you have been a victim of a tax-related scam.

    To report an SMS or email scam, forward the entire email or SMS screenshot to

    If your TFN has been stolen or you suspect misuse, phone us on 1800 467 033 between 8.00am and 6.00pm, Monday to Friday.

    If you want to report a cybercrime, visit the Australian Cybercrime Online Reporting Network (ACORN)External Link website. Remember to keep any relevant information about the incident in case police need to contact you for evidence.

    Security for digital service providers

    We have specific security measures around where and how data is stored, accessed and transferred.

    We are developing a set of security requirements for digital service providers to safeguard the integrity and security of the digital taxation and superannuation system.

    The requirements for using our digital services vary for each digital service provider. They are based on the risk of the data they access, the number of users they have and the way they operate. It will be mandatory for users of cloud-based software to use multi-factor authentication.

    Last modified: 05 Mar 2018QC 40958