Be alert
Scammers impersonate the ATO via email, SMS, phone calls, social media, and fake websites. If you’re unsure it’s us, don’t engage.
You should:
- call 1800 008 540
- visit Verify or report a scam.
Stay up to date on the latest scam alerts by subscribing to our email or RSS updates (select the Online services category).
Learn how to protect yourself from scams. See:
- How to stay scam safe
- Top cyber security tips for individuals
- Top cyber security tips for businesses and tax professionals.
Misinformation
Misinformation is another online risk to watch out for. It can appear in AI overviews, search results, on websites and social media platforms, or in messages. It often contains false or misleading claims. While it may not be a scam, misinformation can still cause harm, especially if it leads you to make tax or super decisions based on incorrect or incomplete information.
It’s important to stay alert and consider the source of the information you see online. If something doesn’t seem right, check it against official government websites or speak to a trusted professional.
For more details, see Protect yourself from misinformation and disinformation.
Scam alerts
These alerts show some ATO, myGov and myID scams, but they don’t represent every type of scam:
- February 2026 – Cryptocurrency email scam
- October 2025 – DocuSign email scam
- November 2024 – ATO impersonation email scam
- March 2024 – myGov email impersonation scams.
February 2026 – Cryptocurrency email scam
We have received reports of a new email impersonation scam claiming you are holding cryptocurrency in a 'non‑KYC decentralised wallet'. The scammers are pretending to be from the ATO or myGov and are asking people to make an immediate declaration by calling the phone number on the email to avoid further action.
Some variations may also include small attachments that should not be opened.
The ATO will never:
- Email you demanding immediate disclosure of cryptocurrency or other assets.
- Threaten arrest, prosecution or legal action via email or SMS.
- Request payment or personal details through unsolicited communication.
What to do if you receive this message:
- Do not respond.
- Do not call the number.
- Do not provide any information.
- Do not open attachments.
- Report the email by forwarding it to ReportScams@ato.gov.au.
- If you have shared information or engaged with the sender, phone us as soon as possible on 1800 008 540.
The following image is an example of the format this scam can take.
October 2025 – DocuSign email scam
We have received reports of a new ATO impersonation email scam circulating in the community. The scam advises people they have an outstanding tax-related ‘DocuSign’ that requires action.
The scam looks like a real ‘DocuSign’ email, making it appear familiar and trustworthy to recipients who have used the platform previously.
Scammers attempt to trick recipients into clicking on the Review Document button by naming the document 'Declaration and Final Release'. The email also details (often in the subject line) tax-related text such as ‘notice of assessment’. This approach falsely implies the DocuSign is from the ATO and that we are holding the recipient's tax refund until this action is completed.
The following image is an example of the scam email.
If the recipient clicks on the Review Document button, an embedded link directs them to a fake myGov sign in page. This is designed to steal personal information, such as their myGov sign in credentials, name, date of birth and drivers licence details. Scammers then use this information to:
- commit refund fraud in their name
- access their myGov account to steal their tax refund
- steal their superannuation
- sell the personal identity to organised crime groups online.
The following image is an example of the fake myGov sign in page.
The ATO will never use DocuSign to finalise a tax refund.
If you receive an email like this, report it to us by forwarding the email to ReportScams@ato.gov.au, then delete it.
Remember:
- We will never send an unsolicited message that directs you to a log in page or ask you to send personal identifying information through SMS or email.
- Don’t click on links, open attachments or download any files from suspicious emails or SMS. We will never send an unsolicited SMS that contains a hyperlink.
- We will send legitimate email communication via ATO online services. You can check this by signing in to your myGov account. You can also contact your tax agent or us.
If someone claiming to be from the ATO contacts you and tells you are owed a refund, have a tax debt, or asks for your myGov sign in credentials, bank details or personal information such as your tax file number, it is likely a scam.
If you aren’t sure if it’s really the ATO contacting you, do not engage. Phone us on 1800 008 540 to check.
Learn more on how to protect yourself and stay scam safe.
November 2024 – ATO impersonation email scam
We received reports of a new email scam attempting to steal personal identifying information by return email.
Scammers pretending to be from the ‘Australian Taxation Office' or 'myGov’ are emailing and falsely telling people their taxable income has been recalculated and they are due to receive compensation. To claim the amount, people are asked to reply to the email with personal identifying information such as payslips, TFN, driver's licence and Medicare details.
Scammers use this information in a variety of ways to:
- commit refund fraud in your name
- access your myGov account to steal your tax refund
- steal your superannuation
- sell your identity to organised crime groups on the dark web or via other means.
Be aware, the sender's email address looks legitimate. The following image is an example of the format this scam can take.
If you receive an email like this, do not reply with any of your personal information.
To help protect yourself we remind you:
- We will never send an unsolicited message asking you to return personal identifying information through SMS or email.
- Legitimate email communication from us can be located in ATO online services. You can check this by logging into your myGov account. You can also contact your tax agent or contact us.
- If someone claiming to be from the ATO contacts you and advises that you have a debt or are owed a refund, or asks for your myGov sign in credentials, bank details, or your TFN, it is likely they are a scammer.
- Don’t click on links, open attachments or download any files from suspicious emails or SMS. We will never send an unsolicited SMS that contains a hyperlink.
- We are on FacebookExternal Link, InstagramExternal Link, XExternal Link and LinkedInExternal Link, but we will never use these social media platforms to discuss your personal information or documentation or ask you to make payments.
If you’re unsure if it’s really the ATO, don’t engage with them. Phone us on 1800 008 540 to check. You can report any suspicious contact claiming to be from the ATO to ReportScams@ato.gov.au.
March 2024 – myGov email impersonation scams
The ATO and Services Australia are warning the community to stay vigilant as we continue to receive a high number of phishing scam reports that impersonate government agencies.
In February, ATO branded emails containing links to fake myGov websites were the most commonly reported scam by the community. Approximately 75% of all email scams reported to the ATO over the past 6 months have linked to a fake myGov sign in page.
Scammers use fake myGov websites to steal your sign in credentials and gain access to your myGov account. Once the scammer has access, they can:
- make fraudulent lodgments in your name
- change bank details so that any payments are redirected to a scammer's account.
Scammers use different phrases to trick people into opening these links. Some examples are:
- 'You are due to receive an ATO Direct refund.'
- ‘You have a new message in your myGov inbox – click here to view.'
- 'You need to update your details to allow your Tax return to be processed.'
- 'We need to verify your incoming tax deposit.'
- 'ATO Refund failed due to incorrect BSB/Account number.'
- ‘Your income statement is ready, click on the link to view.’
The following images are examples of the format this scam can take.
The ATO and myGov will never send you an SMS or email with a link to access online services. These services should be accessed directly by typing ato.gov.au or my.gov.au into your browser.
Report any suspicious email or SMS contact claiming to be from the ATO to ReportScams@ato.gov.au, then delete it.
You can find out more about scams impersonating myGov at my.gov.au/scamsExternal Link.
Scams that are not impersonating the ATO, myGov or a Services Australia brand can be reported to ScamWatchExternal Link.