ato logo
Search Suggestion:

Scam alerts

Find information and examples on the latest tax and super-related ATO impersonation scams

Last updated 15 September 2024

Info Alert
The myGovID app is changing its name to myID
Soon myGovID will have a new name and look – but you'll use it the same way. Find out more at www.myGovID.gov.au/DiscovermyIDExternal Link.

Scam advice

Be wary of emails, phone calls and text messages claiming to be from the ATO.

If you think a phone call, SMS, voicemail, email or interaction on social media claiming to be from the ATO is not genuine, do not engage with it. You should either:

Stay up to date on the latest scam alerts by subscribing to our general email updates. You will also receive updates on all new general content on our website.

Latest scam alerts

March 2024 – myGov email impersonation scams

The ATO and Services Australia are warning the community to stay vigilant as we continue to receive a high number of phishing scam reports that impersonate government agencies.

In February, ATO branded emails containing links to fake myGov websites were the most commonly reported scam by the community and approximately 75% of all email scams reported to the ATO over the past 6 months have linked to a fake myGov sign in page.

Scammers use fake myGov websites to steal your sign in credentials and gain access to your myGov account. Once the scammer has access, they can make fraudulent lodgments in your name and also change bank details so that any payments are redirected to a scammers account.

Scammers use different phrases to trick people into opening these links. Some examples are:

'You are due to receive an ATO Direct refund'

‘You have a new message in your myGov inbox – click here to view”

'You need to update your details to allow your Tax return to be processed'

'We need to verify your incoming tax deposit'

'ATO Refund failed due to incorrect BSB/Account number'

‘Your income statement is ready, click on the link to view’

The following images are examples of the format this scam can take.

Scam alert for MyGov.

 

Scam alert for MyGov.

The ATO and myGov won't send you an SMS or email with a link to access online services. These should be accessed directly by typing ato.gov.au or my.gov.au into your browser.

Report any suspicious contact claiming to be from the ATO to be from the ATO to ReportScams@ato.gov.au.

November 2023 – Multifactor Authentication (MFA) email scam

We’re seeing an increase in reports about an email scam impersonating the ATO.

Scammers are emailing clients advising them that due to ATO security updates, they are required to update the multifactor authentication (MFA) on their ATO account.

The scam email includes a QR code which takes you to a fake myGov sign in page, designed to steal your myGov sign in details.

The images below are examples of what the scam may look like.

The ATO will never send you an email with a QR code or a link to log in to our online services.

If you receive an email like this, do not scan the QR code, click on links, open attachments or download files. Forward the email to reportscams@ato.gov.au, and then delete it.

You can report other types of scams to ScamwatchExternal Link or contact the Australian Cyber Security CentreExternal Link to report cybercrime.

Scam email and myGov sign in web page.

August 2023 – taxtime SMS and email scams

This tax time, we're receiving an increased number of reports about several ATO impersonation SMS and email scams.

These scams encourage people to click on a link that directs them to fake myGov sign in pages designed to steal their username and password.

Scammers use many different phrases to try and trick recipients into opening these links. These include (but are not limited to):

  • 'You are due to receive an ATO Direct refund'
  • 'You have an ATO notification'
  • 'You need to update your details to allow your Tax return to be processed'
  • 'We need to verify your incoming tax deposit'
  • 'ATO Refund failed due to incorrect BSB/Account number'
  • 'Due to receive a refund, click here to receive a rebate'

The images below are examples of the format this scam can take.

A scam SMS asking recipients to open a link to view their processed tax return.

A scam email telling recipients that they have an outstanding refund from myGov. It asks them to open a link to accept their refund.

Do not open any links or provide the information requested.

We won't send you an SMS or email with a link to log on to online services. They should be accessed directly by typing ato.gov.au or my.gov.au into your browser.

While we may use SMS or email to ask you to contact us, we will never ask you to return personal information through these channels.

Report any suspicious contact claiming to be from the ATO to ReportScams@ato.gov.au.

January 2023 – ATO social media impersonation accounts scam

We're seeing an increase in fake social media accounts impersonating the ATO, our employees and senior executive staff across Facebook, Twitter, TikTok, Instagram and other platforms.

These fake accounts ask users that interact with the ATO to send them a direct message so they can help with their enquiry.

The people behind these fake accounts are trying to steal your personal information, including phone numbers, email addresses and bank account information.

Our only official accounts are on FacebookExternal Link, XExternal Link, Instagram and LinkedInExternal Link.

The best way to verify that it's really the ATO is to:

  • check how many people follow the account. Our verified Facebook and LinkedIn accounts have over 200,000 followers, and our Twitter account has over 65,000 followers
  • check activity on the accounts. Our social media channels have been operating for around 10 years – if it's a newly created account, or only has a few posts, it's not us
  • look for the grey tick next to our username (@ato_gov_au) on X (@ato_gov_au) and the blue tick next to our name (Australian Taxation Office) on Facebook (Australian Taxation Office) and Instagram (@austaxoffice)
  • make sure any email addresses provided to you end with ‘.gov.au’.

The images below show examples of what impersonation accounts might look like.

A scam impersonation that shows a fake ATO Instagram account

A scam impersonation Twitter account that shows a recent join date and low number of followers.

If you're approached by an impersonation account, do not engage with them. Take a screenshot of the account, email the information to ReportEmailFraud@ato.gov.au and block the account through the social media platform's reporting function.

July 2022 – tax refund SMS scams

We're concerned about a high volume of SMS scams pretending to be from the ATO.

These scams tell you that you're owed an income tax repayment and ask you to click a hyperlink and complete a form.

Clicking the link takes you to a fake ATO webpage that asks for your personal identifying information, including your credit card details.

If you receive an SMS like this, don't click on any links. Report the scam to us.

The image below shows one example of what this scam can look like.

A scam SMS that says you are owed an income tax repayment, and asks you to click a hyperlink to complete a form

The real ATO won't send you an SMS with a link to sign in to our online services. We'll also never ask for your credit card details.

If you’re ever unsure whether it’s really the ATO, don’t reply. Phone us on 1800 008 540 to check. 

June 2022 – 2022 tax lodgment email scam

We're seeing an increase in email phishing scams claiming to be from the ATO.

These scams tell people their '2022 tax lodgment' has been received. The email asks them to open an attachment to sign a document and complete their 'to do list details'.

Opening the attachment takes you to a fake Microsoft login page designed to steal your login details. Entering your password could give the scammer access to your Microsoft account, allowing them to reset your passwords for other accounts like banking and online shopping.

If you get an email like this, don't click on any links or open any attachments. Forward the email to ReportEmailFraud@ato.gov.au, and then delete it.

The images below are examples of the format this scam can take.

A scam email telling recipients that their 2022 tax returns has been lodged and asking them to sign the document attached to the email.

A fake Microsoft login screen that asks recipients to enter their account details and password.

The real ATO won't send you an email or SMS with a link to sign in to our online services.

While we may use email or SMS to ask you to contact us, we will never send an unsolicited message asking you to return personal identifying information through these channels.

Remember to protect your passwords and update them regularly.

April 2022 – fake TFN/ABN application scams

We're seeing an increase in scams involving fake tax file number (TFN) applications.

These scams tell people they can help them get a TFN for a fee. But instead of delivering this service, these fraudulent websites steal the person's money and personal information.

These scams are often advertised on social media platforms like Facebook, Twitter and Instagram.

Applying for a TFN is free. Find out how you can apply for a TFN.

If you're applying for a TFN through a tax agent, always check they are registered with the Tax Practitioners BoardExternal Link.

The same goes for Australian business number (ABN) applications – never give out your personal information, unless you're sure of who you're dealing with.

February 2022 SMS and email scams – cryptocurrency

We’re receiving reports of cryptocurrency scams.

Scammers pretending to be from the ATO are telling people they are suspected of being involved in cryptocurrency tax evasion. They are then asking them to ‘connect their wallet’ and provide detailed information via a link.

If you receive an SMS or email like this, don’t click on the link. It will take you to a fake myGov log on page, designed to steal your personal information.

The image below is one example of the format this scam can take.

 This is a screenshot of a scam SMS that reads 'ATO: You are suspected in cryptocurrency Tax Evasion. Connect your wallet to provide detailed information, visit https://ato.gov.au.crypto'.

The real ATO won't send you an SMS or email with a link to sign in to our online services.

And while we may use SMS or email to ask you to contact us, we will never ask you to return personal information through these channels.

If you’re ever unsure whether it’s really the ATO, don’t reply. Phone us on 1800 008 540 to check.

Previous scam alerts

November 2021 phone and email scams – superannuation

We're concerned about an increase in scams involving fake superannuation investments.

Scammers are phoning and emailing people, pretending to be financial advisers or super experts. They are encouraging people to invest their super in a supposedly high performing self-managed super fund (SMSF).

These scammers will start by asking you for some information and may ask you to do a super comparison online. They are likely to be persistent and may contact you multiple times.

Sometimes, they will fraudulently use the name and Australian Financial Service Licence (AFSL) of a real business and set up a fake website to appear legitimate.

They will tell you there is no need for you to engage directly with the ATO, ASIC or any other tax or super professional.

If you agree to invest, they will transfer your super into bank accounts they control and disappear with it.

If you provide them with enough personal information (even if you don’t agree to invest), they may use this to transfer your super from your existing account without you knowing. Ultimately, stealing your super savings.

Always check who you are dealing with before providing any personal or financial information.

Be cautious about anyone who contacts you with unsolicited financial advice:

  1. Check ASIC's Professional registersExternal Link to make sure they are licensed professionals.
  2. Conduct an online search to independently verify their identity and to see if there are any reviews or indications of scam activity related to their website, email address or phone number.
  3. If in doubt, check with another registered tax professional.

If you receive an SMS, email or letters from the ATO about an SMSF that you did not establish contact us on 13 10 20 immediately.

ASIC has more information about how to recognise and report super scamsExternal Link.

November 2021 phone scam – fake tax debt

We're reminding people to look out for phone scams about fake tax debts.

Scammers pretending to be from the ATO are calling people and telling them they have a tax debt that they need to pay straight away.

We will use phone, email and SMS to contact you. But we will never:

  • send a pre-recorded message to your phone
  • threaten you with immediate arrest
  • demand payment through unusual methods like gift cards or payments to personal bank accounts
  • insist you stay on the line until a payment is made.

Phone calls from the real ATO will show up as 'No caller ID' on your phone. 

If you're ever unsure whether it's really the ATO, do not reply. You should phone us on 1800 008 540 to check.

We have more information on how you can identify and report tax and super scams.

October 2021 email scam – update your financial information

We're receiving reports about a new email scam impersonating the ATO.

Scammers are sending emails telling people they will receive a tax refund. They ask them to update their financial information on an attached form to process the refund.

The image below is an example of the scam email.

scam alert - coronavirus jobkeeper payments We are currently checking all claims made through the Coronavirus JobKeeper Payments / Backing Business Incentive Scheme. In order to complete all checks we kindly ask you to reply to this email with the following information: a clear, high-resolution photo (scane of your driver's licence (front & back); a clear, high-resolution photo (scan) of your Medicare Card (front & back).

If you receive an email like this, delete it. Don't open the attachment or click on any links.

If you receive a message from the ATO asking for your personal information, phone us on 1800 008 540 to make sure it's legitimate. If you think it's fraudulent, report it by sending an email to reportemailfraud@ato.gov.au.

You should never give out your personal information unless you are sure of who you are dealing with.

August 2021 phone scam – new payment methods

We're receiving reports of scammers demanding money by new methods.

This includes things like:

  • ‘cardless cash’ ATM withdrawals
  • retail gift cards, such as JB hi-fi, Myer and Woolworths
  • courier services who collect the cash payments
  • cash delivery made in person at a pre-determined public location.

Scammers are trying to trick people into making payments by pretending to be from the ATO and other agencies, such as the Australian Federal Police.

They might tell you that your TFN has been suspended or compromised due to money laundering or other illegal activity, or that you owe a debt.

The real ATO will never demand payment by these methods. You should always check legitimate ways to pay a tax debt on our website before making a payment.

If you have paid money to a scammer through one of the methods listed above or are concerned about your personal safety, report it to your local police straight away and specify all the details.

We also strongly encourage you to contact your financial institution immediately. In some cases, they may be able to stop a transaction or close your account if the scammer has your account details.

Remember, if you’re ever unsure whether an ATO contact is genuine, hang up and phone us on 1800 008 540 to check.

See How to pay for legitimate ways to pay a tax debt.

May 2021 email scam – update your myGovID details

We’re receiving reports of a new email scam that asks people to update their myGov or myGovID details.

Scammers pretending to be from the ‘myGov customer care team’ are sending emails telling people they need to verify their identity by clicking on a link.

The image below is one example of the format this scam can take.

 Scam alert - update your myGovID details Dear myGov user This is a notification email only. Please do not reply to this email as this mailbox is not monitored. This is a message from the myGov Team. Australian Government and myGov must verify your identity. What should I do? Follow the safe link below and update your information. Need help? Contact support or visit our Help Center. Best regards, myGOv Customer care.

Don’t click any links and don’t provide the information requested.

The link goes to a fake myGov sign in page designed to steal your personal information, including your passport and driver’s licence details.

You will get email or SMS notifications from myGov whenever there are new messages in your myGov Inbox. However, these messages won't include a link to sign in to your myGov account.

Always access our online services directly via one of the following:

  • my.gov.au
  • ato.gov.au
  • the ATO app.

When downloading the myGovID app, make sure it's from either the Apple App Store or the Google Play Store.

If you receive an SMS or email that looks like it’s from myGov but it contains a link or appears suspicious, you can report it to ScamWatch. If you have clicked on a link or provided your personal information, you can contact Services Australia’s Scams and Identity Theft Helpdesk on 1800 941 126.

February 2021 phone scam – suspended TFN

We are receiving increasing reports of people losing money to automated phone scams.

Scammers pretending to be from the ATO tell people their tax file number (TFN) has either been:

  • suspended due to illegal activity
  • compromised by a scammer.

They request the call recipient either pay a fine to release their TFN or transfer all bank funds into a holding account to protect it from future misuse.

We:

  • do not suspend TFNs
  • will never request you pay a fine or transfer money in order to protect your TFN pending legal action.

Phone calls from us do not show a number on caller ID. We will never send unsolicited pre-recorded messages to your phone.

If you receive a phone call like this, hang up and do not provide the information requested.

If you’re unsure whether an ATO contact is genuine, phone us on 1800 008 540 to check.

An example of this type of scam is Audio recording of suspended TFN scam (MP3, 82KB)This link will download a file

October 2020 email scam – JobKeeper and backing business investment claims

We are receiving reports of email scams about claims for JobKeeper and Backing Business Investment.

The fake emails say we are investigating your claims. They ask you to provide valuable personal information, including copies of your driver’s licence and Medicare card.

The image below is one example of an email scam currently circulating.

Do not provide the information requested, do not click on any links and delete the email straight away.

scam alert - coronavirus jobkeeper payments We are currently checking all claims made through the Coronavirus JobKeeper Payments / Backing Business Incentive Scheme. In order to complete all checks we kindly ask you to reply to this email with the following information: a clear, high-resolution photo (scane of your driver's licence (front & back); a clear, high-resolution photo (scan) of your Medicare Card (front & back).

If you receive a message from the ATO asking for your personal information, phone us on 1800 008 540 to make sure it's legitimate. If you think it's fraudulent, report it by sending an email to reportemailfraud@ato.gov.au.

You should never give out your personal information unless you are sure of who you are dealing with.

September 2020 phone and SMS scams – fake tax debt

We are concerned about the increasing number of people paying fake tax debt scammers.

Scammers pretending to be from the ATO are contacting members of the community, telling them that they have a tax debt and that if they do not pay it straight away they will be arrested.

These scammers will often request payment through unusual methods, such as cryptocurrency, pre-paid credit cards or gift cards. They will try to keep people on the line until they have paid.

If you receive a phone call, text message or voicemail like this, don't send payment or provide any personal information. Hang up and delete the message.

We will never:

  • threaten you with immediate arrest
  • demand payment through unusual methods.

If you are not sure if it's the ATO contacting you, phone us on 1800 008 540 to check.

It's also a good idea to know your tax affairs. You can:

  • log in to ATO online services through myGov to check your individual tax affairs
  • log in to Online services for business to check your business tax affairs
  • contact your tax or BAS agent
  • contact us.

July 2020 SMS and email scams – verify your myGov details

We are receiving increasing reports of several myGov-related SMS and email scams. These scams look like they have come from a myGov or ATO email address. They also might appear in your legitimate ATO or myGov SMS message thread.

The image below is one example of an SMS scam currently circulating.

Don’t click any links and don’t provide the information requested.

Image of the word Scam advising to log into your account to verify details to ensure your account is secure. Do this via bit.ly/myGovhelp within 24 hours or account will be locked.

You will get email or SMS notifications from myGov when there are new messages in your myGov Inbox. However, these messages won't ask you to click on a link to sign in to your myGov account.

Always access our online services directly via one of the following:

  • my.gov.au
  • ato.gov.au
  • the ATO app.

All online management of your personal tax affairs should be done in ATO online services, accessed through your genuine myGov account.

Any communications containing your personal information, such as your tax file number (TFN), will be sent to your myGov Inbox and not your email account.

You can make accessing your myGov account more secure by opting to receive a security code via SMS. It’s a quick and secure way to sign in to access ATO online services.

If you receive an SMS or email from the ATO that you think is fraudulent, report it by sending an email to reportemailfraud@ato.gov.au.

If you receive an SMS or email that looks like it’s from myGov but it contains a link or appears suspicious, email reportascam@servicesaustralia.gov.au.

If you have clicked on a link or provided your personal information, contact Services Australia on 1800 941 126.

QC53447