ATO logo

Protect your practice from cyber threats

Tax professionals are being targeted by cyber criminals via malicious links in emails, attachments and other communications

Last updated 27 August 2026

We recently issued an alert to Tax Practitioner Stewardship Group members about an emerging fraud event affecting a small number of tax professionals systems. ATO systems were not compromised.

The threat was identified early, and we have since provided support to the small number of agents affected.

While the event is contained, we are still seeing evidence of attempted threats to tax agent systems, not just through links in CVs as initially reported. We are continuing to monitor and respond to the activity and support those impacted. It is critical that all tax professionals stay vigilant and exercise good cyber security practices.

Actions you should take to guard against cyber threats

There are some simple steps you can take to protect your systems and information from cyber criminals, including:

  • installing anti-virus software on your system and making sure you keep it up to date – more information on anti-virus software is available on Antivirus softwareExternal Link page on Cyber.gov.au
  • being cautious when opening links or attachments, or downloading files from unexpected or unknown sources
  • independently verifying suspicious communications using trusted contact details
  • using multi-factor authentication (MFA) across your devices and services
  • keeping your devices, apps and software up to date – see the  How to update your device and softwareExternal Link page on Cyber.gov.au for more information
  • regularly backing up important business data and testing your ability to restore it.

And always remember, cyber security is as important when working from home as it when working from the office.

For more practical tips, visit Top cyber security tips for businesses and tax professionals (or search QC50563 on the ATO website).

What to do if you think your systems have been compromised

Turn your device off immediately and seek support either through an IT specialist or the Small Business Cyber Security Centre to identify any malicious programs.

Where you think clients may have been affected, contact the ATO's Client Identity Support Centre on 1800 467 033. Early engagement can help minimise harm, protect client information, and support a timely resolution.

You can also contact IDCARE for free and confidential advice on 1800 595 160 or through IDcare.orgExternal Link

Support and more information

QC107942