ATO scams: how to spot a fake tax office text, email or call
Quick answer
Scammers pretend to be the ATO or myGov to steal your login and tax file number. The ATO says it never sends a link by SMS or email to log in, and won't ask for your TFN or bank details by email. Don't click; type ato.gov.au or my.gov.au yourself.
- Comes by
- Text, Email, Phone call
- Pretends to be
- Australian Taxation Office
- Last updated
How it works
Scammers send emails and texts that look like they're from the ATO or myGov, about a refund or a problem with your account. The link takes you to a fake login page.
Some call as well, claiming you owe tax and demanding payment. The ATO says its calls show as No Caller ID, and you can check a call with the Verify a call feature in the ATO app.
Red flags
- A text or email with a link to log in to ATO or myGov
- A request for your TFN, bank details or myGov login by email
- An email address that doesn't end in ato.gov.au
- A demand to pay a tax debt immediately
- Threats of arrest or penalties
Example message
ATO: You have a tax refund waiting. Log in to myGov to claim it: [link]
What to do
- 1
Don't click or call back
Don't open links, attachments or call numbers in the message.
- 2
Go to the source yourself
Type ato.gov.au or my.gov.au into your browser, or use the ATO app.
- 3
If you paid or shared details, call the ATO
The ATO has a scam line; find the number on its website. Services Australia also runs a Scams and Identity Theft Helpdesk.
- 4
Contact your bank
Report the payment as fraud to the bank you sent it to and change your myGov password.
- 5
Report it
Use the ATO's report a scam form. Report cybercrime to the Australian Cyber Security Centre.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers use names, mobile numbers and emails collected from breaches and data brokers to send these at scale. Serus finds the data brokers and people-search sites that list you and removes you from them, and alerts you when your details show up in a breach, so fewer scammers can build a convincing message about you.
Frequently asked
Does the ATO send SMS with login links?
No. The ATO says it never sends an SMS or email with a link to access online services.
How do real ATO calls appear?
The ATO says its calls show as No Caller ID.
Where do I report ATO scams?
Use the ATO's report a scam form; scams not impersonating the ATO go to Scamwatch.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
