Scammers are pretending to be the ATO and myGov. Here's what suspicious emails or texts may look like

Australia Broadcast Center

09-07-2025

Tax time is prime season for scammers.
It's a period where we're rushing to get our affairs in order, waiting to hear from the government about debts we'll have to pay, or refunds we'll receive.
Scammers know this and are poised to capitalise on the eagerness and financial anxiety many of us feel around the end of the financial year.
Here's how to tell whether myGov and ATO texts or emails are legitimate — and how to keep your information safe.
Tax time scams often come in the form of phishing emails, texts or phone calls from scammers posing as the ATO or myGov.
"Their goal is to trick people into clicking malicious links or handing over sensitive information," says Tyler McGee, from online protection company McAfee.
"With this information, scammers can commit identify theft, access your myGov account to redirect tax refunds, Centrelink payments or superannuation, or even lodge false tax returns in your name."
This is all done by offering a link in an email or text that leads to a fake website.
Data analysts at Australia and New Zealand's national identity and cyber support service, IDCARE, always detect a spike in scams impersonating the ATO in the three months after the EOFY.
"Last year, we saw a 105 per cent increase in the number of scams reported impersonating the ATO in the months after the EOFY to the general closing date for returns," IDCARE's Kathy Sundstrom says.
Because most Australians are expecting to hear from the ATO or myGov, making fake messages seem more legitimate.
"There's also a sense of urgency and anxiety around tax deadlines, refunds, and the fear of making mistakes, which makes people more likely to respond without thinking," Mr McGee said.
Ms Sundstrom said because scammers send out millions of messages, they only need a "small number of people to think the message makes sense for their scam to be hugely profitable".
Scamwatch and the Australian Cyber Security Centre says there are a few dead giveaways.
To help, we've included a few scam email examples that we've received over the past few weeks.
But keep in mind that suspicious correspondence can look even more convincing than the one's included here.
The first sign of a scam text or email is a hyperlink.
These links will take you to a fake website designed to steal your personal information.
So any email asking you to follow or click on a link should be treated with caution.
"The ATO and myGov won't send you an SMS or email with a link to access online services," the ATO said in a warning on its website.
"These should be accessed directly by typing ato.gov.au or my.gov.au into your browser."
QR codes are also common hallmarks of a scam.
Are you told you have a limited time to respond?
Scammers will create a feeling of urgency in the hope victims won't think critically about the message or seek advice if they think immediate action is needed.
In the examples provided, the scammers have used words like "urgent" and "act fast" to convince you to react before time runs out.
Here are some other phrases you could stumble across:
The link in the email address often won't look right when you compare it to official correspondence.
It will likely have some inaccuracies such as:
If you notice awkward phrasing, incorrect capitalisation, spelling or grammar, you're likely reading a scam message.
Also keep an eye on the formatting and font used. You can see in the examples that scammers may mix and match font types that doesn't look quite right.
The ATO will never send you an unsolicited message asking you to provide sensitive information over SMS or email.
So if you're asked to hand over your tax file number (TFN), driver's licence number, bank details, pay slips and Medicare details, that's a red flag.
Scammers impersonating the ATO may also contact you by phone, claiming you haven't paid enough tax and demanding you cover the shortfall.
To get you to act quickly, they may even use the threat of arrest unless you pay right away.
Here are some other telltale signs you're on the line with a scammer:
Stop, think and protect yourself.
People fall victim to scams when their guard is down.
When you're expecting a tax refund, it's easy to act on autopilot and click a link in a text message or email when you receive one.
Remember to slow down and question whether it's legitimate.
If you receive suspicious communication from the ATO or myGov, don't give away any information, scan any codes or download any attachments. Delete it immediately.
MyGov emails should always be from [e-mail].
Because scammers often make fake websites that mimic myGov, you should always access the website by typing my.gov.au into your browser or use the official myGov app, Ms Sundstrom says.
You can call the Services Australia Scams and Identity Theft Helpdesk if you:
If you have sent money to a scammer, you should contact your bank or financial institution immediately and ask them to stop any transactions.
They can also help you block or cancel any credit or debit cards if you shared those details with scammers.
IDCARE can also help give advice on securing your online accounts.