How to protect your business from tax time scams

How to spot a tax time scam

Tax time scams are often impersonation scams where criminals pretend to be from the ATO, myGov, or even your accountant. They know businesses are expecting to lodge statements and handle potential refunds, and they exploit this to steal information or money.

Here’s what to look out for:

• Unexpected messages with links. The ATO will not send you an email or SMS with a link to log in to myGov. Always go directly to the official website by typing it into your browser.
• Threatening calls or pre-recorded messages. Scammers use urgency to create panic. They might threaten legal action or prosecution if you don't make an immediate payment. The ATO will not contact your business in this way.
• Requests to change employee or supplier payment details. Be extra cautious if you receive emails asking to update bank account details for payroll or invoices. Always verify these requests verbally using a trusted phone number.
• Unusual activity in your business accounts. Your myGov and accounting software accounts have a login history. If you see activity you don’t recognise, someone may have access to your account.

Practical steps to secure your business

Beyond spotting scams, you can take simple steps to make your business a harder target.

• Upgrade from passwords to passphrases. A simple password is easy for criminals to crack. A passphrase is a sequence of four or more random words and is much stronger and easier for you to remember.
• Use multi-factor authentication (MFA). Think of MFA as a second lock on your digital door. It adds a powerful layer of security by requiring a second step to log in, like a code sent to your phone. Make sure you enable it on your banking app, accounting software, and myGov access.
• Regularly back up your information. By backing up your data to a secure, separate location, you can restore your files if they’re ever lost, stolen, or held for ransom by scammers.
• Keep your software updated. The easiest way to stay protected is to turn on automatic updates for your apps and antivirus programs.

How to stay safe this tax time: Stop, Think, Protect

Stop

Scammers thrive when you and your team are busy or distracted. With end-of-financial-year pressures, it's easy to click a link or approve a payment on autopilot. Encourage your team to slow down and take a moment to assess any unexpected request.

Think

Does the request seem legitimate? For any doubts about tax lodgements or refunds, contact the ATO via phone or log in to the myGov or ATO business portal via the official website.

Protect

Your team is your first line of defence.

• Review who has access and limit access to sensitive financial systems to only those who need it for their role.
• Have a clear off-boarding process. When an employee leaves, remove their access to all business accounts, software, and systems immediately.
• If you think you’ve been scammed, or if a scammer has your business or personal information, contact your bank immediately. The sooner you act, the sooner we can help protect your accounts.

Learn more about our latest scam alerts and information to keep your business safe online.