ATO Impersonation Scam: How to Spot and Avoid Tax Time Fraud

ATO impersonation scam activity increases sharply during tax time—and 2026 is no exception. 

With EOFY approaching, scammers are becoming more targeted and more convincing, using emails, SMS messages, and phone calls that appear to come directly from the ATO or myGov. 

Recent alerts include: 

• A fake cryptocurrency declaration email pressuring recipients to act immediately
• A DocuSign-style “notice of assessment” scam linking to a fake myGov login page

Once access is gained, scammers can: 

• Steal tax refunds 
• Access your myGov account 
• Redirect superannuation or business payments 
• Use your identity for further fraud 

For business owners, this isn’t just inconvenient—it’s a real financial risk. 

Why EOFY is peak scam season 

Scammers follow behavior—and EOFY is when businesses are most vulnerable. 

During this time: 

• Tax returns are being finalized 
• ATO communications increase 
• Refunds and payments are expected 

This creates the perfect environment for scams to blend in with legitimate messages. 

EOFY is widely recognized as a prime period for scams, especially impersonation of government agencies like the ATO.  

Simply put: the more you expect legitimate messages, the easier it is for a fake one to slip through. 

What the ATO will never do 

Understanding how the ATO actually communicates is one of your strongest protections. 

The ATO will never: 

• Send unsolicited emails or SMS with links asking you to log in 
• Ask for personal or financial details via email or text 
• Threaten arrest, legal action, or immediate penalties 
• Request payment via gift cards or cryptocurrency 
• Ask you to disclose assets via an unexpected message

If a message includes any of these, treat it as a scam—no exceptions. 

The red flags every business owner should know 

Even with better technology, scams still follow predictable patterns. Watch for these warning signs: 

Urgency and pressure 

Messages that say: 

• “Final notice” 
• “Immediate action required” 
• “Legal consequences if ignored” 

These are designed to force a quick reaction. 

Suspicious links or attachments 

Scammers often direct you to: 

• Fake myGov login pages 
• Imitation ATO portals 

Never log in through a link—always go directly to the official site. 

Unexpected refunds or debts 

You may see: 

• “You’re owed a refund” 
• “You have an outstanding tax debt” 

Both are used to create urgency and trigger action. 

Requests for sensitive data 

The ATO will never ask for: 

• Your myGov password 
• TFN via email or SMS 
• Bank details in response to a message 

What to do if you receive a suspicious message 

If something feels off, don’t engage. 

Follow this process: 

1. Do not click links or open attachments 
2. Do not reply or provide any information 
3. Do not call numbers in the message 

Instead: 

• Call the ATO directly on 1800 008 540 to verify 
• Forward suspicious emails to ReportScams@ato.gov.au 
• Delete the message after reporting 

Always use official contact details—not the ones provided in the message. 

How iKeep helps protect your business 

ATO impersonation scams aren’t just a cyber issue—they affect your finances, your compliance, and your peace of mind. 

At iKeep, we help reduce risk by ensuring your systems are clear and controlled. 

Through our: 

• Bookkeeping services — keeping your data accurate and up to date 
• Payroll management — ensuring structured, compliant processes 
• BAS and reporting support — providing clarity over obligations 
• Cash flow visibility — helping you spot unusual activity early 

You gain confidence that: 

• Your numbers are reliable 
• Your systems are secure 
• You’re not making decisions under pressure or uncertainty 

And importantly—you have a team you can quickly check with before acting. 

A simple rule to stay safe 

If there’s one thing to remember, it’s this: If a message is pushing you to act quickly, it’s likely a scam. 

Legitimate ATO communication: 

• Is not rushed 
• Is verifiable 
• Directs you to secure channels like your myGov inbox 

Taking a moment to verify can prevent serious financial damage. 

Final thought 

ATO impersonation scams are increasing—and they’re becoming harder to spot.  But they still rely on: 

• Urgency 
• Confusion 
• Distraction 

The businesses that avoid them are the ones that: 

• Slow down before responding 
• Verify independently 
• Maintain clear financial systems and support 

As EOFY approaches, staying alert isn’t optional—it’s essential.