Scammers are breaching myGov accounts to steal tax returns and generate fraudulent payments through the government services hub.
Subscribe now for unlimited access.
or signup to continue reading
MyGov users were warned that scammers were capitalising on the annual tax time rush to breach the online portal and redirect tax refunds to their own bank accounts.
More than 300 people have reported the tax scam to Victoria Police since June 30 with a combined loss of $2 million.
Police said scammers sent their victims phishing emails and SMS scams impersonating government agencies to gain entry to myGov portals.
Victims were prompted to click a link that asked for their login details. By entering their information, victims gave scammers access to myGov and linked Australian Taxation Office (ATO) accounts.
Once the scammer had gained access they were able to change the phone and email contact details, so their victim would not receive notifications from the portal, as well as bank account details.
"We're encouraging everyone to be hypervigilant when it comes to scams such as these," detective senior sergeant John Cheyne said.
"Never click on a link sent to you that is purporting to be from the Australian Taxation Office or myGov, they will never ask you to access any online services via a link," he said.
Police have warned that messages reading 'You have a new message in your myGov inbox - click here to view' or 'You are due to receive an ATO Direct refund' should raise a red flag.
Protect against myGov scammers
Victoria Police advised myGov users to protect against scammers with digital security measures.
Enabling multi-factor authentication was recommended as well as a a passkey such as facial or fingerprint recognition.
Avoid clicking on hyperlinks that were texted or emailed. Victoria Police said "the ATO and myGov won't send you an SMS or email with a link to access online services - always access these directly by typing ato.gov.au or my.gov.au into your browser".
A digital ID, such as myGovID, was also recommended when accessing ATO online services through myGov.
"We'd also recommend you conduct a bi-yearly health check of your accounts. Check your credit score or log in to your myGov account to make sure no edits have been made throughout the year that weren't done by you," detective senior sergeant Cheyne said.
"Account compromises such as these are often not identified until months after they've occurred, when the victim next logs in to their account."
If you suspect someone is using your tax information illegally or has stolen your personal identity documents, contact the ATO as soon as possible on 1800 467 033. They will explain the safeguards that need to be applied to keep your ATO account safe. Report any suspicious contact claiming to be from the ATO to ReportScams@ato.gov.au. and Crime Stoppers on 1800 333 000.
Call Services Australia's Scams and Identity Theft Helpdesk on 1800 941 126 if you've:
- Opened a link in a suspicious text message, email or social media message that pretending to be from Services Australia or myGov.
- Given someone your myGov sign in details or other personal information.
- Visited a website or downloaded a fake app that that pretended to be Services Australia or myGov.
Anna Houlahan
Anna Houlahan reports on crime and social issues affecting regional and remote Australia in her role as national crime reporter at Australian Community Media (ACM). She was ACM’s Trainee of the Year in 2023 and, aside from reporting on crime, has travelled the country as a journalist for Explore Travel Magazine. Reach out with news or updates to anna.houlahan@austcommunitymedia.com.au
