New research by Norton, a consumer cyber safety brand, has found that one in three Australians have been targeted by a scam this year.
Most commonly, 30% of Australians have received fake invoices and 29% have been targeted in a phishing attack.
On average, over $1,500 is lost by each scam victim, with some losing up to $15,000.
With tax season on the horizon, cybercriminals are taking advantage of Australians already on edge and expecting communication from the ATO or tax agents.
Three major tax-time scams include:
1. Fake ATO Invoices and Phishing Emails
Cybercriminals are sending out emails or SMS messages disguised as ATO correspondence, requesting payment for fake tax debts or prompting users to download files.
Norton suggests these ways to stay safe:
Never click on links in unsolicited messages.
Visit the official ATO website directly to verify any claim.
Look for signs like poor grammar, urgent language, or unfamiliar sender addresses.
2. Be cautious of ATO impersonation scams
Earlier this year, the ATO issued a warning about scammers impersonating its staff on social media platforms. These fake accounts target users who publicly comment on ATO posts, sending direct messages that appear helpful, but are designed to steal sensitive information.
How to avoid this scam:
- Watch out for urgent threats like arrest, immediate payment demands, or TFN suspension. The ATO does not use this language.
- Delete messages from new or unverified social media accounts with few followers.
- Don’t click links or share personal info in unexpected emails or texts.
3. Tax-related Identity Theft: Protect Your Tax File Number
Tax-related identity theft occurs when cybercriminals access your personal information—including your Tax File Number (TFN)—to impersonate you and fraudulently lodge tax returns or claim refunds from the ATO. This can lead to significant financial and identity risks, as the criminals may continue to misuse your stolen data beyond the initial scam.
How to avoid this scam:
- Keep your Tax File Number safe by shredding any documents with personal details before you throw them away. Protect your online accounts, like myGov, with strong, unique passwords and turn on two-factor authentication for extra security.
- If you think your TFN or identity might have been compromised, don’t wait, report it straight away to the ATO.