What the ATO will never do
- Send unsolicited messages containing hyperlinks or QR codes.
- Ask for personal identifying information by email or SMS.
- Use social media to ask for personal information, documents or payments.
Facts and sources for this part
- The ATO will never send unsolicited messages containing hyperlinks or QR codes, and will never ask for personal identifying information by email or SMS. [S16] [S18]
- The ATO may use SMS or email to ask you to contact it, but never sends an unsolicited message with a link asking you to return personal information or log in. It never asks for personal details, documents or payments through social media. [S15]
Check the sender
Real ATO emails always come from addresses ending in ato.gov.au. Phone calls from the ATO show as No Caller ID, so a call that shows an ATO number is not proof.
Facts and sources for this part
- Real ATO emails always come from addresses ending in ato.gov.au. Phone calls from the ATO show as No Caller ID. [S16]
- Scam calls can use real ATO or Australian caller IDs, threaten arrest, demand payment by gift cards, crypto or offshore accounts, or involve fake conference calls with impersonated tax professionals or law enforcement. [S16]
Check the call
You can use the Verify call feature in the ATO app on your registered device. If you cannot verify the call, hang up. If you are not sure, do not respond; call 1800 008 540 to check.
Facts and sources for this part
- You can use the Verify call feature in the ATO app on your registered device to check that a call is really from the ATO. If you cannot verify the call, hang up. [S15]
- Scammers impersonate the ATO by email, SMS, phone calls, social media and fake websites. If you are not sure it is the ATO, do not respond; call 1800 008 540 to check. [S17] [S16]
If someone already clicked
If a person has engaged with a scammer, provided information or paid, phone the ATO straight away on 1800 008 540. Never share your myGov sign-in details with anyone.
Signs of a scam call
- It threatens arrest or legal action.
- It demands payment by gift cards, crypto or an offshore account.
- It shows a real-looking ATO or Australian number.
- It uses a fake conference call with an impersonated tax professional.
Facts and sources for this part
- Scam calls can use real ATO or Australian caller IDs, threaten arrest, demand payment by gift cards, crypto or offshore accounts, or involve fake conference calls with impersonated tax professionals or law enforcement. [S16]
What a fake email can do
In one reported scam, an email about a booked phone appointment carried an attachment that led to a copy of the myGov sign-in page. In another, a link downloaded remote desktop software.
Facts and sources for this part
- In one reported ATO scam email, the message said a phone appointment had been booked and asked the reader to open an attachment. The attachment led to a copy of the myGov sign-in page built to steal usernames, passwords and personal information. [S17]
- In another reported ATO scam email, a link led to a page that downloaded remote desktop software, which can give the scammer access to your device. The ATO will never send an unsolicited message that directs you to a log in page. [S17]
Practise with scenarios
The course has a lesson on fake ATO and myGov contact, with questions.