Australian Tax Time Scams Are Surging in 2025: How to Spot and Avoid Them
As the 2024–2025 financial year comes to a close, cybercriminals are targeting Australians with a spike in tax time scams, posing as the ATO and other government bodies. According to the Australian Communications and Media Authority (ACMA), impersonation scams and ATO phishing emails have surged by over 300% this year.
At AST Technologies, we work closely with small to mid-sized businesses in the Illawarra, Southern Highlands & Shoalhaven areas of NSW to help them stay safe online. We want to make sure our clients—and their teams—know what to look out for and how to protect themselves during this high-risk period.
Common Tax Time Scams Affecting Australians in 2025
Fake ATO Tax Refund Emails
Scammers are sending emails that look like they come from the Australian Taxation Office (ATO), telling you you’re owed a refund and asking you to click a link or provide your personal details.
Watch for:
Unusual sender addresses
Requests for your Tax File Number (TFN), banking info, or myGov login
These scams often arrive via SMS or email, alerting you to a new message in your myGov account. When clicked, the link takes you to a fake login page designed to steal your credentials.
Red flags include:
Spelling errors or strange formatting
Urgent language like “final notice” or “your refund will be cancelled”
Links to non-government websites
This scam has become so common during tax season that the Australian Cyber Security Centre (ACSC) has issued repeated warnings about fake myGov login screens.
Early Morning “ATO Alerts”
Some recent tax scams are timed to hit inboxes early in the morning—before your first coffee—when you’re less alert. These messages claim urgent tax errors or fines and demand immediate action.
Tip: The ATO does not threaten arrest or demand payment via gift cards, cryptocurrency, or third-party links.
Top Cybersecurity Tips to Stay Safe This Tax Season
At AST Technologies, we recommend the following cybersecurity best practices for individuals and businesses during tax time:
1. Go Directly to the Source
Always log in to myGov or the ATO website by typing the URL directly (e.g., www.my.gov.au or www.ato.gov.au). Never click links from emails or texts claiming to be from the ATO.
2. Enable Multi-Factor Authentication (MFA)
Ensure all your accounts—especially email, accounting platforms, and cloud storage—are protected with MFA to prevent unauthorised access.
3. Educate Your Team
Scams thrive on human error. Make sure your staff know what suspicious messages look like and how to report them.
We recommend activating Managed Security Awareness Training for your staff.It’s an instant, low cost way to keep your staff educated on an ongoing basis.
4. Back Up Important Data
Keep your business data safe by scheduling automatic backups to a secure, encrypted cloud platform. This protects you in case of ransomware or phishing-related breaches.
5. Verify Before You Share
Never share your Tax File Number, business ABN, login credentials, or banking info unless you’re absolutely sure of the recipient. When in doubt, call the ATO directly.
Real Examples of Recent Australian Tax Scams (2025)
Here are just a few scam tactics currently being reported:
“Your tax refund has been approved” email with a malicious link
SMS claiming to be from myGov asking you to click a shortened link
Voicemail messages claiming “urgent legal action” from the ATO
Emails with the ATO logo, poor grammar, and fake sender domains
Remember: The ATO will never ask you to click links in unsolicited emails or ask for sensitive information via text or call.
Contact AST Technologies—we’ll help you review the message and secure your devices
Need Help Strengthening Your Cybersecurity This Tax Time?
At AST Technologies, we support local businesses with cybersecurity solutions, phishing protection, and IT support tailored to the Australian threat landscape. Whether you’re a sole trader or managing a growing team, we can help you stay protected—during tax season and beyond.
Australian Tax Time Scams Are Surging in 2025: How to Spot and Avoid Them
As the 2024–2025 financial year comes to a close, cybercriminals are targeting Australians with a spike in tax time scams, posing as the ATO and other government bodies. According to the Australian Communications and Media Authority (ACMA), impersonation scams and ATO phishing emails have surged by over 300% this year.
At AST Technologies, we work closely with small to mid-sized businesses in the Illawarra, Southern Highlands & Shoalhaven areas of NSW to help them stay safe online. We want to make sure our clients—and their teams—know what to look out for and how to protect themselves during this high-risk period.
Common Tax Time Scams Affecting Australians in 2025
Fake ATO Tax Refund Emails
Scammers are sending emails that look like they come from the Australian Taxation Office (ATO), telling you you’re owed a refund and asking you to click a link or provide your personal details.
Watch for:
Learn More at the ATO Scam Alerts site
myGov Phishing Messages
These scams often arrive via SMS or email, alerting you to a new message in your myGov account. When clicked, the link takes you to a fake login page designed to steal your credentials.
Red flags include:
This scam has become so common during tax season that the Australian Cyber Security Centre (ACSC) has issued repeated warnings about fake myGov login screens.
Early Morning “ATO Alerts”
Some recent tax scams are timed to hit inboxes early in the morning—before your first coffee—when you’re less alert. These messages claim urgent tax errors or fines and demand immediate action.
Tip: The ATO does not threaten arrest or demand payment via gift cards, cryptocurrency, or third-party links.
Top Cybersecurity Tips to Stay Safe This Tax Season
At AST Technologies, we recommend the following cybersecurity best practices for individuals and businesses during tax time:
1. Go Directly to the Source
Always log in to myGov or the ATO website by typing the URL directly (e.g., www.my.gov.au or www.ato.gov.au). Never click links from emails or texts claiming to be from the ATO.
2. Enable Multi-Factor Authentication (MFA)
Ensure all your accounts—especially email, accounting platforms, and cloud storage—are protected with MFA to prevent unauthorised access.
3. Educate Your Team
Scams thrive on human error. Make sure your staff know what suspicious messages look like and how to report them.
We recommend activating Managed Security Awareness Training for your staff. It’s an instant, low cost way to keep your staff educated on an ongoing basis.
4. Back Up Important Data
Keep your business data safe by scheduling automatic backups to a secure, encrypted cloud platform. This protects you in case of ransomware or phishing-related breaches.
5. Verify Before You Share
Never share your Tax File Number, business ABN, login credentials, or banking info unless you’re absolutely sure of the recipient. When in doubt, call the ATO directly.
Real Examples of Recent Australian Tax Scams (2025)
Here are just a few scam tactics currently being reported:
Remember: The ATO will never ask you to click links in unsolicited emails or ask for sensitive information via text or call.
What to Do if You Suspect a Scam
Need Help Strengthening Your Cybersecurity This Tax Time?
At AST Technologies, we support local businesses with cybersecurity solutions, phishing protection, and IT support tailored to the Australian threat landscape. Whether you’re a sole trader or managing a growing team, we can help you stay protected—during tax season and beyond.
Contact us for a free cybersecurity review
Categories
Tags
Recent Posts
Before Adding Another Phone Handset, Check Whether
August 24, 2026Microsoft 365 Renewal Is a Good Time
August 24, 2026Who’s Watching Your Security Cameras?
August 24, 2026A Good Incident Plan Gives People Confidence,
August 24, 2026Your Website Deserves the Same Care as
August 3, 2026A New Office Works Better When Technology
August 3, 2026A Smooth IT Provider Change Starts With the Handover
August 3, 2026Before Expanding AI, Make Sure You Know
August 3, 2026Keeping Your Business Connected When a Carrier
August 3, 20264 Signs Your Access Is Starting to
June 30, 2026