All articles Scam Recovery

ATO Scams: Spot Them, Report Them, Recover Your Identity

7 min read

The Australian Taxation Office (ATO) is a frequent target for scammers who impersonate legitimate officials to steal personal information or demand fake payments. These scams can be highly convincing, using threats and urgency to pressure victims. Protecting yourself means understanding their tactics and knowing the next steps if you encounter one. We'll guide you through recognising these scams, reporting them, and most importantly, recovering your peace of mind and security.

Recognising Common ATO Impersonation Scams

ATO scams often play on fear and urgency, threatening immediate arrest, fines, or legal action if a 'debt' isn't paid. Scammers might claim you owe overdue taxes, or conversely, that you're due a refund which requires you to provide personal details to 'claim'. Payments are typically demanded via unusual methods like cryptocurrency, gift cards, or bank transfers to unknown accounts.

They commonly use unsolicited calls, emails, or text messages that appear to be from the ATO. While the ATO does contact Australians by phone, mail, and through myGov, they will never threaten you, demand immediate payment, or ask for your tax file number (TFN) or banking details via email or text message. They also won't use aggressive language or demand payment in unusual forms. Always be suspicious of unexpected contact regarding your tax affairs.

What To Do If You Receive a Suspicious Contact

If you receive a suspicious call, email, or SMS claiming to be from the ATO, the most important thing is not to engage. Do not click on any links, open attachments, reply to messages, or provide any personal information. Hang up immediately if it's a phone call. If you're unsure, you can always verify the contact by calling the ATO directly on their official public number (13 28 69), not a number provided by the suspicious contact.

Remember, legitimate organisations will always give you time to consider information and payment options. Scammers want to rush you into making a mistake. Taking a moment to pause and verify can prevent you from becoming a victim.

Reporting an ATO Scam

Reporting scams is crucial, even if you haven't lost money or information. It helps authorities track scam trends and potentially prevent others from falling victim. You should report all ATO-related scams directly to the ATO using their online scam report form. You can find this form on the official ato.gov.au website, usually by searching 'report a scam'.

Additionally, you should report all scams to Scamwatch (scamwatch.gov.au), which is operated by the ACCC. Scamwatch collects reports on various types of scams and publishes alerts to warn Australians. If you've been contacted via email, forward the suspicious email to ReportEmailFraud@ato.gov.au. For text messages, forward them to 0429 999 888 (this is a legitimate ATO number for forwarding scam texts).

Essential Reporting Steps:

  • Report to the ATO via their official online form.
  • Report to Scamwatch (scamwatch.gov.au).
  • Forward suspicious emails to ReportEmailFraud@ato.gov.au.
  • Forward suspicious SMS to 0429 999 888.

Recovering After Sharing Your TFN or Paying a Fake Debt

If you've shared your TFN or other personal details, or sadly, made a payment to an ATO scammer, immediate action is vital. First, contact your financial institution to report any fraudulent payments. They may be able to help recover funds or block further transactions. Second, contact IDCARE (idcare.org) immediately. IDCARE is Australia's national identity and cyber support service. They provide free, confidential support and a tailored recovery plan to help you minimise harm and restore your identity.

You should also contact Services Australia (13 23 07) if your myGov account may have been compromised and the ATO's dedicated client identity support centre (1800 467 033) for TFN specific concerns. Changing your passwords for all online accounts, especially email and banking, is also critical. KNOMI understands how distressing these incidents are. If you're overwhelmed, KNOMI is who you call for expert guidance and support through the recovery process, helping you coordinate with relevant authorities and secure your digital life.

Immediate Recovery Actions:

  • Contact your bank or financial institution.
  • Contact IDCARE (idcare.org) for identity support.
  • Contact Services Australia (13 23 07) if myGov is affected.
  • Contact ATO Client Identity Support Centre (1800 467 033) for TFN concerns.
  • Change all critical online account passwords.

Protecting Yourself Proactively

Proactive measures can significantly reduce your risk. Always use strong, unique passwords for all your online accounts and enable multi-factor authentication (MFA) wherever possible, especially for myGov and banking. Regularly check your transaction history for any suspicious activity. Be critical of any unexpected communication – if something feels off, it probably is.

Educate yourself and your family about common scam tactics. The more you know, the harder it is for scammers to succeed. Remember, the ATO will never communicate sensitive information or demand payments in ways that feel illegitimate. Stay calm, verify, and protect your information.

Frequently asked questions

How can I tell if an ATO call is legitimate?

A legitimate ATO representative will never threaten you, demand immediate payment, or ask for unusual payment methods like gift cards or cryptocurrency. If unsure, hang up and call the ATO's official public number (13 28 69) to verify.

What should I do if I clicked a link in a fake ATO email?

If you clicked a link, do not enter any information. Close the browser immediately. Run an antivirus scan on your device and change all your online passwords, especially for email and banking. Contact KNOMI if you need help securing your systems.

I've paid money to an ATO scammer, can I get it back?

Contact your financial institution immediately to report the fraudulent transaction. They may be able to recall the funds, but success depends on how quickly you act. Also, report the incident to Scamwatch and IDCARE for support.

The scammer got my TFN, what are the risks?

With your TFN, scammers could attempt identity theft, open fraudulent accounts, or submit fake tax returns. Contact the ATO's client identity support centre (1800 467 033) and IDCARE (idcare.org) immediately for guidance and a recovery plan.

Does the ATO send SMS messages or emails?

Yes, the ATO does send SMS messages and emails, often through myGov. However, they will never ask you to click a link to log in and provide personal information, or demand payment via email or text. Always verify by logging into myGov directly or calling the ATO.