We’re seeing a rise in sophisticated scams impersonating the Australian Taxation Office (ATO), and unfortunately they’re getting harder to spot at first glance.
Recently, one of our clients received an email that looked official but raised just enough concern for them to pause and check in with us first. That quick instinct potentially saved them from serious financial and personal fallout.
Below, we want to share what to look out for, how these scams work, and what to do if you’ve received something similar.
How to spot a scam email:
Follow these steps to check if an email claiming to be from the ATO is legitimate:
The email address
Government agencies only send emails from official .gov.au domains. They will never contact you from a Gmail address or any other public email provider.
QR codes and links
The ATO will not send QR codes or direct links asking you to log in.
Instead, they will always instruct you to access services by logging in directly through your MyGov account yourself.
Fake websites designed to look real
In this case, the QR code directed to a website called:
myviewauthz.icu
While it looked like a MyGov login page, it was completely fake. These sites are designed to capture your username and password.
Once scammers have your details, they may:
- Redirect refunds into accounts they control
- Attempt to log into your real MyGov account
- Change your bank account details
- Lodge incorrect tax returns
What to do if you receive something like this:
If you receive an email, SMS, or message claiming to be from the ATO and something doesn’t feel right:
- Do not click links or scan QR codes
- Do not enter your MyGov details anywhere other than the official site
- Log in directly to MyGov by typing the address into your browser yourself
- Check for messages inside your MyGov inbox
If you’ve already interacted with a suspicious message:
- Change your MyGov password immediately
- Ensure multi‑factor authentication (MFA) is switched on
- Review your linked services, bank details, and recent activity
Trust your instincts (and double‑check):
Scammers rely on urgency, fear, and familiarity. If a message pressures you to act quickly or bypasses the usual MyGov process, that’s your cue to stop.
As this client did, checking first can make all the difference.
If you’re ever unsure whether something is legitimate, reach out to your accountant or adviser before taking action. At q4 financial, we’re always happy to sanity‑check these things — especially when the consequences can be so significant.
The ATO also have a dedicated resource on their website for Scam Alerts – you can find the link here.
Staying informed is one of the best ways to protect yourself.