How to check if an ATO call is genuine or a scam

ATO impersonation scams peak around tax time, and they are becoming more convincing. Scammers use spoofed caller IDs, official-sounding scripts and personal details bought from data breaches. The safest rule is simple: if a caller can't be independently verified as the ATO, don't trust the call.

Red flags that point to a scam

• threats of arrest, deportation or immediate legal action
• demands for payment by gift card, cryptocurrency, pre-paid card or a transfer to a personal bank account
• requests for your myGov password, banking passwords or one-time codes
• pressure to act immediately and not hang up
• an unexpected refund that you must "release" by paying a fee
• text messages or emails with links asking you to log in

What the real ATO will not do

• Demand immediate payment by unusual methods.
• Threaten you with arrest.
• Send unsolicited SMS or email messages with links for logging in to online services.
• Refuse to let you verify who they are or call them back.

Genuine ATO officers are professional, will tell you why they are calling and are happy for you to verify them.

How to verify a call safely

1. Stay calm and don't confirm personal details such as your TFN, date of birth or address.
2. Ask to verify the call. Where the ATO offers in-app verification, a genuine caller can trigger a secure notification in your ATO app while you are on the line.
3. If no verification comes through, hang up.
4. Call the ATO back on its official number: 13 28 61 for individuals or 13 28 66 for businesses. Never use a number the caller gives you.
5. Check your account by logging in to ATO online services through myGov yourself, rather than following a link.

Why caller ID can't be trusted

Number spoofing lets scammers make a call appear to come from any number, including real ATO numbers. A familiar number on your screen is not evidence the call is genuine.

If you've already shared information

• Contact your bank immediately if you've paid money or shared banking details.
• Call the ATO to report it so it can protect your tax record.
• Change your myGov password and check its linked services.
• Contact IDCARE, Australia's identity and cyber support service, on 1800 595 160 for free help.

You can report ATO impersonation scams on the ATO's scam line, 1800 008 540. As your registered tax agent, we can also check your ATO account on your behalf. If you're unsure whether a call, letter or debt is genuine, please contact us.

This article contains general information only and does not take your personal circumstances into account. Tax and superannuation rules change, and some measures discussed may be subject to legislation. Speak with a registered tax agent before acting.