Tax Scams: How To Spot Them And How To Deal With Them

Tax season can be stressful for many people – and this stress can make you more vulnerable to scammers, who strike at the end of the tax year, hoping to gain an advantage at your expense.
 
There are unfortunately many different ways that scam artists can trick both individuals and small businesses from parting with their hard-earned money at the end of the financial year. So it pays to be aware of the most common tricks, as well as some of the new and creative ways these criminals will try to get a foot in the door.
 
Here are some of the most common methods in play right now:

February 2026 – Cryptocurrency email scam

The ATO have received reports of a new email impersonation scam claiming you are holding cryptocurrency in a 'non KYC decentralised wallet'. The scammers are pretending to be from the ATO or myGov and are asking people to make an immediate declaration by calling the phone number on the email to avoid further action.

Some variations may also include small attachments that should not be opened.

The ATO will never:
 

• Email you demanding immediate disclosure of cryptocurrency or other assets.
• Threaten arrest, prosecution or legal action via email or SMS.
• Request payment or personal details through unsolicited communication.
• What to do if you receive this message:
• Do not respond.
• Do not call the number.
• Do not provide any information.
• Do not open attachments.
• Report the email by forwarding it to ReportScams@ato.gov.au
• If you have shared information or engaged with the sender, phone the ATO as soon as possible on 1800 008 540.

October 2025 – DocuSign email scam

The ATO have received reports of a new ATO impersonation email scam circulating in the community. The scam advises people they have an outstanding tax-related ‘DocuSign’ that requires action.

The scam looks like a real ‘DocuSign’ email, making it appear familiar and trustworthy to recipients who have used the platform previously.

Scammers attempt to trick recipients into clicking on the Review Document button by naming the document 'Declaration and Final Release'. The email also details (often in the subject line) tax-related text such as ‘notice of assessment’. This approach falsely implies the DocuSign is from the ATO and that they are holding the recipient's tax refund until this action is completed.

If the recipient clicks on the Review Document button, an embedded link directs them to a fake myGov sign in page. This is designed to steal personal information, such as your myGov sign in credentials, name, date of birth and drivers licence details. Scammers then use this information to:
 

• commit refund fraud in their name
• access your myGov account to steal their tax refund
• steal your superannuation
• sell the personal identity to organised crime groups online.

The ATO will never use DocuSign to finalise a tax refund.

If you receive an email like this, report it to the ATO by forwarding the email to ReportScams@ato.gov.au then delete it.

November 2024 – ATO impersonation email scam

The ATO have received reports of a new email scam attempting to steal personal identifying information by return email

Scammers pretending to be from the ‘Australian Taxation Office' or 'myGov’ are emailing and falsely telling people their taxable income has been recalculated and they are due to receive compensation. To claim the amount, people are asked to reply to the email with personal identifying information such as payslips, TFN, driver's licence and Medicare details.

Scammers use this information in a variety of ways to:
 

• commit refund fraud in your name
• access your myGov account to steal your tax refund
• steal your superannuation
• sell your identity to organised crime groups on the dark web or via other means.

Be aware, the sender's email address looks legitimate. If you receive an email like this, do not reply with any of your personal information.

To help protect yourself remember:
 

• The ATO will never send an unsolicited message asking you to return personal identifying information through SMS or email.
• Legitimate email communication from the ATO can be located in ATO online services. You can check this by logging into your myGov account. You can also contact your tax agent or contact the ATO.
• If someone claiming to be from the ATO contacts you and advises that you have a debt or are owed a refund, or asks for your myGov sign in credentials, bank details, or your TFN, it is likely they are a scammer.
• Don’t click on links, open attachments or download any files from suspicious emails or SMS. We will never send an unsolicited SMS that contains a hyperlink.
• The ATO are on Facebook and Instagram, but we will never use these social media platforms to discuss your personal information or documentation or ask you to make payments.

If you’re unsure if it’s really the ATO, don’t engage with them. Call us on 13 23 25 or the ATO on 1800 008 540 to check. You can report any suspicious contact claiming to be from the ATO ReportScams@ato.gov.au

Learn more on how to protect yourself and stay scam safe.