How Secure Is Loding Taxes Online in Australia? What You Need to Know

Lodging your tax return online is safe, provided you use a platform that takes security seriously and you apply a few basic personal security practices. The same information you submit in a paper return, including your Tax File Number, income details, bank account number and deduction records, travels through digital channels when you lodge online. Reputable platforms encrypt this data in transit and at rest, making interception by a third party exceptionally difficult.

The risks that do exist around online tax lodgments are almost entirely human rather than technical. They come from fraudulent websites designed to look like legitimate services, weak account passwords and personal security habits that leave accounts exposed. Understanding which risks are real and which are overstated gives you a much clearer picture of what you are actually dealing with when you decide how to lodge your tax return.

It also means choosing the right online tax platform matters.

If you want to lodge your tax return online with H&R Block, you can choose between Online Tax Express, our DIY online tax platform, or Online Tax Adviser, which lets you complete the process online with the support of a Tax Expert. Both options allow you to lodge online through H&R Block's established online environment, with security and privacy protections designed for handling sensitive tax and financial information.
 

Is Lodging Tax Return Online Actually Safe?

Yes. Online tax lodgment through a reputable, established platform is a secure process. The transmission of your data uses SSL/TLS encryption technology, which scrambles your information during transmission so that it cannot be easily read if intercepted.

Online lodgment is widely used, but it is still important to protect your personal information. The ATO warns that scam activity can increase around tax time, when people are more likely to be expecting tax-related communications. The platforms used by established tax professionals are subject to strict data handling obligations under Australian privacy law, specifically the Privacy Act 1988 and the Australian Privacy Principles. These obligations govern how personal information is collected, stored, used and disclosed, and they carry significant penalties for breaches.

The question is not really whether lodging online is safe in the abstract. It is whether the specific platform you use takes security seriously, and whether your own practices are sound enough to avoid the risks that exist on the human side of the equation.

That is why there can be an important difference between entering sensitive tax information into an unfamiliar website and lodging through an established tax provider.

With H&R Block, you do not need to sacrifice convenience for security. Whether you prefer to prepare your return yourself with Online Tax Express or have a Tax Expert prepare it for you through Online Tax Adviser, you can complete the process online while using H&R Block's secure online systems.
 

Where the Real Risks Come From

The genuine risks around online tax lodgment are well-documented and specific. Many of these risks can be reduced by using a legitimate, secure platform and following good personal security practices. 
 

Fake Websites and Phishing Attacks 

One of the key risks around online tax lodgement is phishing: fraudulent websites, emails and text messages that impersonate legitimate tax services and try to trick people into providing their Tax File Number, income details, banking information or account credentials.

The ATO warns that scam activity can increase around tax time, when people are expecting tax-related communications. A convincing-looking website, a message claiming you are entitled to a refund, or a request to log in and verify your details can all be used as phishing techniques.

The fundamental defence is simple: access tax services through web addresses you know and trust, and be cautious of unsolicited messages asking you to provide personal information or log in to an account. The ATO may send you an SMS or email asking you to contact them, but it will never send an unsolicited message with a link asking you to provide personal information or log in to ATO online services.

If you choose to lodge online with H&R Block, make sure you access Online Tax Express or Online Tax Adviser through H&R Block's official website rather than through an unfamiliar website.
 

Weak Personal Account Security 

A secure platform cannot protect an account with a weak password. If the password for your tax account is the same as your email, your social media or another service that has experienced a data breach, your account may be at risk even if the platform itself has never been compromised.

Using a unique password for each online account, and enabling multi-factor authentication where it is available, are the two most effective personal security measures you can take. Multi-factor authentication requires a second verification step, typically a code sent to your phone, before a login from a new device is approved.

Even if someone obtains your password, they cannot access the account without also having your phone.

A password manager, a tool that generates and stores unique passwords for every account, removes the burden of remembering dozens of different passwords and eliminates the temptation to reuse them.

Unsecured Networks 

Lodging your tax return over a public Wi-Fi network, such as in a cafe, airport or library, carries a meaningful risk. Public networks can be monitored by other users on the same network, and criminal actors sometimes create networks designed to look like legitimate public Wi-Fi in order to intercept traffic.

For any session where you are entering your Tax File Number, bank details or income information, use your home network or your mobile data connection. Both are significantly harder to intercept than a public Wi-Fi network. If you must use a public network, a Virtual Private Network (VPN) encrypts your connection and prevents other network users from seeing your traffic.

This advice applies regardless of which online lodgement service you use, including when accessing H&R Block's Online Tax Express or Online Tax Adviser. 

Shared or Public Devices 

Completing your tax return on a shared family computer, a work device or a public computer carries risks that a private device does not. Shared devices may have keylogging software installed, may have browsers that save login credentials, or may be used by others after you have logged in.

If you use a shared device, always log out of your session when finished, never allow the browser to save your password, and clear the browsing session afterwards. A private device that you control is the right choice for anything involving your Tax File Number or financial details. 

How Legitimate Tax Platforms Protect Your Data 

Understanding what a reputable tax platform does in the background helps you distinguish genuine security from surface-level reassurance. The following protections are standard features of any established, professional tax lodgement service. 

Encryption and Secure Transmission 

Data in transit between your device and the platform is encrypted using Transport Layer Security (TLS) protocols, the same standard used by banking platforms and other financial services. This means your information is scrambled before it leaves your device and can only be read by the intended recipient. You can confirm a site uses this standard by looking for 'https' at the start of the web address; the 's' indicates the connection is encrypted.

Reputable platforms also encrypt data at rest, meaning your information is stored in an encrypted form even when it is not being transmitted. This protects against scenarios where the stored data itself might be accessed without authorisation.

H&R Block's online platform uses secure, encrypted connections to help protect the personal and financial information you provide. That means clients using Online Tax Express to lodge their own return and clients using Online Tax Adviser to provide their tax information to a Tax Expert can do so through H&R Block's secure online environment. 

Data Storage and Access Controls 

Professional tax platforms store client data on servers with strict access controls. These controls limit which employees or systems can access personal information and log all access for audit purposes. Legitimate platforms operating in Australia are also subject to the Notifiable Data Breaches scheme, which requires them to notify affected individuals and the Office of the Australian Information Commissioner if a data breach is likely to result in serious harm.

This obligation is not optional. It creates a strong incentive for platforms to invest in security infrastructure and to disclose incidents promptly rather than concealing them.

 
Identity Verification 

Established tax platforms require identity verification at account setup and, in some cases, at login from new devices. This typically involves confirming your Tax File Number against tax records, providing identity documentation, or completing a multi-factor authentication step.

These checks confirm that the person accessing the account is who they claim to be, reducing the risk of someone else accessing or lodging a return under your identity. 
 

Are H&R Block's Online Tax Services Safe?

Yes. H&R Block's online tax services are designed to give clients the convenience of lodging digitally while using the security systems and processes of an established professional tax firm.

Our online platform uses secure, encrypted connections to help protect your personal and financial information, with biometric security available for an additional layer of protection when accessing your account.

There are two main ways to lodge online with H&R Block, depending on how much help you want.
 

1. Online Tax Express: secure DIY online tax lodgement

If you prefer to prepare your own tax return, Online Tax Express lets you complete and lodge your tax return yourself online.

Rather than entering your Tax File Number, income details and deduction information into an unfamiliar tax website, you can prepare your return through H&R Block's established online platform. Secure, encrypted connections are used throughout the session to help protect the information you enter and submit.

Online Tax Express can also pre-fill information available from the ATO to help save you time, while taking you through your return step by step.

This makes it an option for people who are comfortable lodging their own return but still want the reassurance of doing so through an established tax provider.

Prefer to lodge yourself? Start your tax return with H&R Block Online Tax Express.
 

2. Online Tax Adviser: lodge online with a Tax Expert

If you like the convenience of doing your tax online but would prefer professional support, Online Tax Adviser gives you another option.

You can provide your tax information and documents online through H&R Block's secure platform, and our Online Tax Experts can prepare your return for you. They can review your information, prepare the return and lodge it through the registered agent lodgement system.

This gives you the convenience of an online service without having to manage the entire tax return yourself.

Prefer expert help? Lodge online with an H&R Block Tax Expert through Online Tax Adviser.

Both options mean you can complete your tax return online with H&R Block. The difference is simply whether you want to do it yourself with Online Tax Express or have a Tax Expert do the work through Online Tax Adviser.

 
How to Know If a Tax Website Is Legitimate Before You Start 

Before entering any personal information on a tax platform, run through this quick verification: 
 

• The web address begins with 'https' and shows a padlock symbol in the browser address bar. The absence of 'https' means the connection is not encrypted and the site should not be trusted with personal information. 
• The web address is the one you expected and has not been altered by a single character. Phishing sites commonly use addresses that differ from the legitimate site by one letter or an added word. 
• The platform has a clear, verifiable business identity: a business name, an Australian Business Number, a physical address, and contact details. 
• The platform's privacy policy clearly explains what data is collected, how it is used, and how long it is retained. 
• If you are using a registered tax agent's platform, the agent or the firm should be findable on the Tax Practitioners Board register as a registered entity. 

 
If any of these checks raise a concern, do not proceed. The safest response to any doubt about a platform's legitimacy is to find a different service rather than to continue and hope.

When using H&R Block online, access our services through the official H&R Block website. From there, you can choose Online Tax Express if you want to lodge yourself or Online Tax Adviser if you would like a Tax Expert to prepare your return. 
 

Red flag: being offered a refund before you have lodged  Scam messages frequently offer an immediate refund and ask you to click a link and enter your bank details. Tax refunds are processed after lodgement and assessment; no legitimate service can offer you a refund before your return has been submitted and reviewed. Any message claiming to offer an immediate refund in exchange for your details is a scam.

    

Want the convenience of online tax without using an unfamiliar platform?

With H&R Block, you have a choice.

If you want to lodge yourself, Online Tax Express gives you a secure DIY way to prepare and lodge online with H&R Block.

If you would rather have an expert prepare your return, Online Tax Adviser lets you provide your information online and have your return prepared by a trained Tax Expert on H&R Block's secure, established professional platform.

With our Tax Experts, you’re accessing the online services of a trusted professional tax firm that has been helping Australians with tax since 1971. Your personal information is handled with care and protected by our robust security processes and strict privacy obligations.

If you do not want to manage the lodgement process yourself, H&R Block can handle the preparation and lodgement of your return and assist with ATO queries or follow-up where required through Online Tax Adviser, an in-office appointment or a phone appointment.

Choose the way you want to lodge: start with Online Tax Express, lodge online with a Tax Expert through Online Tax Adviser, or find your nearest H&R Block office.   
  

What H&R Block Does to Keep Your Information Safe 

H&R Block has been helping Australians with their tax since 1971. Our platforms and processes are built around the handling of sensitive financial information.

That security extends to the ways our clients choose to lodge with us, including our online tax services.

Our Tax Experts are trained tax professionals who review your information and documents and prepare and lodge your return with the ATO.

This applies when you choose an expert-assisted service such as Online Tax Adviser, where you can provide your information online and have an H&R Block Tax Expert prepare and lodge your return.

For clients lodging through our online platform, secure, encrypted connections help protect the personal and financial information they provide. This includes clients using Online Tax Express to prepare their own return online as well as clients providing information through Online Tax Adviser.

If your Tax File Number is ever compromised, H&R Block's consultants can manage the process of lodging under enhanced security arrangements with the relevant authority on your behalf; you do not have to navigate that process alone. 
  

Secure online tax, whichever way you prefer to lodge

Security does not mean you have to give up the convenience of lodging online.

With H&R Block you can:
 

• Lodge it yourself with Online Tax Express: complete your tax return online using our DIY platform, with available ATO information pre-filled to help save you time.
• Lodge online with an expert through Online Tax Adviser: securely provide your information and documents online, then have an H&R Block Online Tax Expert prepare and lodge your return.
• Book an in-office or phone appointment: work directly with an H&R Block Tax Expert if you would prefer not to lodge through an online service.

 
Whichever option suits you, you have the reassurance of lodging with an established Australian tax firm that has been helping Australians with tax since 1971.

What Happens to Your Data After You Lodge 

Once your return is lodged, the information is held by the ATO and may also be retained by the platform or tax agent that prepared or lodged your return.

Registered tax practitioners are required to keep records that correctly record the tax agent services they provide for at least five years after the service has been provided. Taxpayers also generally need to keep records supporting their tax returns for five years from the date they lodge, although some records may need to be kept for longer. After applicable retention periods have passed, records are handled in accordance with relevant legal and privacy obligations and the provider's data retention policies.

Information held by the ATO is subject to strict privacy and tax secrecy obligations. The ATO may disclose taxpayer information to other government agencies only where authorised by law and for specific permitted purposes. In some circumstances, a tax refund may also be applied to certain government debts, such as overdue child support.

Your employer does not have general access to your lodged tax return. If you choose to provide your tax return to a third party, such as a financial institution for a lending application, that is separate from the ATO's disclosure arrangements.

Using an established online tax platform also means you can understand who is handling your information and what privacy obligations apply to it. Before choosing any online tax service, review its privacy policy and make sure you are comfortable with how your information will be collected, used, stored and retained. 

What to Do If You Think Your Tax Information Has Been Compromised 

If you suspect your tax information has been accessed by an unauthorised party, or if you have accidentally entered your Tax File Number or financial details on a site that may have been fraudulent, the most important thing is to act quickly.
 

1. Contact your tax agent immediately if you use one. If additional security has been placed on your tax account following a compromised TFN, your tax agent can help you navigate the process and manage your tax lodgement under the ATO's enhanced security arrangements.
2. Notify your bank. If you entered your bank account details on a fraudulent site, contact your bank's fraud team to flag the account and discuss what protective measures are available.
3. Monitor your tax account. If a return is lodged under your name that you did not submit, or if you receive a tax bill or assessment for a year you have not yet lodged, this is a signal that your identity may have been used.
4. Report the fraudulent site or communication. You can report scams to Scamwatch. If the communication claims to be from the ATO, you can also use the ATO's Verify or report a scam service or phone 1800 008 540.
5. Update your passwords. If you used the same password across multiple accounts and you believe one of them was compromised, change the password on every account that shared it.

 
If your Tax File Number or identity has been compromised, the ATO may place additional security measures on your account and monitor activity to help protect your tax and super information. These security measures can remain in place while the ATO considers there is an ongoing risk. H&R Block's Tax Experts can help you manage your tax affairs while these additional protections are in place.