How to identify and safely handle fake ATO tax refund SMS messages targeting Australian small businesses

Summary

This guide helps you troubleshoot and resolve: How to identify and safely handle fake ATO tax refund SMS messages targeting Australian small businesses. Follow the steps below to fix the issue.

Common Causes

Fraudulent SMS messages claiming to be from the Australian Taxation Office (ATO) are increasingly targeting small business owners across Australia. These messages often promise a tax refund or demand immediate payment to trick you into clicking a malicious link or sharing sensitive business and personal information. This guide will help you identify a fake ATO SMS and handle it safely to protect your organisation.

How to identify a fake ATO SMS

Scammers use sophisticated tactics to make their messages look legitimate. Look for these common warning signs:

• Unexpected refunds: The ATO will not send an SMS notifying you of a refund without you first lodging a tax return.
• Urgent language: Messages that create a sense of panic, such as "act now" or "immediate action required," are common phishing tactics.
• Suspicious links: The link may look similar to ato.gov.au but will contain extra characters, misspellings, or a different domain entirely.
• Requests for personal data: The ATO will never ask for your Tax File Number (TFN), bank account details, or passwords via an SMS link.
• Generic greetings: Be wary of messages addressed to "Customer" or "Taxpayer" rather than your business name.

How to safely handle the message

1. Do not click any links in the message.
2. Do not reply to the SMS or call any number provided in the text.
3. Take a screenshot of the message for your records if you intend to report it.
4. Delete the message from your phone's inbox.
5. Block the sender's number using your device's native messaging app settings.
6. Visit the official ato.gov.au website by typing the address manually into your browser to check your actual tax status.
7. Report the scam to the ATO via their official website.

Tip: If you have already clicked a link but have not entered any information, simply close the browser tab. If you have entered business or personal details, change your passwords immediately and contact your IT support provider for security assistance.

Caution: Never provide your myGov login credentials or Tax File Number via a link sent in an SMS. The ATO will never ask you to verify your identity through a text message link.

Still Having Issues?