How to Spot Fake Australian Government MyGov Login Pages and Protect Your Account Credentials

Summary

This guide helps you troubleshoot and resolve: How to Spot Fake Australian Government MyGov Login Pages and Protect Your Account Credentials. Follow the steps below to fix the issue.

Common Causes

Cybercriminals often create fake versions of the official myGov login page to steal usernames, passwords, and personal details from Australian taxpayers. These phishing sites can look convincing, using government-style branding and urgent messages about tax refunds or Centrelink payments. This guide shows you how to identify fraudulent myGov websites and protect your account credentials before you enter any sensitive information.

Verify the Official myGov URL

1. Open your web browser and look at the address bar at the top of the window.
2. The official myGov login page uses the domain my.gov.au.
3. Be cautious of addresses that include extra words, hyphens, or different spellings, such as mygov-login.com, mygov-secure.net, or my-gov.au.com.
4. Official Australian government websites always end in .gov.au. If the address ends in .com, .net, .org, or any other extension, it is not a genuine government site.
5. Check for spelling errors in the domain name. Scammers often register addresses like myg0v.au (using a zero instead of the letter o) to trick users.

Check the Security Indicator

1. Look to the left of the website address in your browser's address bar.
2. A genuine myGov page displays a padlock icon, indicating the connection is encrypted.
3. Click the padlock to view the security certificate details. The certificate should be issued to an Australian government organisation.
4. If your browser shows a warning that the connection is not private or the certificate is invalid, do not proceed. Close the tab immediately.

Avoid Links in Emails and Text Messages

1. myGov will never send you an email or SMS containing a direct link to log in to your account.
2. If you receive a message claiming to be from myGov, the ATO, or Centrelink with a login link, do not click it.
3. Instead, open your browser and manually type my.gov.au into the address bar.
4. Log in from the official homepage to check for any legitimate messages or notifications in your myGov inbox.

Recognise Common Phishing Tactics

• Urgent language claiming you are owed a tax refund or face immediate penalties.
• Requests to "verify" or "update" your personal details to avoid account suspension.
• Poor grammar, spelling mistakes, or generic greetings like "Dear customer" instead of your name.
• Sender email addresses that do not match official government domains.
• Websites that ask for your myGov sign-in details plus additional information such as your tax file number, credit card number, or full date of birth on the same page.

What to Do If You Entered Details on a Suspicious Site

1. Close the browser window or tab immediately.
2. Go to the official my.gov.au website and sign in using a trusted device.
3. Change your myGov password immediately through the official account settings.
4. If you used the same password for other accounts, change those passwords as well.
5. Contact Services Australia or the ATO if you believe your personal information has been compromised.
6. Report the fraudulent website to the Australian Cyber Security Centre through their official reporting portal.

Tip: Bookmark the official myGov login page (my.gov.au) in your browser and use the bookmark whenever you need to access your account. This reduces the risk of accidentally visiting a look-alike site.

Caution: myGov will never ask for your password via email, text message, or phone call. If someone requests your myGov credentials, it is a scam.

Still Having Issues?