How to Spot Fake Medicare and Centrelink MyGov Phishing Emails Targeting Australian Small Businesses

Summary

This guide helps you troubleshoot and resolve: How to Spot Fake Medicare and Centrelink MyGov Phishing Emails Targeting Australian Small Businesses. Follow the steps below to fix the issue.

Common Causes

Phishing emails targeting Australian small business owners often impersonate trusted government services like Medicare and Centrelink via MyGov. These messages aim to steal personal details, banking information, or business credentials. Learning to spot the warning signs helps protect your organisation and your employees from identity theft and financial loss.

Quick Fix Steps

1. Do not click any links or open attachments in the email.
2. Check the sender address carefully for misspellings or unusual domains.
3. Log in to MyGov directly by typing my.gov.au into your browser, not by using email links.
4. Report the email to the Australian Cyber Security Centre via reportcyber.gov.au.
5. Delete the email from your inbox and empty your deleted items folder.

Detailed Instructions

Identify Suspicious Sender Addresses

Official Medicare and Centrelink emails come from government domains ending in gov.au. Phishing emails often use addresses that look similar but contain subtle differences.

• Look for extra characters, such as medicare-support.com.au instead of servicesaustralia.gov.au.
• Be wary of free email providers like Gmail, Outlook, or Yahoo claiming to be government agencies.
• Hover over the sender name to reveal the actual email address before trusting the message.

Recognise Common Phishing Tactics

• Urgent threats: Messages claiming your Medicare account will be suspended or Centrelink payments stopped unless you act immediately.
• Fake refunds: Offers of unexpected tax or benefit refunds requiring you to confirm bank details.
• Generic greetings: Emails addressed to "Dear Customer" rather than your full name.
• Poor spelling and grammar: Mistakes in Australian English spelling or awkward phrasing.
• Suspicious attachments: Unexpected PDFs, ZIP files, or HTML files claiming to be forms or invoices.

Verify Links Before Clicking

1. Hover your mouse over any link in the email to see the destination URL.
2. Check that the link leads to a domain ending in gov.au.
3. Avoid shortened URLs such as bit.ly or tinyurl.com in government correspondence.
4. If in doubt, open a new browser window and type my.gov.au manually.

Check Your MyGov Account Directly

1. Open your web browser and navigate to my.gov.au.
2. Sign in using your usual MyGov credentials.
3. Check your inbox within MyGov for any official messages. Government agencies send secure messages through your MyGov inbox, not via standalone email links.
4. If there is no matching message in your MyGov inbox, the email is likely fraudulent.

Medicare and Centrelink will never ask you to confirm your password, TFN, or banking details via email or SMS.

If you have already clicked a link or entered personal details, change your MyGov password immediately and contact your financial institution if banking information was shared.

Protect Your Business Email

• Enable multi-factor authentication on your MyGov and business email accounts.
• Train staff to recognise phishing emails and report suspicious messages.
• Keep your operating system and email software updated with the latest security patches.
• Use a reputable email filtering solution to quarantine suspicious messages before they reach inboxes.

If you suspect a phishing email has targeted your business, contact your IT support provider for assistance.

Still Having Issues?