How to Spot Fake MyGov Tax Refund SMS Messages Targeting Australian Small Businesses

Scams & Phishing KB-698

Summary

This guide helps you troubleshoot and resolve: How to Spot Fake MyGov Tax Refund SMS Messages Targeting Australian Small Businesses. Follow the steps below to fix the issue.

Quick Tip: Need immediate assistance? 💻 Open a Ticket

Common Causes

Cybercriminals frequently target Australian small business owners with fraudulent SMS messages claiming to be from MyGov. These messages often promise a tax refund or demand urgent action to avoid penalties. Clicking the links in these texts can lead to fake login pages designed to steal your MyGov credentials, banking details, or business information. This guide will help you identify the warning signs of a fake MyGov SMS and protect your business from phishing attacks.

Common Signs of a Fake MyGov SMS

Scammers use several tactics to make their messages look legitimate. Look for these red flags before clicking any link:

The message creates a sense of urgency, such as "act within 24 hours" or "your refund will expire"
It contains a shortened URL or a link that does not end in my.gov.au
There are spelling mistakes, poor grammar, or unusual formatting
The sender number is a mobile phone number rather than an official MyGov sender ID
It asks you to reply with personal details, TFN, ABN, or banking information
You are not expecting a tax refund or have not lodged a return recently

How to Verify a Legitimate MyGov Message

Do not click any links in the SMS message.
Open your web browser and manually type https://www.my.gov.au into the address bar.
Log in using your MyGov username and password.
Check your MyGov inbox for official messages. Legitimate government notifications will also appear in your secure online inbox.
If there is no matching message in your inbox, the SMS is almost certainly a scam.

MyGov will never send you a link via SMS that asks you to log in or provide personal details. Official communications direct you to log in to your MyGov account manually.

What to Do If You Receive a Suspicious SMS

Do not reply to the message.
Do not click any links or download any attachments.
Delete the message from your device.
Report the scam to Scamwatch to help warn other Australian businesses.
If you accidentally clicked a link or entered details, change your MyGov password immediately and contact your financial institution.

If you entered your MyGov login details on a suspicious website, your account may be compromised. Log in to the official MyGov site as soon as possible and update your security settings.

Protecting Your Business from SMS Phishing

Educate all staff members about SMS and email phishing scams.
Use multi-factor authentication on your MyGov and business banking accounts.
Regularly update your mobile device operating system and security software.
Verify any unexpected tax-related communication through official government channels.

If you believe your business has been targeted by a phishing scam or need assistance securing your accounts, Open a Ticket with 220 Internet Services support.

Still Having Issues?

Need more help? If the issue persists after trying these steps, please open a support ticket and our team will assist you.

💻 Open a Ticket