Tax refund & ATO impersonation scams
Tax refund scams are fake texts, emails and calls that pretend to be from the ATO or myGov — promising a refund or threatening a debt to trick you into handing over your login, personal details or money. They spike around tax time (June to October), when a message about your return looks believable.
This guide explains how the scam works, the warning signs to watch for, and what to do if you've been caught out. Got a specific message in front of you? Check it now and get an instant verdict.
How this scam works
A scammer sends an unexpected message — SMS, email or call — claiming you're owed a tax refund or owe a tax debt, and pressures you to act fast. Refund versions ask you to 'claim' or 'confirm' a refund through a link, or to pay a small 'administration' or 'transfer' fee first; debt versions threaten fines, arrest or legal action unless you pay immediately, often by gift card, cryptocurrency or bank transfer. The link leads to a fake myGov or ATO sign-in page built to capture your login, Tax File Number (TFN) and bank details — and some messages use a QR code or attachment instead of a visible link to slip past filters. Example — a scam text might read: "myGov: You have a tax refund of $740.50 waiting. Claim within 48 hours: [link]". The real ATO settles refunds and debts through your myGov Inbox, letters and payment plans, not through an urgent link.
What the scam looks like
These composed examples show how the scam typically reads, with the tells that give each one away. Compare them against anything you've received.
ATO: Your income tax return has been processed and a refund is ready for release. Confirm your identity within 48 hours at ato-refund-portal[.]example or the amount will be returned to the Treasury.
What gives it away:
- Government agencies won't send you a link to log in to myGov or online services; go to my.gov.au yourself
- Real refunds are paid into the bank account already registered with the ATO; there is nothing to 'claim' or 'confirm' through a link
- The deadline and 'returned to the Treasury' threat are invented pressure; refunds don't expire in 48 hours
A caller says they're from the ATO's 'legal enforcement division': you have an outstanding tax debt, a warrant has been prepared, and police will attend today unless you pay immediately. They keep you on the line while you buy gift cards or transfer cryptocurrency.
What gives it away:
- Threats of immediate arrest, deportation or police action over a tax debt are always fraudulent
- No government agency takes payment by gift card or cryptocurrency
- Keeping you on the phone stops you checking your real position by logging in to myGov yourself or calling the ATO on a number from ato.gov.au
Subject: myGov: refund deposit failed. Your refund could not be deposited due to incorrect bank details. Update your information at mygov-refund-center[.]invalid to receive the payment.
What gives it away:
- 'Update your bank details' through an emailed link is a harvest of both your login and your banking information
- The domain is a lookalike, not my.gov.au, and the American spelling 'center' betrays a mass-produced template
- Check the real position by typing my.gov.au yourself and reading your ATO Inbox
Who gets targeted, and when
Every Australian who lodges a tax return, which is why the messages are blasted so widely at tax time. People genuinely expecting a refund are the natural clickers, and the threat-based debt versions hit newer taxpayers hardest, including international students and recent arrivals, by leaning on unfamiliarity with how the ATO actually operates.
Sharply seasonal: activity builds from June, peaks as returns are lodged and refunds genuinely start flowing over winter, and stays elevated into the October lodgment deadline. The debt-and-threat versions linger past tax time, resurfacing whenever an ATO deadline or a news story makes a tax message feel timely.
How to spot it
- An unexpected message about a refund or debt you weren't aware of, pushing you to act urgently
- A link asking you to log in to myGov or the ATO or to 'verify your identity' — government agencies won't send you a link to log on to online services like myGov
- A request for your Tax File Number, bank details, password or a one-time code
- A demand to pay a 'fee' to release a refund, or a debt payable by gift card, cryptocurrency or bank transfer
- Threats of arrest, deportation or legal action over a tax debt — these are always fraudulent
- A QR code or attachment in place of a normal link, or a sender name or number you can't trust (scammers can spoof 'ATO', 'myGov' and phone numbers, so judge the message, not the sender)
What to do if you have been targeted
- Don't tap any link, scan any QR code or open any attachment in the message
- Check independently: open the myGov app or type my.gov.au into your browser yourself and check your ATO Inbox — never use a link or number from the message
- If you're unsure, contact the ATO using a phone number listed on ato.gov.au to verify the message
- If you entered details on a fake page, change your myGov password immediately at my.gov.au and contact IDCARE for free identity support
- If you paid money or shared bank details, contact your bank straight away to try to stop or recover the payment
- Report it to the ATO through its scam page on ato.gov.au, and to Scamwatch
Where to report it
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
How to protect yourself
- Never tap a link, scan a QR code or open an attachment in an unexpected tax message
- Check any refund or debt claim yourself: open the myGov app or type my.gov.au and read your ATO Inbox
- Remember refunds arrive in the bank account already registered with the ATO; there is nothing to 'claim' through a link
- Treat arrest threats and gift-card or cryptocurrency payment demands as automatic proof of a scam
- Forward scam tax texts to 7226 (spells SCAM), then delete them
Tax refund & ATO impersonation scams in 2026
Tax-refund lures return every winter like clockwork, and the current season's mix follows a familiar rotation: refund-ready texts through the lodgment months, 'deposit failed, update your bank details' follow-ups once real refunds start flowing, and threat calls about invented debts that persist into spring. Newer twists lean on QR codes and attachments in place of visible links, and the lookalike myGov sign-in pages now harvest the verification code alongside the password. The shape of the ask never changes: a link to log in, a fee to release money, or a threat demanding untraceable payment. Each is a scam by definition; the real ATO deals with you through your myGov Inbox and your registered details.
Related brands targeted by this scam
Scammers often impersonate these names in tax refund & ato impersonation scams. Here's how to tell a genuine message from a fake:
Check a suspicious message now
Paste the text or email you're unsure about and get an instant verdict — tax refund & ato impersonation scams included, free.
Frequently asked questions
Does the ATO send refund notifications by text or email?
The ATO does send some SMS and emails, but — like other government agencies — it won't send you a message with a link to log in to myGov or its online services, and it won't ask you to claim a refund through a link. Genuine refunds are paid into the bank account already registered with the ATO. Treat any 'tax refund' link as a scam.
Why do tax refund scams spike from June to October?
That's when Australians genuinely expect to hear from the ATO about their return, so a refund- or debt-themed message lands at a believable moment. Treat any unexpected tax message with extra caution during tax time, and always go to myGov directly rather than through a link.
I got a 'tax refund' text with a link — what should I do?
Don't tap the link. Open the myGov app or type my.gov.au yourself to check for any real refund. Delete the message and report it to Scamwatch. If you already entered details, change your myGov password and contact IDCARE.
The message threatened me with arrest unless I paid a tax debt. Is it real?
No. Threats of immediate arrest, deportation or police action over a tax debt are always fraudulent, and no government agency demands payment by gift card, cryptocurrency or wire transfer. Hang up, and check your real position by logging in to myGov yourself.
How do I report an ATO or tax refund scam?
Report it to the ATO through the scam-reporting page on ato.gov.au, and to Scamwatch at scamwatch.gov.au so the National Anti-Scam Centre can track the campaign. Forward scam texts to 7226 (spells SCAM) so carriers can block the sender. If you lost money, also report it to ReportCyber at cyber.gov.au and tell your bank straight away.
I gave my Tax File Number to a fake page. How serious is that?
Serious enough to act on today. A TFN combined with other personal details can be used for identity theft, including fraudulent lodgments in your name. Contact IDCARE (idcare.org) for free specialist support, tell the ATO through a number listed on ato.gov.au so it can monitor your record, and change your myGov password at my.gov.au.
Related scam types
Other scams hitting Australians right now — know the warning signs:
Sources
- Phishing scams (Scamwatch (National Anti-Scam Centre))
- Threat scams (Scamwatch (National Anti-Scam Centre))
- Text or SMS scams (Scamwatch (National Anti-Scam Centre))
This guide is general information, not legal or financial advice — if you've lost money, contact your bank and the reporting channels above straight away.