'Click here to view': tax time scam stealing millions from Aussie returns (2024)

Scammers are breaching myGov accounts to steal tax returns and generate fraudulent payments through the government services hub.

MyGov users were warned that scammers were capitalising on the annual tax time rush to breach the online portal and redirect tax refunds to their own bank accounts.

More than 300 people have reported the tax scam to Victoria Police since June 30 with a combined loss of $2 million.

Victims were prompted to click a link that asked for their login details. By entering their information, victims gave scammers access to myGov and linked Australian Taxation Office (ATO) accounts.

Once the scammer had gained access they were able to change the phone and email contact details, so their victim would not receive notifications from the portal, as well as bank account details.

"We're encouraging everyone to be hypervigilant when it comes to scams such as these," detective senior sergeant John Cheyne said.

"Never click on a link sent to you that is purporting to be from the Australian Taxation Office or myGov, they will never ask you to access any online services via a link," he said.

Police have warned that messages reading 'You have a new message in your myGov inbox - click here to view' or 'You are due to receive an ATO Direct refund' should raise a red flag.

Protect against myGov scammers

Victoria Police advised myGov users to protect against scammers with digital security measures.

Enabling multi-factor authentication was recommended as well as a a passkey such as facial or fingerprint recognition.

Avoid clicking on hyperlinks that were texted or emailed. Victoria Police said "the ATO and myGov won't send you an SMS or email with a link to access online services - always access these directly by typing ato.gov.au or my.gov.au into your browser".

A digital ID, such as myGovID, was also recommended when accessing ATO online services through myGov.

"We'd also recommend you conduct a bi-yearly health check of your accounts. Check your credit score or log in to your myGov account to make sure no edits have been made throughout the year that weren't done by you," detective senior sergeant Cheyne said.

"Account compromises such as these are often not identified until months after they've occurred, when the victim next logs in to their account."

If you suspect someone is using your tax information illegally or has stolen your personal identity documents, contact the ATO as soon as possible on 1800 467 033. They will explain the safeguards that need to be applied to keep your ATO account safe. Report any suspicious contact claiming to be from the ATO to ReportScams@ato.gov.au. and Crime Stoppers on 1800 333 000.

Call Services Australia's Scams and Identity Theft Helpdesk on 1800 941 126 if you've: