How to Spot and Avoid Tax-Time Scams in Australia

Tax season (July to October) is peak season for scammers in Australia. If you're an international student, you're a target: you're managing money far from home, you may be new to Australian tax rules, and you might not know what a legitimate tax authority looks like. This guide shows you exactly how to recognise and avoid the most common tax-time scams, and what to do if you've been caught.

This is general information only, not financial or tax advice. Afrovo is not a licensed financial adviser. For specific tax questions, contact the ATO directly or see the official sources linked below.

What Makes You a Target at Tax Time

Scammers know international students often juggle multiple jobs, earn casual income, and may not be confident about what they owe or what they're owed. They use urgency, fake authority, and the fear of getting in trouble with the ATO to trick you into handing over personal information or money.

The most dangerous scams do not ask for cash upfront. Instead, they steal your Tax File Number (TFN), your identity, or both, and use them to lodge fraudulent tax returns in your name.

The Five Most Common Tax-Time Scams

1. Fake ATO Text Messages

You receive an SMS saying the ATO has a refund waiting for you, or that your tax file is at risk, or that you need to update your details urgently. The message includes a link.

How to spot it: The real ATO rarely initiates contact via text or email about refunds. If you click the link, you land on a fake website that looks almost identical to the real one. You enter your TFN, date of birth, and bank details, and the scammers have everything they need.

What to do instead: Do not click links in unsolicited messages. If you're unsure, go directly to the ATO website by typing the URL yourself (www.ato.gov.au) and log in via myGov to check your account. The real ATO will never ask you to click a link in a message to confirm your identity.

2. Fake ATO Emails

You receive an official-looking email from "ATO Support" or "Tax Commissioner" saying you've underpaid tax or owe a penalty. It urges you to open an attachment or click a link to resolve it immediately.

How to spot it: Scammers copy the ATO's logo and letterhead exactly. The email address might be almost correct (e.g., "atosupport.com.au" instead of "ato.gov.au"). The attachment is often a fake form or a virus. The tone is urgent and threatening.

What to do instead: Never open attachments from unsolicited emails. Forward the email to the ATO at phishing@ato.gov.au, then delete it. If you lodge your tax return through myGov, you do not need to email the ATO anything.

3. Fake Tax Agent Websites and Phone Numbers

You search online for "free tax help for students" and find a website that looks professional and offers to lodge your return for free. You call a number in a search result and speak to someone who sounds official. They ask for your TFN and bank details to "process your refund quickly".

How to spot it: Real free tax help is only available through the ATO's free services (myTax for simple returns, or volunteer clinics run by community organisations). Fake agents often promise bigger refunds, fast processing, or upfront cash. The websites are poorly designed or copied from real sites.

What to do instead: Always verify a tax agent's registration. Go to the Tax Practitioners Board (TPB) register and search their name or business. If they are not registered, do not use them. If you need free help, contact the ATO directly at 1300 366 877 or use myTax (free online tool).

4. Job Offer Scams That Steal Your TFN

You see a job ad (usually casual retail or delivery work) that promises quick hiring and high pay. The "employer" asks you to provide your TFN, ABN, bank details, and a copy of your ID "to process your first payment".

How to spot it: Real employers do not ask for your TFN upfront. They ask for it only after you've been hired and you've completed your first week or two of work. Scam job ads often have vague descriptions, poor grammar, and pressure to reply quickly.

What to do instead: Never give your TFN to anyone who contacts you via an unsolicited ad or message. Real employers verify your identity in person, and they explain why they need each piece of information. If an employer is legitimate, they will be registered with the Australian Business Register (ABR). Check them at asic.gov.au.

5. Identity Theft After a Data Breach

You receive an email or call from someone claiming to be from your bank or university, saying there's been a security breach and you need to "re-verify" your details. They ask for your full name, date of birth, TFN, passport number, and bank account number.

How to spot it: Real organisations never ask you to verify full details via email, phone, or chat. If your data is compromised, they contact you with a clear explanation and a secure process to reset your password or contact the fraud team.

What to do instead: Hang up or delete the message. Call your bank or university directly using the phone number on their official website or card. Do not use any phone number given to you in the suspicious message.

Step-by-Step: How to Protect Your TFN and Identity

Step 1: Keep Your TFN Secret

Your Tax File Number is like a master key to your Australian financial life. Only give it to:

• •Your employer (they need it within 28 days of starting work).
• •The ATO (via myGov).
• •Your bank or superannuation provider (when you open an account).
• •Your university (for their records).

Never share it by email, text, phone call, or social media. Never post a photo of a letter containing it. Never fill it into online forms unless you can verify the website is official (check the URL carefully).

Step 2: Use myGov to Check Your Tax Record

Set up myGov and link it to your ATO account. This is free and takes 10 minutes. Log in regularly (at least once a month during tax season) to check:

• •Your income recorded by employers.
• •Any lodgements made in your name.
• •Your refund status.

If you see income you don't recognise or returns you didn't lodge, report it immediately to the ATO.

Step 3: Verify Every Request

Before you give out any personal information, verify the person or organisation asking for it. If they contact you:

• •Ask for their name, title, and direct phone number.
• •Tell them you will call them back using the official number from the organisation's website.
• •Hang up and call that number. Do not use any number they give you.

This is standard practice and legitimate organisations expect it.

Step 4: Lodge Your Own Return via myTax

If your income is simple (only casual or part-time work, less than AUD 25,000), use the ATO's free myTax tool to lodge your return yourself. This gives you full control and means no one else has access to your information. If you earned under the tax-free threshold of AUD 18,200, you still need to lodge to claim back any tax withheld.

Step 5: Watch Your Bank and Super Accounts

Every week, check your bank balance and your superannuation account (via your fund's app or website). If you see:

• •Withdrawals you did not make.
• •Deposits from employers you don't work for.
• •Super contributions to an account you didn't open.

Report it immediately to your bank and the ATO.

If You Suspect You've Been Scammed

Immediate Actions

Stop all communication with the scammer. Do not send any more information or money.

If they have your TFN, contact the ATO immediately:

• •Phone: 1300 366 877 (Monday to Friday, 9 am to 5 pm Australian Eastern Time).
• •Online: log into myGov and use the ATO's secure messaging.

If they have your bank details, contact your bank's fraud team immediately. Most banks have a dedicated number on the back of your card.

If they have your personal information (passport number, date of birth, address), consider a credit report check with one of Australia's credit reporting bodies (Equifax, Experian, Illion) to watch for signs they've opened accounts in your name.

Report It

Report the scam to Scamwatch, the Australian Consumer and Competition Commission's (ACCC) fraud-reporting service. This helps authorities track scam patterns.

If the scam involved a specific platform (email, text, job board, social media), also report it to that platform's abuse team.

Keep Records

Save every message, screenshot, email, or call log. Write down:

• •The date and time of contact.
• •How you were contacted (SMS, email, phone, website link).
• •What information you shared (if any).
• •Any names or numbers they gave you.

You may need this evidence if you lodge a formal complaint with police or the ATO.

Common Tax-Time Scam Red Flags: A Checklist

• •Unsolicited contact asking you to click a link or open an attachment.
• •Urgent language: "Act now", "Your account is at risk", "You owe money immediately".
• •Requests for your TFN, password, or full banking details.
• •Offers to lodge your tax return for a very high fee (e.g., 30% of your refund).
• •Poor grammar, spelling mistakes, or slightly wrong logos.
• •A phone number or email that is almost correct but not quite.
• •Requests to pay via gift cards, cryptocurrency, or wire transfer.
• •Promises of refunds much larger than you expect.

If you spot even one red flag, do not engage. Delete, hang up, or close the window.

Frequently Asked Questions

Q: Is it safe to lodge my tax return online via myGov?

A: Yes. myGov is secure and is the ATO's official online platform. The connection is encrypted, and the ATO uses two-factor authentication to verify your identity. Lodging via myGov is actually safer than using a third-party tax agent (as long as the agent is registered).

Q: What if a scammer has already used my TFN to lodge a false return?

A: Contact the ATO immediately on 1300 366 877. They can flag your TFN, cancel fraudulent lodgements, and help you get your record corrected. If this has happened to you, the ATO will not charge you a penalty. They deal with identity theft regularly.

Q: Do I have to use a tax agent, or can I lodge myself?

A: You can lodge yourself for free via myTax if your income is simple. A tax agent is optional. If you do use one, make sure they are registered with the Tax Practitioners Board. Never pay a fee upfront; legitimate agents charge only after your return is lodged (usually a flat fee or hourly rate, not a percentage of your refund).

Q: How do I know if a text or email is really from the ATO?

A: The real ATO will never ask you to click a link in an unsolicited message. If you receive a message claiming to be from the ATO, log into myGov yourself (type the URL directly) and check your account. If there is a real issue, it will show there. Do not click any link in the message.

Q: Can I get in trouble if a scammer lodges a return using my TFN?

A: No. If you report it to the ATO, they will investigate and correct your record. The ATO understands that identity theft happens. As long as you report it quickly and cooperate with the ATO, you will not be penalised.

Summary: Stay Alert and Verify Everything

Tax-time scams are designed to feel urgent and official. The best defence is simple: never click unsolicited links, never share your TFN over email or phone, and always verify by calling the organisation directly using a number from their official website.

If you lodge your own return via myTax, you keep control of your information and avoid the risk of using a scam agent altogether. If you are unsure about anything, contact the ATO directly. They are free to call, and they would rather answer your questions than have you fall for a scam.

For more on managing your money safely in Australia, visit our student finance hub. For free, trustworthy help with your tax return, see the ATO's free services or ASIC MoneySmart.