As Australia’s tax season approaches, millions of taxpayers are preparing to submit their returns. However, this time of year also brings an increased risk of scam attacks, with fraudsters looking to exploit those handling sensitive financial information. The Australian Taxation Office (ATO) and cybersecurity experts have issued urgent warnings, as scammers are capitalizing on the heightened anxiety and confusion that often surrounds tax filings.
With new data showing significant losses already this year, experts are urging Australians to remain vigilant. The use of increasingly sophisticated scams, including phishing attempts and fake invoices, is on the rise. Here’s a closer look at the growing threats and how individuals can protect themselves during the tax season.
Scammers Targeting Australians During Tax Season
Tax time has long been a prime opportunity for scammers, and 2025 is proving no different. According to Norton, a leading cybersecurity firm, nearly one in three Australians have already been targeted by scams this year. Out of these, 22% were tricked, leading to financial losses. The average amount lost was $1,537, although some individuals have lost as much as $15,000.
Scammers know that Australians are already on edge, expecting communications from the ATO, tax agents, and other service providers. This vulnerability makes it easier for fraudsters to execute their schemes, often catching victims off guard. Dean Williams, a senior systems engineer at Norton, explains, “Phishing and invoice scams thrive during tax season as scammers know Australians are juggling financial admin and are more likely to click quickly.”
The Rise of AI in Scam Message
One of the most concerning developments in this year’s scams is the increased use of artificial intelligence (AI) to craft more convincing fraudulent messages. With AI tools becoming more advanced, scammers are able to replicate the style and appearance of official communications, making it harder for individuals to differentiate between real and fake messages.
This year, Australians may find themselves receiving messages that closely resemble legitimate ATO emails or text messages. These may contain urgent requests for payments or personal information, pushing recipients to act quickly. Norton urges people to pause before responding to any such requests and to always verify the source of the message through official channels.
$1,537 ATO warning as Aussies get ready to submit tax returns: 'Never been more important' https://t.co/SPPtqWDlzv
— Yahoo Finance Australia (@YahooFinanceAU) June 18, 2025
Fake Invoices and Phishing Scams Flooding Inboxes
The ATO has issued specific warnings about the surge in impersonation scams targeting Australians this year. Many scammers are sending fake invoices, claiming to be from the ATO or a tax agent. These often contain links that direct people to fraudulent websites designed to capture their personal details or payment information.
One particularly convincing scam imitates the myGov website, a platform that Australians commonly use to manage their tax affairs. While the site appears legitimate at first glance, a closer look at the URL reveals it is a counterfeit. The ATO has emphasized that they will never use social media platforms like Facebook or X to reach out to taxpayers with critical tax information.
How to Protect Yourself From Tax Scams
Given the rising number of scams, the ATO and cybersecurity experts have offered clear advice on how to avoid falling victim. First and foremost, individuals should never click on links or download files from messages they don’t recognize. If there’s any doubt about the authenticity of a communication, it’s best to contact the ATO directly using official contact information.
Additionally, taxpayers are encouraged to remain cautious of unsolicited communications, especially those that include a sense of urgency or demand immediate payment. Scammers often prey on this urgency, attempting to pressure individuals into making hasty decisions. Always take the time to verify any suspicious messages before responding or providing personal information.