VICTORIA. — Victoria Police is urging the community to be vigilant of scammers targeting MyGov sign-in details to commit tax fraud and impersonating well-known Australian retailers online during the end of financial year sales.
The force’s Cybercrime Squad see scammers attempt to fraudulently access linked government services every year during the rush to complete tax returns, before either generating fraudulent payments in the victim’s name, or redirecting tax refunds to be paid into their own accounts.
With consumers also scrolling online for end of year financial sales coinciding at the same time, scammers use fraudulent websites to impersonate genuine online retail stores belonging to many popular brands.
According to Cybercrime Squad Detective Acting Inspector Carl Keenan, in the last year, police received 978 reports relating to tax fraud, with a total reported loss of $278 thousand dollars. These reports were then forwarded to the relevant government agency, such as the ATO, for further action.
“We’re encouraging everyone to be hypervigilant when it comes to scams such as these,” Act. Insp. Keenan said.
During the same period, the Cybercrime Squad issued 20 myGov-related phishing domain takedown requests.
There were also 303 reports relating to fake online stores, resulting in a loss of $729 thousand dollars.
The Cybercrime Squad works tirelessly to get scam websites removed – and in response to these reports issued takedown requests for 139 fake online store-related websites.
It’s prompted a police warning for Victorians to be on alert for these scammers during this period and make a report if they fall victim.
“Scammers are also creating websites which look almost identical to genuine brand websites, and they’re paying for their sites to appear at the top of an internet search,” Act. Insp. Keenan said.
Tax fraud:
Scammers use a variety of methods to compromise their victims’ identities, including sending phishing email and SMS scams to impersonate government agencies.
These scams can contain links to fake myGov websites. Victims will be prompted to enter their details, unknowingly giving criminals access to their genuine myGov accounts linked to their ATO accounts. Once they have access, scammers are able to pose as the victim in order to commit fraud.
Scammers will use the cover of events such as annual tax time to lure potential victims. Common phrases currently being used by scammers include:
- ‘You are due to receive an ATO Direct refund’
- ‘You have a new message in your myGov inbox – click here to view’
- ‘You need to update your details to allow your Tax return to be processed’
- ‘We need to verify your incoming tax deposit’
- ‘ATO Refund failed due to incorrect BSB/Account number’
- ‘Your income statement is ready, click on the link to view’
Once the offenders have gained access to an account, they are then able to pose as the victim in order to commit fraud.
End of financial year sale scams:
Scammers will often impersonate popular brands using the latest technology to create convincing fake websites using the brand’s logo, designs and layouts.
Generally, they’ll include a “.com.au” domain name, and likely the stolen ABN number of the business they are purporting to be.
They might also pay for their fraudulent website to appear at the top of an internet search or offer the same products as the genuine brand at a significantly lower price.
Steps Victorians can take to protect themselves:
The Cybercrime Squad urge the community to remain vigilant and actively follow the below advice to prevent falling victim to these scams:
- Never click on a hyperlink that has been texted or emailed. The ATO and myGov will never send you an SMS or email with a link to access online services – always access these directly by typing ato.gov.au(opens in a new window) or my.gov.au(opens in a new window) into your browser.
- Use a Digital ID or Passkey to sign into myGov is the strongest way to sign in and protect your account. If you can’t use a Digital ID or Passkey, you can set up another multi-factor authentication sign in option, such as SMS codes or an authenticator app.
If you suspect someone has stolen your tax file number or is using your tax information illegally, call the ATO on 1800 467 033. They will explain the safeguards that need to be applied to keep your ATO account safe.
Call Services Australia’s Scams and Identity Theft Helpdesk on 1800 941 126 if you’ve:
- opened a link in a suspicious text message, email or social media message pretending to be from Services Australia or myGov.
- given someone your myGov sign in details or other personal information.
- visited a website or downloaded a fake app that that pretended to be Services Australia or myGov.
Report any suspicious contact claiming to be from Services Australia or myGov to reportascam@servicesaustralia.gov.au
There’s more information about myGov scams and what to do if you have been affected by one my.gov.au/scams
Scams that are not impersonating the ATO, myGov or a Services Australia brand can be reported to scamwatch.gov.au/report-a-scam. They also have further advice on spotting fake websites.
“We encourage anyone who has been subject to scams such as these to speak to police,” Act. Insp. Keenan said.
If you think you have been the victim of an online scam, contact your bank or card provider immediately to report the scam. They may be able to stop a transaction from going through.
Crime Stoppers 1800 333 000 or www.crimestoppersvic.com.au.
