SEVNworks Start a project

Everyone

Fake ATO emails about a "payment update" can let scammers into your computer

Published: 26 Oct 2026 · Last checked: 26 Oct 2026

Checked: 26 Oct 2026, against the ATO's scam alerts page and the ACSC

2 min read

If the button does not work, use your browser's print command.

In short: The ATO warns about fake emails that say you have a new payment update in your ATO profile, or an income statement to review. The link downloads software that can let a scammer into your device. If you do your own tax return, it's due on 31 October, so watch for these this week.

Think you've been scammed? Act now. It's not your fault.

  1. Lost money or shared bank details? Call your bank or card provider straight away and ask them to stop any transactions. Use the number on the back of your card or in your banking app.
  2. Report it to Scamwatch (scamwatch.gov.au/report-a-scam).
  3. Cybercrime (hacked account, stolen money or data, extortion)? Report it to police through ReportCyber (cyber.gov.au/submit-a-report).
  4. Your identity details have been misused or stolen? Call IDCARE free on 1800 595 160.
  5. Need urgent cyber help? Call ASD's Australian Cyber Security Hotline, 1300 CYBER1 (1300 292 371). It's open 24 hours a day, 7 days a week.
  6. Someone is in danger right now? Call 000.

Be careful of anyone who offers to get your money back for a fee. That is usually another scam.

What's happening

The ATO says it has received reports of a new email scam pretending to be from the Australian Taxation Office. According to its scam alerts page (last updated 18 September 2026), the email says either:

  • you have a new payment update in your ATO profile, or
  • you need to review your income statement, by clicking the link in the email.

The link opens a page asking you to view or download a file. The ATO says the download is "malicious remote desktop connection software", which can let the scammer get into your device.

What we don't know

  • The ATO doesn't say how many people have received these emails, or how many have lost money.
  • Scammers change the wording, so an email that looks different from the ATO's examples can still be this scam.

Who's at risk

  • Anyone with a tax return to do, especially if you lodge your own: the deadline is 31 October.
  • Anyone who uses the same computer for online banking or work email. Whoever gets into the device can get to those too.

What to do

  1. Don't click links, open attachments or download files from an email or text that says it's from the ATO.
  2. To check your tax, sign in to myGov yourself by typing my.gov.au into your browser, or use the ATO app.
  3. Forward the email to ReportScams@ato.gov.au, then delete it.
  4. If you downloaded the file, call your bank straight away. The ACSC says your bank may be able to put a temporary freeze on your accounts. Then report it through ReportCyber.
  5. If you gave the scammer personal details or paid them, call the ATO on 1800 008 540.

Why it matters in Australia

The ATO says it "will never send an unsolicited message that directs you to a log in page". An email that does is not from the ATO, however real it looks.

Report it / get help

Sources

  1. Australian Taxation Office, "Scam alerts: September 2026, malware scam", last updated 18 Sep 2026. https://www.ato.gov.au/online-services/scams-cyber-safety-and-identity-protection/scam-alerts (checked 26 Oct 2026)
  2. Australian Taxation Office, "Verify or report an ATO scam". https://www.ato.gov.au/online-services/scams-cyber-safety-and-identity-protection/verify-or-report-an-ato-scam (checked 26 Oct 2026)
  3. ASD's ACSC, "Protect yourself from remote access scams". https://www.cyber.gov.au/about-us/advisories/protect-yourself-remote-access-scams (report it and notify your bank, which may be able to freeze your accounts. checked 26 Oct 2026)
  4. IDCARE, "Get help". https://www.idcare.org/contact/get-help (checked 26 Oct 2026)

General information only, not advice. Disclaimer · Spotted an error? Corrections policy · Written by SEVNworks, a Sydney studio that builds websites and AI workflows. · SEVN Works Pty Ltd, ABN 84 677 263 035 · Privacy policy