Email scam · ATO

ATO Email Scam: Fake Payment Update That Installs Remote Access Software

Reported September 2026

Scam emails claiming to be from the ATO say you have a payment update or need to review your income statement, then download software that gives scammers access.

What the scam looks like

The ATO has received reports of emails pretending to be from the Australian Taxation Office. The email says you have a new payment update in your ATO profile, or that you need to review your income statement, and gives you a link.

The link opens a page asking you to view or download a file. That download is malicious remote desktop software, which can let the scammer take control of your device.

What to watch out for

• An unexpected ATO email with a link to a payment update or income statement.
• A page asking you to download a file to view it.
• The ATO says it never sends an unsolicited message that directs you to a log in page.

What to do

• Don’t click the link, open attachments or download anything.
• To check for genuine ATO messages, sign in to myGov yourself by typing my.gov.au into your browser.
• If you downloaded the file, gave personal details or made a payment, call the ATO immediately on 1800 008 540, and have your device checked.

Where to report it

• Forward the email to ReportScams@ato.gov.au, then delete it.
• Report it to Scamwatch at scamwatch.gov.au.

Sources

• ATO scam alerts (September 2026)

We summarise official warnings in our own words, and never reproduce the links in scam messages. If something here looks wrong, tell us.