As Australia's tax season approaches, the Australian Cyber Emergency Response Team (AUSCERT) is cautioning organisations and individuals to be on high alert for phishing scams as cybercriminals ramp up techniques designed to capitalise on increased financial activity during this time.

AUSCERT has noted a significant rise in phishing scams impersonating MyGov and the Australian Taxation Office (ATO) during previous tax seasons. From July to October 2022, AUSCERT received reports of more than 1,100 tax-related phishing emails and scams. This number surged to over 2,500 in 2023 and is predicted to rise even higher this year.

MyGov reported at the Australian Cyber Security Showcase in Canberra last week that it is the most impersonated site in Australia, with their team taking down over 4,000 fake sites in the past year.

"Phishing emails often impersonate official entities and contain convincing logos and language to deceive recipients and urge users to click on a link, scan a QR code or download an attachment. The emails also claim that urgent action is required to avoid account suspension and attempt to trick users about a pending tax refund, highlight issues with a tax return or demand immediate action to avoid penalties," said General Manager of AUSCERT, Ivano Bongiovanni. "But clicking on these links can potentially lead to malicious websites that could steal Personally Identifiable Information (PII) or sensitive data like user credentials or credit card details. Additionally, clicking on the links may install malware on the user's device, creating a backdoor for cybercriminals to monitor activities, track user behaviour, and steal login information."

AUSCERT has provided a list of precautions to protect oneself from ATO and MyGov related phishing scams during the upcoming tax season. If an individual's identity has been compromised or they have fallen victim to a tax-related scam, they are advised to contact IDCARE on 1800 595 160.

"By staying informed and vigilant and following best practices for online security, individuals can reduce the risk of falling victim to ATO and MyGov related phishing scams during tax season," said Bongiovanni.