It’s that time of year again, receipts are flying, your MyGov password is on its last attempt, and you’re hoping the refund hits the account before your next bill does. Welcome to EOFY (End of Financial Year) in Australia, a season for sorting finances, and sadly, for scammers to strike.

While you're busy lodging returns or chasing deductions, scammers are busy too, pretending to be the ATO, MyGov, or your bank, and trying to sneak into your inbox, DMs, and even phone calls. So how do you stay one step ahead? Let’s break it down.

What Are EOFY Scams, Exactly?

EOFY scams are designed to look real, and to freak you out just enough to click, call, or hand over your info. Here’s what’s commonly going around:

  • Text messages or emails saying you’re due a refund, “just click here to claim!”
  • Phone calls from someone pretending to be the ATO, warning you owe tax and threatening legal action.
  • Fake websites that look like MyGov or the ATO, but are actually traps to steal your login details.
  • Requests for your TFN (Tax File Number), Medicare number, or bank details out of the blue.

They often use legit-looking logos, formal language, and even fake caller IDs. It’s sneaky, and it's happening a lot.

How to Spot a Scam Before It Spots You

Here’s how scammers try to hook you, and what to watch for:

  • “You must act NOW!” Creating panic is a classic trick.
  • Asking for info they shouldn’t, like TFN, card number, or passwords.
  • Sketchy links or emails from random addresses.
  • Anything that just feels…off.

Tip: The ATO will never ask for your personal info via text, social media, or random phone calls.

Quick Ways to Stay Safe

EOFY can already feel like a lot, so here are 5 simple steps to protect yourself:

  1. Visit official websites directly
    If you receive a message about your tax or refund, open a new browser and type in the official ATO or MyGov web address yourself. This helps you avoid clicking on fake links that may lead to scam websites.

  2. Check your official inbox
    Legitimate messages from the ATO will appear in your secure MyGov inbox, not your regular email or SMS. If it’s not there, treat it with caution.

  3. Always verify suspicious contact
    If something doesn’t feel right, call the ATO directly on 1800 008 540 to check if the contact is legitimate before taking any action.

  4. Turn on two-factor authentication (2FA)
    This is a security feature that adds an extra step when logging in to your accounts. You’ll enter your password, then a code sent to your phone or email to confirm it’s really you. It helps protect your accounts even if someone gets hold of your password.

  5. Keep your devices up to date
    Install the latest software updates on your phone, computer, and apps. These updates often include important security fixes that protect you from known threats.

Think You’ve Been Scammed?

Take a breath, and then take action:

  • Call the ATO right away: 1800 008 540.
  • Report the scam to Scamwatch at www.scamwatch.gov.au.
  • Tell your bank if any financial info was shared, they’ll help lock things down.
  • Change your passwords, especially if you reused them anywhere else.

Scammers Are Smart, But You Can Be Smarter

The EOFY period is already packed. Don’t let scammers make it more stressful. Pause before clicking, question unusual messages, and always go straight to the source if something feels off.

Need to double-check something? Visit:

www.scamwatch.gov.au
www.ato.gov.au

Contact us on 1800 075 078 if you are unsure.