Highlights

• The ATO issued this alert in July 2026.

• This alert dates from February 2026 but remains on the ATO's list of current scam warnings.

• The ATO's scam data page, last updated on 25 September, says it received 3,265 reports of ATO impersonation scams in August 2026.

• It confirms a scheduled phone appointment for next Tuesday and asks her to open the attached PDF to check her details.

A routine-looking tax appointment can be the first step in an account takeover. As Australians prepare their returns, fake emails and cryptocurrency threats are exploiting the credibility of familiar government messages.

The Fake 'Phone Appointment' Email

The ATO issued this alert in July 2026. The emails claim a phone appointment with the ATO has been scheduled and include made-up appointment details to look genuine. Recipients are told to open an attachment. The attachment contains a link to a counterfeit myGov sign-in page, built to capture login credentials and personal information. The ATO's alert lists several things it says it will never do. It will never email you an attachment containing a link to a myGov sign-in page. The distinction matters because the headline rule rarely tells the entire story. Timing, eligibility and supporting records can change the outcome for two people facing seemingly similar circumstances.

The 'Non-KYC Wallet' Crypto Threat

This alert dates from February 2026 but remains on the ATO's list of current scam warnings. Messages impersonating the ATO or myGov claim the recipient holds cryptocurrency in non-KYC decentralised wallets, meaning wallets not linked to a verified identity. The messages demand an immediate disclosure, threaten legal consequences and give a phone number to call. Tax guidance indicates it will never email you demanding immediate disclosure of cryptocurrency or other assets. The material also says it will not threaten arrest, prosecution or legal action by email or SMS. Recipients are told not to call the number supplied in the message. A practical decision starts with the numbers, but should not end there. Compare the likely benefit with compliance costs, the chance that assumptions change and any restrictions that apply.

Why Email Is the Scammers' Channel

The ATO's scam data page, last updated on 25 September, says it received 3,265 reports of ATO impersonation scams in August 2026. That was a 36% increase on July. Email accounted for 98.6% of those reports, phone for 0.8% and SMS for 0.4%. The tax office indicated there were no reports of payments made to scammers in August. The newest alert, from September, shows how the email lures keep shifting. The messages refer to a new payment update in your ATO profile or ask you to review your income statement. Clicking the link installs remote-desktop software that gives the scammer access to the device. A policy can create an opportunity while still leaving taxpayers responsible for checking the conditions and keeping suitable evidence.

Hypothetical Example: Spotting the Red Flags

It confirms a scheduled phone appointment for next Tuesday and asks her to open the attached PDF to check her details. Measured against the ATO's alerts, there are several warning signs. One observation is useful context, not a guarantee about what happens next.

Checking a Message and Reporting It

Tax guidance indicates anyone unsure whether contact is genuine can call 1800 008 540 to check. Suspicious emails can be forwarded to [email protected]. Cash flow, deadlines and documentation deserve attention before any commitment.

Key Dates Before the Deadline

The deadline for self-lodged 2025–26 returns is 31 October 2026, which falls on a Saturday. People using a registered tax agent may have later due dates under the agent's lodgment program. Proposed rules and draft administrative guidance should be distinguished from provisions already enacted.

General information only. This article is educational and does not constitute personal financial, tax or legal advice.