As tax time rolls in, so do the scammers, and they’re counting on you checking your inbox before your first coffee.

CPA Australia is urging Aussies to be on high alert, with scammy emails and texts impersonating the ATO and other government bodies skyrocketing in the lead-up to June 30. These phishing scams are sneaky, convincing, and often land in your inbox overnight, ready to trip you up while you’re still bleary-eyed.

Jenny Wong, Tax Lead at CPA Australia, warns that scammers are crafty and will take every opportunity to trip you up.

“The scammers know Australians will have tax on their mind and are vulnerable to prompts to act, which is why these messages usually create a sense of urgency or claim of significant refund. While they could come at any time, be especially careful opening up and reading messages while you’re still waking up in the morning, Wong said.

Data from the National Anti-Scam Centre shows phishing scams have already done $13.7 million worth of damage in just the first four months of 2025. That’s triple the losses from early last year. And according to the ATO, email impersonation scams alone have surged by more than 300 per cent.

“These ‘phishing’ scams not only look legitimate, but they’re designed to catch you off-guard. That’s why you’ll often see them arrive first thing in the morning because you may be more likely to have a momentary lapse in judgement,” says Wong.

Your scam alert cheat sheet

Dodgy emails flagged by CPA Australia include subject lines like:

“Urgent new notification in your account inbox”

“Update regarding your benefits”

“Avoid being penalised”

CPA Australia warns they often contain links that look like they’ll take you to your myGov account or ATO portal, but instead, lead you into a trap to capture your data.

These scammy messages often include links that look like they’ll take you straight to your myGov account or the ATO portal—but don’t be fooled. They’re designed to lead you into a trap.

Spotting fakes

So, how do you tell what’s legit and what’s a scam? It’s getting harder, but there are still a few red flags to keep in mind. One of the tell-tale signs is dodgy spelling or grammar. Especially if it’s full of Americanisms, like swapping an ‘s’ for a ‘z’. If the message feels clunky or oddly worded, that’s your first clue.

You should also be suspicious of any message that includes a clickable link or a QR code, particularly if it came out of the blue. The ATO has been very clear: they will NEVER include links in unsolicited emails or SMS messages.

And don’t just trust the sender’s name. Scam emails can come from addresses that look close to the real deal—sometimes just a letter off or with sneaky extras thrown in. Remember if something feels off, it probably is.

These scams usually try to create a sense of panic or urgency. Asking you to log in immediately, provide personal info, or risk penalties. But remember: the ATO will never ask for your password, bank account details or other sensitive info by email or SMS.

Even on social media, scammers are getting bolder. If you spot a page claiming to be the ATO or myGov, look for the official tick—blue on Facebook and Instagram, grey on X. And no, the ATO won’t ever DM you about your tax return.

At the end of the day, trust your gut, take your time, and if in doubt, go straight to the official ATO website or give them a buzz on 1800 008 540.

Want more? Get our newsletter delivered straight to your inbox!  Follow Business Builders on Facebook , X , Instagram , and LinkedIn.