Discovering your personal information has been compromised is a deeply unsettling feeling. When it involves your tax return, that anxiety can quickly turn to confusion and fear. This guide provides clear, practical steps to protect yourself and resolve any issues if you suspect your tax identity has been stolen in Australia.

How Tax Identity Theft Affects You

• Yes, it can seriously affect your tax return. Criminals can use your stolen Tax File Number (TFN) to lodge a fake return and steal your refund.
• The most common impact is a significant delay in receiving your legitimate tax refund while the Australian Taxation Office (ATO) investigates.
• Warning signs include being unable to lodge your return, receiving an unexpected notice of assessment, or finding your myGov details have been changed.
• Immediate action is critical. You must contact the ATO’s Client Identity Support Centre, secure your myGov account, and report the crime.
• Resolution involves proving your identity to the ATO. They will then correct your tax records and process your genuine return.
• Proactive security is your best defence. Using multi-factor authentication on myGov and guarding your TFN are non-negotiable.

Can Identity Theft Affect Your Tax Return?

Yes, absolutely. Identity theft can severely disrupt your tax return in Australia. If a criminal obtains your Tax File Number (TFN) and personal details, they can lodge a fraudulent tax return in your name to steal your refund. This can lead to significant tax refund delays, create incorrect records with the ATO that need correction, and cause considerable stress while you re-establish your identity with the authorities.

How Tax Identity Theft Happens in Australia

To protect yourself from ATO fraud, you must understand how criminals operate. Their methods for stealing your personal information especially the TFN, which is the key to your tax records are often sophisticated but rely on common security gaps.

• Phishing Scams: The most frequent method involves deceptive emails or text messages pretending to be from the ATO or myGov. These messages create urgency, warning of a tax debt or promising a surprise refund, and contain a link to a fake website designed to harvest your login credentials.
• Data Breaches: When organisations you deal with are hacked, your personal data can be stolen and sold on the dark web. Criminals purchase this information to piece together your identity, enabling them to impersonate you with the ATO.
• Malware and Spyware: Malicious software can infect your computer or phone, often through a compromised link or download. Keyloggers are particularly dangerous, as they record everything you type—including your TFN and passwords and send the data directly to criminals. Recent WA ScamNet reports show how criminals have used these tactics to hack myGov accounts and divert tax refunds.

Signs Your Tax Return May Be Affected

Spotting the warning signs of tax identity theft early is crucial for minimising damage. If you notice any of the following red flags, you must act immediately.

Warning Sign	What It Likely Means	Your Immediate Action
You cannot lodge your return online	A criminal may have already lodged a fraudulent return using your TFN, blocking your legitimate attempt.	Contact the ATO’s Client Identity Support Centre immediately to report a potential ATO identity compromise.
You receive an unexpected Notice of Assessment	A fraudulent return has been processed in your name, likely with incorrect income or false deductions.	Do not ignore it. Phone the ATO to verify the notice and report the suspected fraud.
Your myGov or ATO details have been changed without your knowledge	A fraudster has gained access to your account and updated bank or contact details to divert your refund.	Secure your myGov account (change password, enable MFA) and call the ATO immediately.
Your refund is significantly delayed for ‘review’	The ATO’s internal systems have flagged a potential identity issue or duplicate lodgement.	Proactively contact the ATO to confirm the reason and start the identity verification process.

What Happens If the ATO Detects Identity Theft

The ATO uses sophisticated data analytics to identify suspicious activity. If its systems detect potential tax fraud identity theft, they will take immediate protective action.

Typically, the ATO will place a temporary hold or block on your account to prevent any fraudulent refunds from being paid out. They will then issue a notification, often by mail, informing you that your return is under review or that they require you to verify your identity.

While this security measure is designed to protect you, it means your legitimate tax return process is frozen until the matter is resolved. You will need to formally prove your identity before the ATO can remove the block, cancel the fraudulent lodgement, and process your correct return. This is why knowing what to do if the ATO is reviewing your return is so important.

What to Do If You Suspect Tax Identity Theft

If you suspect someone lodged your tax return or compromised your identity, taking structured action is the best way to regain control. Follow these steps methodically.

1. Contact the ATO Immediately Your first call must be to the ATO’s Client Identity Support Centre on 1800 467 033. Inform them you suspect an ATO identity compromise. They will secure your account and guide you through the official identity verification process.
2. Secure Your Digital Identity Assume other linked accounts are at risk. Immediately change the passwords for your myGov account and the associated email address. Crucially, enable multi-factor authentication (MFA) on your myGov account via Services Australia security settings.
3. Report the Cybercrime Lodge an official report with the Australian Cyber Security Centre (ACSC) via their online portal. This creates a formal record of the crime, provides you with a reference number, and contributes to national fraud tracking.
4. Check Your Credit File Tax fraud can be a precursor to broader financial fraud. Request a free copy of your credit report from Equifax, Experian, or Illion to check for unauthorised credit applications. If you find suspicious activity, contact IDCARE for support and consider placing a ban on your credit file.
5. Review Data Breach Notifications Consider if you have been affected by a recent data breach. The Office of the Australian Information Commissioner (OAIC) provides guidance on what to do if your data has been compromised.

How to Protect Your Tax Return Going Forward

Prevention is always better than cure. Adopting strong, simple security habits is the most effective way to protect your tax identity.

• Fortify Your myGov Account: This is your number one priority. Enable Multi-Factor Authentication (MFA) and use a strong, unique password that you do not reuse on any other service.
• Guard Your TFN: Treat your Tax File Number like a bank account password. Only provide it when legally required (e.g., to your employer, super fund, or registered tax agent). Be highly suspicious of any unsolicited request for your TFN.
• Identify Phishing Scams: Learn to spot fake ATO or myGov communications. Be wary of urgent threats or unbelievable promises. Never click links in unexpected messages. Instead, log in to myGov or the ATO portal directly by typing the official address into your browser. For more tips, see our guide to the four most common tax scams.

Worked Example: ATO Refund Delay Scenario

Meet Sarah, a small-business owner in Sydney. Sarah lodges her tax return in July and expects a refund of around $6,000. After three weeks, the money hasn’t arrived. When she checks her myGov account, the status is stuck on “Balancing account”.

Concerned, Sarah calls the ATO. An officer informs her that her account has been flagged for a potential identity compromise. A second tax return was lodged using her TFN just days before her accountant’s submission, with different bank details.

The ATO’s fraud system had automatically stopped the fraudulent refund, but it also froze Sarah’s account. To resolve the tax return delayed identity theft issue, Sarah had to work with her accountant to complete a rigorous identity verification process, providing certified copies of her driver’s licence and Medicare card.

After a stressful four-week process, the ATO confirmed her identity, cancelled the fraudulent return, and finally processed her legitimate refund. Sarah’s case highlights how quickly identity theft can stop your refund and why immediate, correct action is vital.

Common Mistakes and Quick Fixes

• Mistake: Tossing an unexpected ATO letter, assuming it’s an error or junk mail.
• Fix: Never ignore official ATO correspondence. Log in to your myGov account directly (do not use any links in emails) to see if the notice is there. If in doubt, call the ATO using a number from their official website to verify its authenticity.
• Mistake: Using the same password for myGov, email, and social media.
• Fix: Your myGov password must be unique and strong. Use a password manager to create and store complex, distinct passwords for all your online accounts to prevent a breach at one service from compromising them all.
• Mistake: Clicking a link in a text message that warns of an “urgent tax debt.”
• Fix: Assume all unsolicited tax-related links are malicious. The ATO will never ask for your TFN or login details via SMS or email. Always access ATO services by typing ato.gov.au or my.gov.au directly into your browser.

Checklist: Protect Your Tax Return From Identity Theft

Use this checklist to audit and strengthen your tax identity security.

•  Enable Multi-Factor Authentication (MFA) on my myGov account.
•  My myGov password is strong, unique, and not used anywhere else.
•  I know how to identify phishing scams (e.g., sense of urgency, generic greetings, suspicious links).
•  I never provide my TFN in response to an unsolicited email, call, or text.
•  I regularly shred documents containing personal information before disposing of them.
•  I know to contact the ATO’s Client Identity Support Centre (1800 467 033) immediately if I suspect fraud.
•  I know how to report cybercrime to the Australian Cyber Security Centre (ACSC).
•  I have a registered tax agent to help manage my tax affairs securely.

Frequently Asked Questions

Can someone lodge a tax return using my identity?

Yes. If a criminal has your TFN and enough personal details, they can lodge a fraudulent tax return in your name to try and steal your refund. This is a primary form of tax identity theft in Australia.

Why is my tax refund delayed due to identity theft?

The ATO’s security systems automatically freeze accounts when they detect suspicious activity, such as two returns lodged for one TFN. This blocks the fraudulent payment but also delays your legitimate refund until you can complete an identity verification process.

Will the ATO fine me if my identity is stolen?

No. You will not be penalised for being a victim of crime. Your responsibility is to report the identity theft to the ATO as soon as you become aware of it and cooperate with them to resolve the issue.

How do I secure my myGov ID?

The most effective way to secure your myGov ID is to enable Multi-Factor Authentication (MFA) and use a strong, unique password. Always access myGov by typing the official URL into your browser, not by clicking links in messages.

How long does ATO identity theft resolution take?

Resolution times vary depending on the case’s complexity and can take several weeks or longer. To help speed up the process, respond promptly to all ATO requests for information. Check current ATO guidance for the latest information.

Do I need a new TFN after identity theft?

In most cases, no. The ATO rarely issues a new TFN. Instead, they will add extra security measures and monitoring to your existing TFN account to protect it from future fraudulent activity.

Secure Your Tax Affairs with Expert Help

Dealing with the ATO after identity theft can be overwhelming. You don’t have to navigate it alone. Our team of experienced accountants can help you manage ATO communications, verify your identity, and ensure your tax records are secure and accurate.

Book a consult with Nanak Accountants & Associates – 1300 NANAK TAX (626 258)