New ATO App Security Feature Helps Protect From Tax Scam Calls

In July 2025 alone, almost 7,500 ATO impersonation scams were reported across Australia, reinforcing the ongoing risk of fraud targeting individuals and businesses, particularly during tax time.

In response, the Australian Taxation Office (ATO) has introduced a new in-app security feature designed to help the community quickly confirm whether they are genuinely speaking with the ATO, or whether a scammer is attempting to impersonate them.

This update forms part of the ATO’s Counter Fraud Program and strengthens existing protections designed to safeguard personal and business information.

What is the “Verify Call” feature?

The Verify Call function in the ATO app allows users to confirm in real time whether an incoming phone call is legitimately from the ATO.

How it works:

• Receive a call from someone claiming to be from the ATO
• Open the ATO app and securely log in
• Select the Verify Call option
• Within around 30 seconds, a notification confirms whether the call is genuine
• If no confirmation appears, treat the call as suspicious and end it immediately

This provides a simple safeguard at the exact moment scammers often rely on urgency or pressure.

Additional protections within the ATO app

The ATO app also includes further security enhancements:

• Real-time alerts when key account changes occur
• Account locking functionality to help prevent unauthorised access or fraudulent activity

These features provide greater visibility and control over tax and identity-related information.

Why this matters

Scam activity remains a significant issue, with impersonation tactics becoming increasingly sophisticated. Scammers often rely on urgency, fear, or threats of penalties to pressure individuals into acting quickly without verification.

This makes it essential that any unexpected contact claiming to be from the ATO is independently verified before any action is taken.

How to protect yourself from ATO impersonation scams

To reduce the risk of falling victim to ATO impersonation scams, the ATO recommends taking a cautious and verification-focused approach:

• Do not respond to suspicious emails, SMS messages, social media messages, or phone calls
• Do not click on links or download attachments from unverified sources
• Independently verify any unexpected request for payment or personal information
• Use official ATO tools to verify or report scams
• If you believe you have shared personal information or made a payment to someone impersonating the ATO, contact the ATO immediately on 1800 008 540
• Ensure your myID is set up securely, ideally at the highest identity strength available
• Remain alert to common scam warning signs, particularly within finance and accounts processes
• Regularly review internal approval processes for payments and communications

More information is available here https://www.ato.gov.au/scamsafe

How Morrows can help

As scam tactics continue to evolve, having clear internal processes to identify and respond to suspicious activity is increasingly important for both individuals and businesses.

At Morrows, we take the security of your data and personal information very seriously. This is why we use secure platforms such as Box when sharing files and sensitive information, helping to ensure your data remains protected. We will never share any personal information with anyone over the phone.