While you’ve been busy getting ready for EOFY, scammers have been working even harder over the past few months to create intricate tax time related scams.
Around EOFY, scammers tend to target businesses and individuals with financial email scams. They’ll brand hack financial institutions and government agencies like the ATO and send convincing emails asking for money or to claim their tax return.
While businesses and individuals are often the biggest scam targets, when it comes to EOFY, business owners are often more heavily targeted. Scammers are hoping that by trying to pass off an email as a ‘tax issue’ a business owner will be more likely to click on it and take action.
#ZERODAY #FASTBREAK Fake invoice plain text email with differing subjects and sender variants #brandjacking @MYOB, includes a HTML attachment with payload. More on the blog: https://t.co/6wDHG6dlPj
#Phishing #Malware #CyberSecurity #CyberCrime #MailGuard @scamwatch_gov pic.twitter.com/r65ogltfUR
— MailGuard (@MailGuard) June 8, 2018
Some businesses may only deal with such government agencies once a year when they complete their tax returns and lodge reports – so it can be really confusing if you don’t know how to spot the difference between your normal emails.
The best way to beat email scams?
If you’re unsure, treat any suspicious email as a scam until you’re 100% sure that it’s a real email.
If you do receive an official-looking email but suspect it’s a scam, don’t click on anything in the email!
Take a look at the email and do some check to see if there’s anything suspicious or things that don’t add up.
Go straight to the company’s website (again do not use links within the email) or give them a call to ask if the email was really sent from them. They’ll be able to give the right information and verify the source of the email.
If an email is in fact a scam, you can report it to ScamWatch.
Who are the top company’s/organisations being brand hacked around tax time?
- Commonwealth Bank
SCAM ALERT: A fake email is being sent to some people. It asks users to click on a link in the email. Do not do that – this is a scam. More #scam info including how to protect yourself online here: https://t.co/bGVnhnuRkN pic.twitter.com/S0uUiSj9Sw
— myGov (@myGovau) March 9, 2018
Keep yourself safe from email scams by receiving invoices straight into your cloud accounting software.