Centrelink-Branded Tax Identity Theft and myGov Credential Theft Scam
Criminals impersonate Centrelink to harvest myGov credentials, Tax File Numbers, and banking details for Australian tax identity theft — redirecting ATO refunds and making fraudulent benefit claims in victims' names.
Part of: Tax Identity Theft
Last reviewed: 8 June 2026
Australia's myGov portal links Centrelink, the Australian Taxation Office, Medicare, and other services under one login. A single set of myGov credentials therefore provides access to tax records, benefit history, banking details on file, and health records. This makes myGov credential phishing an exceptionally lucrative target, and Centrelink's brand is used as the hook because so many Australians interact with it regularly.
A phishing email or text impersonating Centrelink claims there is a tax identity mismatch on the account — perhaps a discrepancy between the TFN lodged with Centrelink and the ATO's records — and that the myGov account will be suspended unless the mismatch is resolved through an immediate verification step.
The fake myGov page captures credentials that give the attacker access to the victim's real myGov account, from which they can update bank account details, redirect ATO tax refunds, and potentially submit fraudulent income statements.
How this scam works on the Centrelink brand
The email says: 'Centrelink: A tax identity discrepancy was detected on your account. Your myGov access will be suspended in 48 hours. Log in to resolve: [link].' The link opens a convincing myGov login page that captures username, password, and the SMS verification code if the victim has two-factor authentication enabled.
Scammers sometimes send a second message posing as a myGov one-time security code request, completing the 2FA bypass. Once inside the real myGov account, they change the registered bank account for any linked agency, submit a tax return amendment, or apply for Centrelink payments.
Some campaigns arrive by post — a physical letter on what looks like Services Australia letterhead, with a QR code that leads to the phishing site. The physical element circumvents email spam filters entirely.
Common red flags
- Unsolicited message claiming a tax identity discrepancy on your Centrelink or myGov account
- Link does not go to my.gov.au
- Request for your myGov password and one-time code on an external site
- Physical letter with QR code leading to a non-my.gov.au domain
- Sender is not @servicesaustralia.gov.au or @my.gov.au
- Urgency: account suspended within 48 hours
- Claim that Centrelink and ATO records are mismatched requiring immediate online resolution
How to protect yourself
- Always access myGov by typing my.gov.au directly into your browser — never via a link
- Enable two-factor authentication on your myGov account
- Check your myGov inbox for genuine notices after logging in directly
- Contact Services Australia at 132 300 to verify any alleged discrepancy
- Report the phishing message to Scamwatch at scamwatch.gov.au
- Report to the ACSC at cyber.gov.au/report
- If credentials were entered on a fake site, change your password and contact the ATO immediately
How to report it
- Report to Scamwatch at scamwatch.gov.au
- Report to the ACSC at cyber.gov.au/report
- Forward smishing texts to 7226
- Contact the ATO at 13 28 61 if tax records may have been accessed
- Contact Services Australia at 132 300 if Centrelink account may be compromised
Frequently asked questions
Why is a myGov credential so valuable to scammers?
A myGov account links to Centrelink, the ATO, Medicare, and other agencies. With a single login, an attacker can redirect ATO tax refunds, submit fraudulent benefit claims, update bank account details across multiple agencies, and access sensitive health and employment data.
How do I know if someone has accessed my myGov account?
Log in to my.gov.au and check the 'Account activity' section, which shows recent sign-in history. Check each linked service for any changes to your registered bank account, contact details, or pending claims you did not make.
Does Centrelink ever send myGov login links by text or email?
Centrelink messages may notify you that there is a message in your myGov inbox, but they do not include a direct login link. You should always navigate to my.gov.au yourself by typing the address.