Tax time, end of financial year sales, and the rush to get finances in order before 30 June create a predictable set of conditions that scammers plan for.

You're expecting communications from your bank, your super fund, and the ATO. You're shopping more than usual. You're logging into accounts you may not have visited in months. Your guard is lower because the activity feels routine.

Scammers know this. The lead-up to 30 June and the weeks immediately after are among the most active periods for financial fraud in Australia.

Here's what to watch for and what to do.

BankVic will never contact you by email or SMS asking for your internet banking password, card PIN, or a one-time passcode. 

If you receive a message claiming to be from us and asking for this information, don't respond. Call us on 13 63 73.

The scams most active at EOFY

ATO and myGov impersonation

This is the most reported scam type during tax season. Scammers send text messages or emails claiming to be from the ATO or myGov, often telling you that you have a refund waiting, that you owe a debt and must pay immediately, or that your myGov account has been compromised and needs verification.
The links in these messages go to convincing fake websites designed to capture your myGov credentials or your bank details.

What to know

The ATO will never send you an SMS or email with a link and ask you to log in through it. If you receive a message like this, don't click anything. Log in to myGov directly by typing my.gov.au into your browser.

Tax refund and rebate scams

Scammers send messages claiming you're owed a refund from the ATO, Medicare, or a private health fund, and ask you to confirm your bank details to receive the payment. The request feels legitimate because you may be expecting a refund anyway.

What to know

The ATO processes refunds through myGov and your registered bank account. No agency will contact you out of the blue to confirm bank details. If you're unsure whether a refund is legitimate, log in to myGov directly or call the ATO on 13 28 61.

EOFY sale and marketplace scams

The volume of online shopping during EOFY sales creates cover for fake listings, items that never arrive, and payment scams on platforms including Facebook Marketplace and Gumtree. Sellers are also targeted: fake payment confirmations designed to convince a seller that money has been received before the item is handed over.

What to know

Avoid paying by bank transfer or gift card for private sales. Where possible, inspect items in person before paying. If a deal looks unusually good relative to the market, it probably is.

Super fund impersonation


EOFY prompts people to review their superannuation, and scammers exploit that. Fake emails claiming to be from your super fund encourage you to log in to check your balance or update your details. Fake financial advisers offer EOFY contribution strategies that turn out to be investment scams.

What to know

Access your super fund only by typing the fund's address directly into your browser or through the official app. If you receive unsolicited financial advice around EOFY, verify the adviser's licence at moneysmart.gov.au/check-your-adviser

Fake tax agent and accounting scams

People seeking help lodging tax returns can be targeted by fake tax agents advertising online or through social media. These operators may charge fees, collect your personal information, and submit fraudulent returns on your behalf, directing refunds to their own accounts.

What to know

Registered tax agents must be listed with the Tax Practitioners Board. Check before engaging anyone at tpb.gov.au

Your EOFY scam safety checklist

Work through this before and during tax season.

When you receive ATO or myGov communications

  • Never click links in emails or text messages claiming to be from the ATO or myGov
  • Access myGov by typing my.gov.au directly into your browser
  • If the ATO contacts you by phone, ask for their name and call the ATO back on 13 28 61 to verify
  • Confirm your tax refund amount through myGov before it arrives. If a refund you weren't expecting appears in your account, don't spend it and contact the ATO.

When you're shopping EOFY sales

  • Stick to known retailers or check a seller's trading history before buying
  • Pay by credit card or a platform payment system rather than bank transfer for online purchases. It's easier to dispute
  • For private sales, don't hand over goods until you've independently confirmed payment has cleared, not based on a receipt or screenshot
  • If a listing has appeared within the last day or two and is priced well below market, check it carefully.

When you're doing your banking and tax

  • Log in to internet banking and myGov only from a private, secure connection, not public Wi-Fi
  • Check your BankVic account statements before lodging your tax return. Flag anything unfamiliar before you submit
  • If you're using a tax agent for the first time, verify they're registered at tpb.gov.au before sharing any personal information
  • Review your super balance through your fund's official website or app, not through a link in an email.

If you receive an unexpected contact about your finances

  • Don't act immediately, regardless of how urgent the message sounds
  • Hang up or close the message and contact the organisation directly using contact details you've sourced yourself
  • Don't share passwords, PINs, one-time passcodes, or remote access to your device with anyone
  • If the contact claimed to be from BankVic and you're unsure, call us on 13 63 73.

If something goes wrong

  • Think you've been scammed? Call BankVic immediately on 13 63 73
  • Spotted a transaction you don't recognise? Complete a transaction dispute form at bankvic.com.au/dispute or call 13 63 73
  • Card lost or stolen? Lock your card through internet banking or the BankVic app, then call us to arrange a replacement
  • Identity compromised? BankVic members can access IDCare specialist support free of charge. Use the code 'BankVic' at idcare.org

The single most useful habit this tax season

Before you click anything, ask: did I initiate this contact? If the answer is no, go directly to the source. Type the web address yourself, or call the organisation on a number you've sourced independently

More resources