Scams
ATO warns fake "payment update" emails can install remote access software
The ATO says scam emails about a payment update or income statement link to remote desktop software that could let scammers into your device. Here's what it lists.
The Australian Taxation Office has added a September 2026 alert to its scam alerts page about emails that pretend to come from the ATO. The emails claim there’s a payment update in your ATO profile, or ask you to review your income statement.
According to the ATO, the link in these emails downloads remote desktop software. That kind of software lets another person see and control a computer, which is why the ATO warns it could give scammers access to your device.
Who it affects
The alert concerns emails made to look as if they come from the ATO. The ATO says it will never send an unsolicited message that directs you to a log-in page.
What the ATO says to do
- Don’t reply to the email or click any links in it.
- Forward the email to ReportScams@ato.gov.au, then delete it.
- If you’ve already interacted with the scammer, phone the ATO on 1800 008 540 straight away.
The same ATO page lists earlier ATO impersonation scams too, including fake appointment emails and fake cryptocurrency “declaration” emails.
To understand why remote access is the goal, see our guide to remote access scams. Our explainer on impersonation scams covers how scammers pose as government agencies. The ATO’s scam alerts page has the full list.