Scams
ATO warns of fake "crypto asset disclosure" emails that threaten penalties
The ATO says scam emails tell people to complete a crypto asset disclosure form and link to a fake ATO site that collects personal and wallet details.
The Australian Taxation Office has added an October 2026 alert to its scam alerts page about a “cryptocurrency compliance” scam. The ATO says scammers are sending emails that pretend to come from the ATO and tell recipients to complete a crypto asset disclosure form. Some versions threaten financial charges and administrative penalties if you don’t.
According to the ATO, the link in these emails goes to a fake ATO website. The ATO says the site uses compliance language, deadlines, penalties and references to tax rulings to look legitimate and create urgency, and that its aim is to collect personal details and cryptocurrency wallet information. The ATO also notes that variations of this scam exist.
Who it affects
The alert concerns emails made to look as if they come from the ATO. The ATO says it never sends unsolicited messages asking for personal information, login details or wallet details through links in email or SMS.
What the ATO says to do
- Don’t respond, click links, or share personal information, login details or wallet details.
- Forward the email to ReportScams@ato.gov.au, then delete it.
- If you’ve already interacted with the site or shared information, phone the ATO on 1800 008 540 straight away.
Our explainer on impersonation scams covers how scammers pose as government agencies, and our guide to phishing, smishing and vishing explains how fake links and websites work. The ATO’s scam alerts page has example screenshots and earlier alerts.