Your myGovID gives you access to online services, by telling the ATO that it is you trying to gain access. In addition to the security features on your device, such as fingerprint, face or password, myGovID uses your personal information as well as encryption and cryptographic technology to help stop other people impersonating you.

Unfortunately, you are not immune to identity crime. Lately, the ATO has been working with a number of tax agents where they or their clients, or both, have been victims of identity crime. In these instances, there has been a significant and disruptive impact on the agent and their clients.

To help ensure you are not the next victim, and to protect your identity from being used fraudulently, follow our tips below.

Use a personal email address when setting up your myGovID

• If you have already set up your myGovID with a business email address, you can update your email address in the myGovID app anytime

Protect your personal email account

• Use strong and secure passwords for your personal email account and protect it with multifactor authentication. This is also sometimes known as 2-step or 2-factor authentication, common email services such as Gmail will also have help guides on how to do this

Keep your smart devices secure

• Enable built-in security features in your device such as fingerprint or face, and don’t leave your devices unattended
• If your device is lost or stolen, report it straightaway by calling the myGovID support line

Turn on notifications for myGovID

• Do this in your app Settings to ensure you receive verification notifications when accessing online services
• If you receive a notification when you’re not actively accessing an online service, report it immediately by calling the myGovID support line

Check myGovID setups regularly

• You can now view a summary of each time your myGovID has been set up. Make it a habit to check it regularly

Protect your identity documents

• Avoid storing images of identity documents or document/card numbers in any email folders
• If you have sent these over email (for example to a bank) make sure you delete them from your sent items
• Be mindful who you share your identity and personal information with (including through online quizzes that may seem innocent but are designed to harvest your personal information)

Increase the security of your myGovID by verifying additional indentity documents

• If you have an Australian passport you should verify it along with your photo. Verifying your photo is a real time, one-off face verification check that scans your face to check you’re a real person, and verifies that you are the right person

Don’t share your myGovID

• Don’t allow others to share or use your device or login code. Sharing might seem convenient but remember that it also provides others with access to your personal data across online services

Report suspected inappropriate access

• If you suspect someone has inappropriately accessed your personal information in myGovID, report it immediately by calling the myGovID support line

Stay on top of your cyber hygiene

• Run software updates straight away, keep antivirus software up to date, and always be careful when clicking on links and providing personal information