Latest News

ATO says myGovID protection needed

The ATO's head of ID security explains why myGovID protection is critical for bookkeepers and accountants and what steps to prevent fraud.

Attracting significant interest this month was Australian Bookkeepers Network (ABN) Bookkeepers Radio program on Identity Theft, with a spotlight cast on myGovID.

The sage words from Assistant Commissioner of Digital Identity Security Ben Foster sparked discussion as he addressed the troubling reports of data breaches and scams that insist bookkeepers and accountants need to pay closer attention to protecting their myGovID.

“There is one main motivation for the people behind these scams, which is to steal something, like your information,” said Ben. “Maybe it’s a password or a login credential or identity information.”

“myGovID is about digital identity, and it plays an important role in the proliferation of identity information,” continued Ben. “It can help you log in to 130 online services, ensuring you don’t have to give all your information to all the different providers.”

A recent report from the Office of the Australian Information Commissioner (OAIC) has confirmed the financial sector is front and centre of scams, making the protection of ID ever critical for bookkeepers and accountants.

Ben confirmed that a proactive approach from the outset to protecting your myGovID details is critical.

“This myGovID belongs to you; it doesn’t belong to your business,” said Ben. “Keep it safe, don’t share your phone, and consider setting yourself up for multifactorial authentication.

“We recommend that you verify your face to achieve that stronger level of assurance,” continued Ben. “We’re very aware you need to have a passport now to do the first step of the verification process, and we’re working hard to get systems that would enable us to expand the suite of documents to do so.

“Consider turning on push notifications from myGovID,” said Ben. “These are trustworthy and essential communications that give more visibility to how the system is being used.

“In the event of a breach, the first thing you do is take action and try to get on the front foot,” said Ben.

If it’s myGovID related or you’re concerned in any way, Ben advises there’s the myGovID hotline, 1300 287 539, and the ATO has a client identity support centre, which can be reached on 1800 467 033.

“It’s a great thing to be starting to understand the power of myGovID,” said Ben. “That it can be safe and can be used in so many different contexts.

“There’ll be a lot of services that will be rolled onto it in the future, and you’ll have more opportunity and choice to use these things.”

ATO’s advice on how to protect your myGovID:

• Use a personal email address on your myGovID credential.
• Protect your personal email account with strong passwords and multifactor authentication.
• Secure your smart devices (don’t leave them unattended and use biometric security).
• Turn on notifications for myGovID in your app settings.
• Check myGovID setups regularly for other devices.
• Protect your identity documents, minimise the times it is shared, and don’t save them to insecure locations, e.g. email.
• Adopt the most robust security level on your myGovID credentials.
• Don’t share your myGovID login codes with anyone.
• Report suspected unauthorised access to the ATO.
• Maintain good agnostic controls over systems – software upgrades, antivirus updates, strong passwords, systems controls, staff cyber protocols and training.

To be at the forefront of bookkeeping industry news and advice from the top industry specialists, stay tuned to the monthly ABN Bookkeeper’s Radio, available to members.