From the ATO 5th Feb., 2013
The personal identity of a small number of tax agents has been stolen to create unauthorised AUSkeys. As you know, AUSkeys allow access to the Tax Agent Portal and taxpayer information.
The ATO are working with the directly affected tax agents and assisting them to protect their online security.
Online fraud can be complex and multilayered. ATO are investigating the incident and will update you as necessary.
While we are confident we have contained the immediate threat, there are some precautions you should take to be certain your practice's information is secure.
What you need to do
The agent in your practice who holds the administrator AUSkey should review the AUSkeys registered to the practice. To do this:
| 1. |
Go to www.auskey.abr.gov.au and select Login |
| 2. |
Select Manage AUSkeys under the heading My Business from the left hand menu. This will provide you a list of AUSkey holders registered against your practice |
| 3. |
Review the list of your AUSkey holders (displays up to 15 AUSkeys per page) |
| 4. |
If you identify a name and/or email address that does not belong to your practice, or a duplicate that cannot be explained, the AUSkey should be cancelled. This can be undertaken by selecting the record identified and at the details screen selecting Cancel AUSkey holder |
| 5. |
At the Confirm cancellation screen, select Submit |
| 6. |
The Submitted screen will then confirm that the cancellation of the AUSkey was successful. Select Next to return to the list of AUSkey holders. The cancelled AUSkey will now display a status of 'Inactive'. Continue examining your AUSkey holdings, cancelling any further unauthorised AUSkeys |
| 7. |
Any unauthorised AUSkeys which you identify should also be reported to us by phoning 1300 146 094 Fast Key Code 1 1 2. We will work with you to ensure your identity and that of your clients is protected. |
If you need further assistance in cancelling unauthorised AUSkeys, phone 1300 146 094 Fast Key Code 1 1 1.
Doing business online has many benefits, but it also comes with risks that need to be managed carefully. Those looking to commit fraud are constantly looking for ways to profit so it is critical that you remain vigilant regarding online security and information. You should regularly review your AUSkey holdings to protect your practice.