Have you recently received an email claiming to be from myGov? If so, you’re not alone. Cybercriminals are becoming increasingly sophisticated, and a new wave of fake myGov emails is targeting unsuspecting users, directing them to a counterfeit website.

Spotting the Fake: Recent Discovery

1. Faked Email Address: Scammers are now using email addresses like noreply@my.gov.au to make their emails appear legitimate. Always verify the sender’s email address carefully.
2. Urgent or Threatening Language: Scammers often use fear tactics to prompt immediate action. Look out for messages that pressure you to click on a link or provide personal information.
3. Unusual Links: Hover over any links before clicking. Authentic myGov links will always direct you to a .gov.au domain. If the link looks suspicious or unfamiliar, don’t click it.
4. Poor Grammar and Spelling Mistakes: Professional organizations like myGov take care in their communications. Errors in the email can be a red flag.

Real-life Example: The Fake myGov Email

Recently, we discovered during a daily security review of our members that a client of Cyber Safe Business received an email that looked alarmingly legitimate. The email used an email domain of my.gov.au, a plain text email message informing the reader there is a message waiting to be read, and urging the reader to click the link in the email.