myGov, ATO Services and Staying Secure Online

As seen in Woopi News September 2026

myGov is the digital front door to essential government services, including the Australian Taxation Office (ATO). Everyone has a myGov account, whether or you have setup access to it or not.

Once you link the ATO to your myGov account, you can access ATO online services and are able to view a variety of information that is reported to the ATO, such as:

• Income Statements (formerly known as Group Certificates or Payment Summaries) or your year to date wage information that has been lodged with the ATO via Single Touch Payroll (STP)
• Superannuation information including fund details, balances at the financial year end and contributions made, provided your fund is up to date with reporting.
• Student loan history, balance payable and how to pay.
• Balances of any debt owing and how to pay.
• ATO correspondence, your Notice of Assessment, and basic copies of previous tax returns.
• Plus more if you have an ABN and are GST Registered.

Once you are linked with a tax agent, they too can access the ATO section of your myGov. The information on myGov is highly sensitive making it a target for hackers, so security is especially important. When hackers gain access to your myGov they lodge or amend to create fraudulent tax returns that result in large refunds that they have paid into their own bank account. These fraudulent tax returns can be cancelled by the ATO, after an amendment is lodged with the correct figures, but this can be very time consuming often taking months before the process is fully finalised.

The most secure way to access myGov is by using a passkey or the myID app (Digital ID) for sign-in, paired with biometric locks (face or fingerprint recognition) on a trusted personal device.

Email accounts are high risk of being hacked so it important that they have good security. Emails are often used as the method of resetting passwords to secure sites so consider using passkey or multifactor authentication to login. myGov allows you to turn off email logins and to only allow more secure login methods.