Australian Taxation office released a news post saying. They have discovered an identity fraud related to Aus Key.
Below is the message from ATO.
We have recently detected cases of identity thieves fraudulently obtaining AUSkeys linked to legitimate businesses. Once an Auskey has been allocated, access is gained to the Business Portal so that fraudulent BAS can be lodged and bank details updated to accounts that are not controlled by the entity.
You can read the full ATO fraud alert notice here https://www.ato.gov.au/Newsroom/smallbusiness/General/AUSkey-fraud-alert/?sbnews20170201
How to know, you are compromised?
Take the following steps to protect your business and to ensure your identity has not been compromised:
- check access manager to understand who in your business has AUSkey access and that their level of access is appropriate to their role
- remove access for employees who no longer work for you
- check the financial institution and contact details you have recorded with us are correct
We also like to suggest. keep a separate computer to access your ATO login and only connect it to the internet when you using it to access your ATO portal.