Compromised TFN: What to Do, Who to Call and How to Still Lodge

If your tax file number (TFN) has been lost, stolen or misused, phone the ATO's Client Identity Support Centre on 1800 467 033 (8:00 am to 6:00 pm, Monday to Friday) as soon as possible. Your TFN is valuable to identity thieves: someone who has it can try to lodge returns, claim refunds or open accounts in your name. Here's what the ATO will do, how to lodge your return while your account is protected, how to find a TFN you've simply lost, and how to keep it safe.

What to do if your TFN has been compromised

If your TFN has been lost or stolen, or someone you didn't authorise has access to it, tell the ATO as soon as possible. Phone the ATO's Client Identity Support Centre on 1800 467 033, between 8:00 am and 6:00 pm, Monday to Friday.

The support centre helps people whose identities have been stolen or misused. It will help you re-establish your identity and may apply security measures that monitor your ATO account for unusual or suspicious activity.

• Act quickly. The sooner the ATO knows, the sooner it can protect your account.
• Check your myGov account for anything you don't recognise, such as returns, bank account changes or contact details you didn't make.
• Secure your other accounts. If your TFN was exposed in a data breach or scam, other details such as your driver's licence, Medicare card or bank details may have been too. IDCARE, Australia's national identity and cyber support service, can help you with a recovery plan.
• Report it. Report scams to Scamwatch, and cybercrime through ReportCyber.

Lodging your tax return when your TFN is compromised

Once security measures are on your account, some access may be restricted while the ATO confirms it's really you, and that can include your tax agent's access. If you or your agent can't get into your account at tax time, call the Client Identity Support Centre to verify your identity before you lodge. In our experience, access may only be open for a short time after that call, so it's best to call once your return is ready to lodge. If we're preparing your tax return, we'll tell you when a call is needed and lodge as soon as access is open.

Your TFN normally stays the same for life. The ATO usually protects your existing number rather than issuing a new one just because it has been exposed.

How to find a lost TFN

If you've just misplaced your TFN, you can find it online by signing in to myGov (linked to the ATO) or the ATO app. Without myGov, you can usually find it on:

• your notice of assessment, if you've lodged a tax return
• letters from the ATO, such as a statement of account
• a payment summary or income statement from your employer
• your superannuation account statement

If you use a registered tax agent, you can ask them for it. If you still can't find it, phone the ATO on 13 28 61. Our guide to finding a lost TFN has more detail.

How to apply for a TFN

If you've never had a TFN, applying is free. Australian residents aged 15 or over with a Strong Digital ID, such as myID, can apply online, which is the fastest option. Otherwise, you can:

• Apply at Australia Post: complete the online form, then take your application summary and original identity documents to a participating Australia Post outlet within 30 days.
• Apply at a Services Australia centre using the paper TFN application form (NAT 1432).
• Apply by post with certified copies of your identity documents, if you can't use the other options.

Allow up to 28 days for your TFN to arrive once your application is complete, and don't lodge a second application while you wait. Migrants, temporary visitors and people living overseas have separate options on the ATO website.

Who needs your TFN

Only give your TFN when you need to. It isn't compulsory to quote it in most situations, but leaving it out can cost you:

• Your employer: without your TFN, your employer must withhold tax at the top rate.
• Banks and investments: without it, tax can be withheld from your interest and dividends at the top rate.
• Your super fund: without it, your fund pays extra tax on your contributions and can't accept some contributions.
• Centrelink, the ATO and your tax agent: needed for government payments and your tax return.

Never give your TFN in reply to an unexpected email, text or call, or post it on social media. The ATO doesn't send unsolicited emails or texts asking you to reply with your TFN.

Keeping your TFN safe

• Keep documents showing your TFN somewhere secure, and shred them when you no longer need them.
• Don't carry your TFN in your wallet or store it in an unprotected note on your phone.
• Use a strong, unique password for myGov and turn on multi-factor authentication.
• Check your myGov account regularly for activity you don't recognise.

Need help?

If your TFN has been compromised and you need to lodge, contact Australia Wide Tax Solutions. We'll work through the ATO's identity process with you so your return is lodged once your account is secure.