Don’t Let Tax Time Be the End of Your Business: Protecting Yourself from Cyber Attacks This EOFY

Don’t Let Tax Time Be the End of Your Business: Protecting Yourself from Cyber Attacks This EOFY

As the 2024-2025 financial year wraps up, small businesses across Australia are entering one of their busiest periods – and cyber criminals know it.

From lodging tax returns and reconciling accounts to implementing new superannuation thresholds and finalising payroll, it’s a time of high activity and, unfortunately, high risk. According to research from CommBank, one in four Australians have seen or experienced an EOFY scam, with the ATO reporting a 179% increase in scam emails and a 414% increase in scam SMS in just one year.

Why Tax Time is Prime Time for Cyber Attacks

Cyber criminals prey on the increased pressure and reduced vigilance many businesses experience during EOFY. Scams often include:

  • Fake ATO or myGov messages with phishing links
  • Fraudulent invoices that look like genuine supplier bills
  • Payment redirection scams, often involving fake emails from familiar contacts
  • Compromised cloud storage or email accounts
  • Remote access support scams targeting you or your team

Many small businesses believe they’re too small to be a target – but the average cost of a cyber attack is $46,000. That’s a major hit to any business, let alone one already juggling year-end responsibilities.

Simple Steps to Strengthen Your Cyber Security

Protecting your business doesn’t require tech wizardry. Here are just a few quick wins:

  • Enable multi-factor authentication on all key accounts
  • Upgrade to passphrases and use a password manager
  • Be suspicious of urgent requests for payment or information
  • Stick to verified software and trusted IT support providers
  • Switch to eInvoicing, which is safer than emailing PDFs

Importantly, ensure your staff are trained to recognise and respond to cyber threats. Cyber criminals are increasingly targeting not just business owners but also employees and even family members connected to your accounts. 

Need help protecting your business from cyber risks this EOFY?

Cyber security is a key part of any risk management strategy. 

Talk with your local insurance adviser about protection for your business and customers. They’ll work to provide the coverage at a cost to meet your needs, as you head into the new financial year.

General Advice Warning

This communication including any weblinks or attachments is for information purposes only. It is not a recommendation or opinion, your personal or individual objectives, financial situation or needs have not been taken into account. This communication is not intended to be a constitute personal advice. We strongly recommend that you consider the suitability of this information, in respect of your own personal objectives, financial situation and needs before acting on it. This document is also not a Product Disclosure Statement (PDS) or a policy wording, nor is it a summary of a particular product’s features or terms of any insurance product. If you are interested in discussing this information or acquiring an insurance product, you should contact your insurance adviser to obtain and carefully consider any relevant PDS or policy wording before deciding whether to purchase any insurance product.

Business Interruption Insurance

Business Interruption Insurance

From your family and employees to customers and suppliers, there are a lot of people who depend on your business opening its doors each day.

Find your local Insurance Adviser

Talk to your local Adviser to get advice about your insurance needs and to get a quote