BOK logo

ATO releases new guidelines to combat identity theft.

ATO and the Tax Practitioners Board have developed new client verification guidelines for tax practitioners, with criminals using increasingly sophisticated attempts to steal taxpayer identities.

ATO and the Tax Practitioners Board have developed new client verification guidelines for tax practitioners, with criminals using increasingly sophisticated attempts to steal taxpayer identities.

 

In consultation with the Tax Practitioners Board, the ATO has developed client verification guidelines for registered tax practitioners and BAS agents using Online services for agents or practitioner lodgement services through software.

The guideline is to be read in conjunction with the TPB’s Practice Note TPB(PN) 5/2022 – Proof of identity requirements for client verification.

By following the guideline, the ATO said tax practitioners would have met the requirements prescribed by the TPB.

“Failure to take appropriate proof of identity steps to verify a client’s or individual representative’s identity may result in a breach of the Tax Agent Services Act 2009 and disciplinary actions by the TPB,” the ATO warned.

The ATO explained that the guideline is part of the TPB’s and ATO’s transition towards mandating minimum standards of client verification.

“We will continue to consult with the TPB and the tax profession before mandating these minimum requirements. You are encouraged to adopt these standards on a voluntary basis between now and then,” the Tax Office stated.

“These guidelines should be read as minimum requirements. You are encouraged to go beyond these requirements if you still have concerns about a person’s identity, even if the minimum requirements are met.”

Verification requirements

The guideline states that while the ATO does not expect tax practitioners to go back and verify their entire client base, it is asking tax practitioners to perform identity checks on all new clients, including representatives of new clients and new representatives of existing clients.

Tax practitioners should also perform identity checks where they have concerns that existing clients may not be who they say they are, it said.

The guidelines advise against retaining identification documents as this may increase the risk of being targeted by criminals.

“Instead, you should maintain contemporaneous records to demonstrate that proof of identity steps were undertaken,” it stated.

Under the guideline, tax practitioners must verify two separate proofs of identity using one or a combination of methods. The exception is when a primary photographic proof of identity document, such as a drivers licence, can be verified using the visual method.

The guidelines provide details on each of the methods. The visual method involves visually checking a client’s identification documents, which is suitable when interacting with the client in person or by video.

Another method is comparing data provided by the client against data of ATO systems. While this can be used for remote interactions and digital interactions through software, it cannot be used to prove the identity of an individual representative of a client unless the authorised representative is also the client, the guideline cautioned.

The third method is comparing a client’s details on government-issued identity documents against details held by a document verification service (DVS) provider. This method can be used to prove the identity of an individual representative of a client, the guideline stated.

Online agents

The ATO said it recognises that more registered tax practitioners are adopting online practices with minimal agent-client face-to-face or physical contact.

“Online agents who provide services through a web, cloud- or software-based customer portal must adopt stronger and more stringent client verification processes,” it said.

The ATO also warned that where accounting firms are creating an online portal or software, there are additional requirements that they will need to meet to ensure storage, transmission of the data maintains a high level of security.

“For example, you need to ensure that ATO data you access is not open to cybercrime,” the Tax Office said.

The ATO said that strong client verification helps protect tax practitioners, their clients and Australia’s tax and superannuation systems from misuse and abuse due to identity theft and related issues.

“With an ever-increasing reliance on technology and remote work practices, the risks presented by this continue to rise. There are increasingly widespread and sophisticated attempts by criminals to commit refund fraud by stealing taxpayer identities,” the ATO warned.

“This has devastating financial consequences to affected individuals and a flow-on effect to the Australian community. Our experience with tax practitioners affected by identity breaches has highlighted varying levels of discrepancies in client verification practices.”

 

 

Miranda Brownlee 

02 February 2022

accountantsdaily.com.au

Want to know more?

Do you have a question about something you've read in this article? Need more information? Want to book an appointment? Simply let us know below and we'll get back to you ASAP.

Disclaimer

In the preparation of this website every effort has been made to provide accurate and timely information. However, errors can occur and applicable laws and regulations may change.

The information contained in the site is general and is not intended to serve as advice. No warranty is given as to the reliability of any information.

Users are encouraged to consult with professional advisers for advice before making any decisions that affect their own interests.

Bourke O’Brien Kennedy disclaims all and any liability to any person as to the consequences of anything done or omitted to be done by any person in reliance whether wholly or partially, upon any information contained in this website.

Links on this website are to resources managed by other parties over whom Bourke O’Brien Kennedy has no control. As such, Bourke O’Brien Kennedy accepts no responsibility as to the accuracy of any statement, opinion or advice contained in any of the supplied information and readers should rely on their own enquiries before making any decisions affecting their own interests.

Privacy Policy

We will only use the information you provide to us to respond to your requests and provide you with information about Bourke O’Brien Kennedy services.

Whenever you receive information from us electronically, you will always have an opportunity to request not to receive the information again and your wishes will be respected.

If you send us a curriculum vitae (CV) to apply for a position with Bourke O’Brien Kennedy, we will only use that information to consider you for available opportunities.

We do not share personal information with third parties except as necessary to carry out our business or as required by law or other processes. We do not sell personal information. All personnel with access to personal information ensure to maintain its confidentiality.

If you have questions or comments about anything to do with our website, please do not hesitate to contact us at bok@bok.com.au