This morning had an e-mail from “ATO” saying I had a message on-line, with a link to log on (which should have been a warning).
Went through several pages of log-on stuff (which looked just-like ATO) but ended up with a screen wanting me to upload my ID, and since I had no idea what they wanted me to upload I went back to my e-mail to find I had received over 200 messages about trying to log-in, and confirmation of new accounts and subscriptions, all commercial stuff, and nothing from ATO.
So if you get an e-mail from “ATO” saying click on this link, don’t click on it.