What to do after suspicious activity on your myGov account

If you think someone has accessed or tried to access your myGov account, act immediately.

Review your myGov account

Check your account history for activity you don’t recognise, such as:

changes to your account settings, like your name, email address or mobile number
unknown devices or passkeys registered to your myGov account
unusual sign in history or times.

Check your linked services for:

If you notice suspicious activity in your linked service, contact that service.

If there’s activity you don’t recognise, the safest step is to close your myGov account.

You can then create a new myGov account and relink your services. Make sure you use a new passphrase or password.

Make your account more secure by:

doing the security review in your myGov account
turning off your password as a sign in option and using Digital ID or a passkey to sign in
changing your password and improving its strength by using a passphrase
using a strong, unique password that isn't used anywhere else.

If you need help or still have concerns, contact us.

You can find out more about:

Page last updated: 16 July 2025