Published: July 2026 | Updated: July 2026
Quick Answer:
Inland Revenue recently prosecuted an Auckland man who attempted to steal more than NZ$2 million by accessing 59 compromised myIR accounts, filing fraudulent GST and income tax returns, and submitting false COVID-19 support claims. Although Inland Revenue prevented most of the fraud, the case highlights why every New Zealand business should secure its myIR account, monitor tax activity regularly, and work with experienced Chartered Accountants to minimise financial and compliance risks.
Digital tax fraud is becoming increasingly sophisticated in New Zealand. While Inland Revenue has strengthened its fraud detection systems, businesses also have an important role in protecting their online tax accounts. This article explains what happened, why it matters, and the practical steps every business owner should take to improve myIR account security.
Answer: In July 2026, Inland Revenue announced the successful prosecution of an Auckland man who carried out one of New Zealand’s largest digital tax fraud schemes. Using stolen login credentials and forged identity documents, he accessed legitimate myIR accounts, filed fraudulent tax returns, and attempted to claim more than NZ$2 million in refunds and government support payments. Most of the fraudulent payments were detected and stopped by Inland Revenue’s fraud monitoring systems before they were released.
The offender was sentenced to five-and-a-half years’ imprisonment after pleading guilty to multiple fraud-related offences, including tax fraud, perjury, and the use of fabricated documents during court proceedings.
The case demonstrates how cybercriminals are increasingly combining:
Rather than exploiting weaknesses in New Zealand’s tax legislation, the fraud relied on stolen digital identities and compromised taxpayer accounts.
Answer: According to Inland Revenue, the offender obtained usernames, passwords and personal information from online criminal marketplaces before using those details to access genuine myIR accounts belonging to individuals and businesses. He then submitted fraudulent tax returns and government support applications in an attempt to redirect refunds into bank accounts created using fake identities.
Investigators found the offender:
Although more than NZ$2 million was targeted, Inland Revenue’s compliance systems prevented most of the fraudulent payments. Approximately NZ$251,000 was obtained before investigators uncovered the scheme.
Answer: This case is not simply about criminal behaviour—it highlights the growing cyber security risks facing every New Zealand taxpayer. Any business with a myIR account stores sensitive financial information that could potentially be targeted if login credentials are compromised.
Many businesses assume cybercriminals only target large organisations.
In reality, small and medium-sized businesses often present attractive opportunities because they may:
Even where no money is stolen, unauthorised access may result in:
DFK Orb360 Insight
As Chartered Accountants working with businesses across New Zealand, we’ve seen business owners focus heavily on tax compliance while overlooking digital tax security. Today, protecting your myIR account should be considered just as important as maintaining accurate accounting records.
Answer: Every business should treat its myIR account as a critical financial asset. The account provides access to GST, PAYE, income tax, employer obligations, and correspondence with Inland Revenue. Protecting access helps reduce both financial and compliance risks.
Businesses should regularly review:
Any unexpected changes should be investigated immediately and reported to Inland Revenue where appropriate.
If you’re unsure how to securely log in to your myIR account, reset a forgotten password, or recover access to a locked account, our step-by-step video explains the process.
Video: myIR Login NZ Guide 2026 | Reset Password, Unlock Account & Access IRD Online Services
Answer: Protecting your business from myIR Fraud NZ requires more than simply having a password. Businesses should combine strong cyber security practices with regular tax account monitoring and professional compliance reviews to reduce the risk of unauthorised access.
While Inland Revenue has sophisticated fraud detection systems, business owners remain responsible for protecting access to their own myIR accounts.
Answer: Businesses should immediately investigate any unusual activity within their myIR account. Early detection often prevents larger financial losses and lengthy Inland Revenue investigations.
| Potential Warning Sign | Recommended Action |
|---|---|
| Password suddenly stops working | Reset credentials immediately and review recent activity. |
| Unexpected GST refund notifications | Confirm whether legitimate returns were lodged. |
| Unknown bank account listed | Contact Inland Revenue immediately. |
| Returns filed without your knowledge | Request an urgent account review. |
| Unexpected correspondence from Inland Revenue | Verify all recent submissions with your accountant. |
| Unknown authorised users | Remove access and investigate immediately. |
Answer: If you believe your myIR account has been compromised, acting quickly can minimise financial loss and reduce compliance risks.
Recommended steps include:
The sooner suspicious activity is reported, the greater the opportunity to prevent fraudulent payments or unauthorised tax filings.
Expert Insight from DFK Orb360
The recent myIR Fraud NZ case demonstrates that tax compliance now extends beyond preparing accurate returns. Businesses must also protect the digital systems used to lodge those returns.
At DFK Orb360, we encourage clients to treat their myIR account with the same level of protection as their online banking. Regular reviews of authorised users, tax filings, bank account details and Inland Revenue correspondence can significantly reduce the risk of fraud.
Our Chartered Accountants help businesses throughout New Zealand maintain strong tax governance, accurate reporting and proactive compliance processes that reduce both financial and cyber risks.
Whether you’re a sole trader, property investor, contractor or growing business, our experienced Chartered Accountants can assist with:
Rather than reacting to tax issues after they arise, we help businesses implement practical compliance systems that reduce risk throughout the year.
Concerned about myIR Fraud NZ, Inland Revenue compliance or protecting your business tax records?
Speak with the Chartered Accountants at DFK Orb360 for practical advice on tax compliance, business security and proactive financial management.
Answer: myIR Fraud NZ refers to fraudulent activities involving Inland Revenue’s myIR online services. Criminals may attempt to gain unauthorised access to taxpayer accounts using stolen login credentials, identity theft or phishing scams to submit false GST returns, income tax returns or redirect tax refunds.
Answer: Yes. If your login credentials have been compromised through phishing emails, data breaches or reused passwords, an unauthorised person may attempt to access your account. Using a strong password and enabling Two-Step Verification significantly reduces this risk.
Answer: Warning signs include unexpected Inland Revenue messages, unfamiliar GST returns, changes to bank account details, password issues or tax refunds you were not expecting. Contact Inland Revenue immediately if you notice suspicious activity.
Answer: Yes. Inland Revenue uses fraud detection systems to identify unusual activity and investigate suspicious tax filings. However, businesses should also regularly monitor their own myIR accounts and report concerns promptly.
Answer: Many businesses authorise their Chartered Accountant to access myIR on their behalf. This helps ensure accurate tax filings, timely compliance and professional oversight while allowing business owners to retain overall control of their account.
Answer: Yes. DFK Orb360 assists businesses with Inland Revenue correspondence, reviewing lodged returns, identifying compliance issues, managing GST obligations and providing practical advice following suspected myIR Fraud NZ incidents.
For further information about protecting your Inland Revenue account and understanding tax compliance requirements, we recommend the following official resources:
At DFK Orb360, we believe effective tax management extends beyond filing returns. Our team helps businesses build stronger financial systems, maintain Inland Revenue compliance and reduce the risks associated with digital tax fraud.
Whether you need assistance with GST, income tax, myIR access, business advisory or ongoing accounting support, our experienced Chartered Accountants provide practical advice tailored to your business goals.
Our services include:
Contact DFK Orb360 today to discuss how we can help protect your business while keeping your tax obligations accurate, compliant and stress-free.
Digital tax fraud is becoming increasingly sophisticated, but proactive businesses can significantly reduce their risk through strong myIR security, regular compliance reviews and expert accounting support.
If you are concerned about myIR Fraud NZ, GST compliance or Inland Revenue obligations, our team is ready to help.
Copyright © 2025 Marketing Transformers | All Rights Reserved.
09 377 4238
Level 2, 6 Kingdon Street, Newmarket, Auckland
help@orb360.co.nz