Check the address it came from
revenu writes from addresses ending in @revenu.com.au, such as adam@revenu.com.au or charlie@revenu.com.au. Account notices can come from @revenu-lab.com. Anything else claiming to be revenu, treat as suspect.
Never send passwords or card numbers
revenu will never ask for your password or card details by email or text.
Don't click if you're unsure
Sign in yourself at app.revenu.com.au instead of using a link in the email.
Forward it to Charlie
Forward the email to charlie@revenu.com.au and ask. He'll tell you if it's real.
When it's done
You know whether the email is genuine before you click anything.
Did this match what you see?
Next up