Blog Post
Hi PalletcoSA , if you have a link to where the ATO states they do not recommend SMS I would appreciate if you can provide it?
I know this has been mentioned by others in the forum and on this thread as well, so I have tried to look for confirmation of this and I cannot find it.
What I can find, is that the ATO encourage people to use their own code generator app.
But they also list email and SMS as options alongside an authenticator app as options.
Thanks PalletcoSA , that appears to be a browser summary rather than direct messaging from the ATO
I was able to pull up the same summary and clicked on the references it has pulled to generate that information and it seems to come from their scam alerts page
This is in reference to SMS scams, rather than the use of SMS as a 2FA method
You can take a look at the page linked here and below.
https://www.ato.gov.au/online-services/scams-cyber-safety-and-identity-protection/scam-alertsThanks PalletcoSA , good find.
This article does highlight recommendations for businesses that are looking to implement security measures in their business.
As per your image, it does state that businesses 'may want to avoid' methods such as SMS.
But it would be misinformation to claim that "the ATO does not recommend SMS" as has been mentioned multiple times on the forum.
The good news is, that we have both provided links to information that the community can use to learn more (and I thank you for that)
Regards, Mike