How can I protect my business from fake ATO scams?

The ATO will never ask for your personal or bank details via email or text message

Correspondence from the ATO will always have a call back number and a reference.  If you suspect a non-genuine email, call the ATO to verify.  The ATO number will never be a mobile number