Mr McKinnon said the Inland Revenue website was alerting Kiwis to be aware of suspicious emails seeking IRD numbers and other personal information.
"Many of us now communicate directly with tax advisers via email so other tricks include sending emails that ask you to open what appear to be legitimate attachments to fill out personal details," he said.
"The simple act of clicking on that attachment could redirect you to a malicious website or deliver to your computer an infection that could launch an attack on your accounts and extract financial details."
Mr McKinnon said with all the personal information which could be included in income tax returns, people's identity could be at risk if it got in to the wrong hands.
"If you see an offer that looks too good to be true - avoid it."
The scam warning on the Inland Revenue website reminded customers about being careful who they gave their IRD number to.
"We are aware emails can circulate which attempt to trick recipients into divulging personal information. These emails are known as phishing emails. For example, an email may claim to come from Inland Revenue or a tax refund agency asking you to click on a link that takes you to a fake website," the warning states.
"Do not click a link, or reply to an email, fitting this description. IRD will not send you a hyperlink in an email. Delete the email from your inbox and trash folders."
TIPS TO SAFELY FILE A TAX RETURN:
Review your personal or business online security systems to ensure your protection in fully up-to-date on all computers, phones and other mobile technologies.
Always use a trusted internet connection, if using a public connection make sure a firewall is in place and internet security installed.
Be cautious of anything you haven't directly requested and only respond to those communications you have initiated.
Many legitimate services use emails and text messages to send alerts but they will never request the confirmation, update or disclosure of confidential personal details, if you receive communication asking for this do not click on any links and report it to the relevant company.