The Anatomy of the New Scam
Cybercriminals are exploiting the post-filing season, a time when taxpayers may be expecting refunds or clarifications. The latest scam involves sending official-looking notices through informal channels like WhatsApp. These messages, often bearing the Government
of India emblem and citing complex sections of the Income Tax Act, claim there are discrepancies in your filing and demand immediate action to avoid hefty penalties or prosecution. They are designed to create panic, pressuring you to respond quickly without thinking. Some messages demand payment for a supposed tax shortfall, while others focus on pending refunds, tricking you into sharing sensitive information.
Key Red Flags to Watch For
The most significant red flag is the communication method itself. The Income Tax Department has clarified that it does not send official notices, summons, or penalty orders via WhatsApp. Any tax-related notice received on a messaging app from an unknown number is almost certainly a fraud. Scammers also create a false sense of urgency, often giving a tight deadline of 72 hours to respond. Another major warning sign is any request for payment via unconventional methods like UPI links, or any message that contains attachments, especially ZIP or EXE files. These files often contain malware designed to steal your banking credentials and personal data.
How to Verify Any Tax Communication
Never click on links or download attachments from a suspicious tax-related message. The only way to safely verify the authenticity of a tax notice or refund status is through the official Income Tax portal: incometax.gov.in. Log in to your account on the official portal to check for any outstanding demands, notices, or refund updates. The department never asks for your password, OTPs, or bank details via email, SMS, or WhatsApp to process a refund. Real refunds are credited automatically to the bank account you pre-validated on the e-filing portal. If you receive a communication, type the official website address directly into your browser to check its validity; do not use links from the message.
What to Do If You Are Targeted
If you receive a suspicious message, the first step is to stay calm and not engage. Do not reply, click any links, or make any payments. Block the sender's number immediately. You should then report the incident to help authorities track these criminals. Suspicious phishing emails and messages can be forwarded to webmanager@incometax.gov.in, with a copy sent to the national cyber incident response agency at incident@cert-in.org.in. For any cybercrime, you can also call the national helpline number 1930 or file a report on the National Cyber Crime Reporting Portal at cybercrime.gov.in. Reporting these attempts helps protect both you and other potential victims.
