The New WhatsApp Threat
The latest scam making the rounds involves official-looking notices sent via WhatsApp. Cybercriminals are taking advantage of the period after the tax filing deadline, when many are anxiously awaiting refunds. These messages often use the Government of India's
emblem and cite legal sections to create a sense of urgency, claiming a refund is pending or that penalties are imminent. The goal is to scare you into acting without thinking. These messages might contain attachments like a '.zip' or '.exe' file, which are actually malware designed to steal your banking passwords and personal data from your phone or computer. The Income Tax Department has clarified that it does not send official notices or summons through WhatsApp, so any such message should be treated as fraudulent.
Recognising the Red Flags
Protecting yourself starts with knowing what to look for. Be immediately suspicious of any tax-related communication that creates a sense of panic or urgency. The Income Tax Department does not rush taxpayers with threatening messages for refunds. Scammers often demand immediate action, threatening penalties or lapsed refunds. Another major red flag is any request for personal or financial information like your PAN, password, bank account details, or OTPs. The department has repeatedly stated it will never ask for such details via email, SMS, or phone. Also, look for poor grammar, spelling mistakes, or strange links. Fraudulent website links often mimic the official one but will have slight variations, so always check the URL carefully before clicking.
How to Authenticate Any Tax Notice
The single most powerful tool at your disposal is the Document Identification Number (DIN). Since 2019, every genuine notice, order, or letter from the Income Tax Department must contain a unique, computer-generated DIN. Any communication without a DIN is considered invalid. To verify a notice, you don't even need to log in to the tax portal. Simply visit the official e-filing website, 'incometax.gov.in'. On the homepage, find the 'Quick Links' section and click on 'Authenticate notice/order issued by ITD'. You can then enter the DIN from the document along with your mobile number to verify its legitimacy instantly. An OTP will be sent to your phone for validation. This simple, two-minute check is your best defence against a scam.
Your Action Plan If Targeted
If you receive a suspicious message or email, the first rule is: do not panic and do not click on any links or download attachments. The Income Tax Department advises taxpayers to ignore such messages. The safest course of action is to independently verify any claims by logging into your account on the official portal, incometax.gov.in. All genuine notices and communications will be available in your e-filing account under the 'e-proceedings' section. If you have been targeted, you should report the incident. Suspicious phishing emails can be forwarded to webmanager@incometax.gov.in and incident@cert-in.org.in. For financial fraud, you can call the national cybercrime helpline at 1930 or file a complaint at cybercrime.gov.in.
