A New Wave of Tax Scams
Cybercriminals are capitalizing on the anxiety surrounding tax deadlines and refunds by circulating sophisticated scams. Recent warnings from cybersecurity firms and officials highlight a significant uptick in fraudulent communications that impersonate
the Income Tax Department of India. These scams are no longer just about suspicious links in emails; they now involve highly convincing, official-looking notices sent via WhatsApp and other messaging apps, designed to create panic and pressure taxpayers into immediate, unverified actions. The primary goal is to trick you into downloading malware or divulging sensitive personal and financial data.
How the Payment Request Scam Works
The latest method involves several steps designed to appear legitimate. Scammers send fake notices, often as PDF documents or within the message itself, complete with the Government of India emblem and fabricated reference numbers. These messages claim there is an urgent issue with your tax return, a pending penalty, or a refund that needs verification. The communication creates a sense of urgency, often giving a tight deadline of 72 hours to respond. They then instruct you to either click a link to a cloned e-filing website or download a file, frequently a .zip file, which contains malware. This malware can steal banking passwords, intercept OTPs from your SMS messages, and give scammers access to your device.
Red Flags: How to Spot a Fake Notice
Vigilance is your first line of defense. The Income Tax Department has clarified that it never sends official notices, summons, or penalty orders through WhatsApp. Be wary of any communication that uses unnecessary urgency or threatens immediate prosecution. Another major red flag is the request to download a file, especially a .zip or .exe file. Scammers also use fake website links that look similar to the official portal but may end in .lol, .ink, or have slight misspellings. The official website is incometax.gov.in. Any communication asking for your password, PIN, or OTP is fraudulent, as the department will never ask for this information.
The Correct Way to Verify Tax Demands
Never act on a tax notice received from an unofficial channel like WhatsApp or a random SMS. To verify if you have any outstanding demands or notices, you must log in directly to the official Income Tax e-filing portal at incometax.gov.in. Type the address directly into your browser; do not use links from emails or messages. Once logged in, you can navigate to the 'e-Proceedings' or 'Pending Actions' section to view any authentic communication from the department. Genuine notices will always be available on your portal dashboard. If a notice is legitimate, it will have a Document Identification Number (DIN) which can be verified on the portal.
What to Do If You Receive a Suspicious Request
If you receive a suspicious message, do not click any links or download any attachments. Do not reply to the message. The best course of action is to delete it immediately. If you accidentally clicked a link or downloaded a file, disconnect the device from the internet to prevent further data theft. It is crucial to report these incidents. You can forward suspicious phishing emails to webmanager@incometax.gov.in and also report the incident to the Indian Cyber Crime Coordination Centre (I4C) or CERT-In, India's national cyber incident response agency. Reporting helps authorities track these scams and warn other potential victims.
