Income Tax Call Center Spoofing Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 29, 2026

Severity: CRITICAL | View Full Scam Details

Income Tax Call Center Spoofing Scam in India 2026: Protect Your UPI and KYC Data

Beware: Fraudsters impersonating Income Tax call centers are targeting Indian taxpayers with fake calls to steal UPI credentials, OTPs, and personal KYC details.

What Is the Income Tax Call Center Spoofing Scam?

The Income Tax Call Center Spoofing Scam is a growing cyber fraud in India where scammers use phone calls that appear to come from official Income Tax Department helplines or call centers. These calls aim to intimidate or confuse taxpayers by claiming there is a tax refund, pending demand, or legal issue requiring urgent action. The fraudsters often spoof caller IDs to show genuine Income Tax or central government numbers, making it hard to detect their fake identity.

This scam mainly targets salaried individuals, small business owners, and senior citizens who are less familiar with digital payment security or wary of tax issues. The criminals usually try to trick victims into sharing UPI PINs, OTPs sent by banks, Aadhaar details, or bank account information—all crucial to bypass two-factor authentication and equip them to withdraw or transfer money.

In 2026, various cybercrime authorities including CERT-In and the Ministry of Finance have reported a sharp rise in this scam’s complaints. The Indian Cyber Crime Coordination Centre (I4C) has also raised alerts and encourages users to verify official communication properly. RBI—India’s banking regulator—warns against sharing personal banking credentials or UPI IDs on call under any guise, referring to these as critical threats to financial safety.

How This Scam Works — Step by Step

1. Initial Spoofed Call: The victim receives a call appearing from an Income Tax Department helpline number, often spoofed to look authentic (e.g., starting with +91 or government prefixes).

2. Urgent Tax Issue Claim: The caller claims the victim has a pending tax refund or a legal notice threatening arrest or penalties, creating panic.

3. Request for Personal Details: The scammer asks for Aadhaar number, PAN card details, bank account number, or complete KYC information “to verify identity.”

4. UPI and OTP Trick: Next, they request a UPI ID (e.g., us**@bank) to “process the refund” or “freeze suspicious transactions,” then ask the victim to share the OTP sent to their phone.

5. Fake Verification Steps: To gain trust, the caller may guide the victim to enter their UPI PIN or perform a small UPI transaction that seems legitimate but transfers money to accounts controlled by the fraudsters.

6. Funds Transfer or Data Theft: With these credentials, scammers can initiate unauthorized fund transfers or exploit Aadhaar/KYC data for other frauds like SIM swap or new bank account opening.

7. Call Ends Abruptly: Once money is drained or data is stolen, the caller disconnects, and the victim realizes the fraud too late to reverse transactions.

Real Warning Signs to Watch For

• The call uses pressure tactics warning of arrest or legal action if you don’t comply immediately.
• Caller asks for confidential info like OTP, UPI PIN, Aadhaar, or bank account details over the phone.
• Caller ID appears as an official Income Tax helpline but suddenly switches to generic phone numbers.
• Requests to download apps or visit suspicious websites for “verification” or “refund.”
• Urges immediate UPI transactions or sharing multiple OTPs within minutes.
• Caller avoids or fumbles answering straightforward questions about their identity or official procedure.
• Any unsolicited call claiming to be linked to Income Tax when you have no pending dues or communication from the department.

What Happens to Victims

Victims often face sudden unauthorised debits through UPI, with amounts ranging from a few hundred to lakhs of rupees. Due to the real-time nature of UPI payments, reversing the transaction is difficult once the scammer has access. Victims may also experience Aadhaar misuse leading to SIM swapping — where fraudsters gain control of phone numbers to intercept OTPs for further attacks.

The financial loss is compounded by emotional distress—fear of losing savings, violations of privacy, and the grievance of navigating complex complaint procedures. Several complainants report repeated harassment calls or identity misuse for credit card or loan fraud after falling prey once. The impact on middle-class Indians relying on digital payment systems is particularly critical as trust is undermined.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has issued warnings advising users never to share OTP, UPI PIN, or banking credentials over phone calls or messages, regardless of the call’s claimed identity. RBI’s official helpline (call 1800-112-191) also guides victims on blocking compromised accounts and initiating dispute resolutions.

CERT-In recommends verifying the authenticity of all calls relating to taxation through official Income Tax Department websites or portals, and reporting suspicious calls immediately. The National Cyber Crime Helpline 1930, operated by I4C, is dedicated to receiving complaints related to such impersonation frauds.

General advisories stress that the Income Tax Department does not call taxpayers for personal banking information or request passwords or PINs over the phone. Any such call should be treated as suspicious.

How to Protect Yourself

1. Never share OTPs, UPI PINs, or passwords over phone calls or WhatsApp, no matter who calls.
2. Verify caller identity by calling official Income Tax helpline numbers yourself before sharing any details.
3. Register your mobile number with the Do Not Disturb (DND) registry to reduce unsolicited calls.
4. Use Aadhaar-based OTP authentication only through official government portals, never by callers.
5. Install and update your mobile’s security and banking apps only from trusted sources like Google Play or App Store.
6. Do not click on links or download apps suggested in unsolicited calls or messages.
7. Enable UPI transaction alerts and monitor bank statements regularly for unauthorized debits.

What to Do If You've Been Targeted

• Immediately block your UPI ID and contact your bank to freeze suspicious or unauthorized transactions.
• Change any passwords or PINs associated with mobile banking, UPI apps, and Aadhaar-linked services.
• File a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in) detailing the call, amounts lost, and details shared.
• Call the 1930 cybercrime helpline to report the impersonation scam and seek guidance on further action.
• Inform your mobile service provider if you suspect SIM misuse and request a number change or block to prevent SIM swap fraud.
• Reach out to the Income Tax Department via official channels to report the incident and verify any pending tax matters.

Frequently Asked Questions

Q: Can the Income Tax Department call me directly about refunds or taxes?
A: The Income Tax Department usually communicates through official letters, emails from registered IDs, or secure online portals. They do not ask for OTPs, UPI PINs, or banking passwords over phone calls.

Q: What should I do if I accidentally shared my OTP or UPI PIN with a caller?
A: Immediately contact your bank to block transactions, change your UPI PIN, and file a cybercrime complaint at cybercrime.gov.in. Also, notify the 1930 helpline for prompt assistance.

Q: How can I check if a call claiming to be from Income Tax is genuine?
A: Hang up and independently verify by contacting the official Income Tax Department helpline or visiting the official website. Do not trust caller ID alone, as it can be spoofed.

At BharatSecure.app, we help you verify suspicious calls and messages related to income tax or banking scams. Always stay vigilant and report fraud at the 1930 cybercrime helpline to protect yourself and your family.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.