"PAN Blocked" Malicious Link Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 27, 2026

Severity: CRITICAL | View Full Scam Details

Beware the "PAN Blocked" Malicious Link Scam in India 2026: Protect Your Financial Identity Now

Every day, thousands of Indians face a cunning phishing scam that exploits fears around their PAN — an indispensable ID for finance and taxes — risking loss of money and sensitive data.

What Is the "PAN Blocked" Malicious Link Scam?

The "PAN Blocked" Malicious Link Scam is a rapidly spreading phishing attack targeting Indian citizens, particularly those who rely heavily on their Permanent Account Number (PAN) for tax filings, bank accounts, and digital payments. The scam plays on the urgency and anxiety of receiving messages that your PAN is blocked or that you have a pending income tax refund requiring immediate action.

Since PAN is linked with the Income Tax Department, banks, UPI apps, and even Aadhaar for verification, such messages cause panic. Scammers exploit this by sending SMS or WhatsApp messages with a malicious link disguised to look like it came from official sources. Victims who click these links are taken to fake websites where they are tricked into sharing confidential details such as Aadhaar numbers, bank details, UPI PINs, or One-Time Passwords (OTPs). These details are then used in fraudulent transactions.

This scam has been highlighted in several advisories by the Indian Computer Emergency Response Team (CERT-In) and the Indian government’s Integrated Fraud Management System (I4C). With India's growing digital economy and increasing UPI transactions worth lakhs of crores daily, scammers have intensified attacks exploiting financial anxieties linked to PAN and tax payments.

How This Scam Works — Step by Step

1. Initial Contact: You receive an SMS or WhatsApp message stating: "Your PAN is blocked" or "You have a pending tax refund; immediate action required." The message often looks official, sometimes even mimicking sender IDs resembling the Income Tax Department.

2. Malicious Link Included: The message includes a clickable link or OTP request to "verify" or "unblock" your PAN immediately.

3. Fake Website Appearance: Upon clicking the link, you land on a website that appears convincing and government-like, asking you to enter sensitive data — Aadhaar number, PAN, date of birth, bank account details, and UPI PINs.

4. Information Theft: Once entered, your data is captured by scammers. In some variants, the site requests OTPs sent to your phone, which you enter believing it is part of verification.

5. Account Compromise: Using your details and OTP, the fraudsters may initiate UPI transactions, withdraw money, or even request SIM swaps using your Aadhaar-linked mobile services.

6. Financial Loss and Identity Theft: Victims find unauthorized deductions or face difficulties filing taxes, with some also experiencing further identity misuse.

Real Warning Signs to Watch For

• Unexpected urgent message about your PAN being blocked or refund pending. You rarely get such claims without prior official communication from the Income Tax Dept.

• Spoofed sender IDs that are similar but not exact to government agencies.

• Links with strange or misspelled domain names that are not official .gov.in web addresses.

• Requests to enter sensitive details like Aadhaar, UPI PIN, or OTP on unknown websites.

• Poor grammar, spelling errors, or inconsistent formatting in messages.

• Pressure to take immediate action or threat of penalties or legal action.

• Lack of official channels for verification or inability to find related news or advisories on government portals.

What Happens to Victims

Victims often suffer both financial and emotional distress. Financially, stolen UPI credentials or bank account details can lead to unauthorized payments, sometimes draining savings instantaneously. UPI’s real-time fund transfer amplifies the loss risk, and while RBI mandates some grievance redress mechanisms, reversals aren’t guaranteed.

Emotionally, victims face anxiety and frustration, especially when their Aadhaar or PAN details are compromised. Aadhaar misuse can lead to SIM swaps, which in turn facilitates further impersonation and frauds. The false notion that the Income Tax Department or banks demand urgent action creates panic, causing victims to overlook normal caution, worsening the consequences.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has issued warnings urging customers never to share UPI PINs, OTPs, or sensitive financial data based on unsolicited messages. The RBI helpline number is available for consultation and fraud reporting.

CERT-In and the Ministry of Electronics and Information Technology (MeitY), through their Integrated Fraud Management System (I4C), have repeatedly alerted citizens against phishing scams that impersonate government communications.

If you suspect fraud, you can call the national cybercrime helpline 1930, which provides assistance for reporting and guidance on cybersecurity incidents.

How to Protect Yourself

1. Do not click on any unsolicited links in SMS or WhatsApp messages claiming PAN issues or tax refunds.

2. Verify any message by visiting official Income Tax Department or UIDAI websites directly rather than using links in messages.

3. Never share your Aadhaar, PAN, bank account details, UPI PIN, or OTP with anyone, even if the message appears urgent.

4. Use only official government portals ending with .gov.in for tax or financial matters.

5. Install updates on your phone and use trusted antivirus apps as recommended by CERT-In.

6. Register your mobile number with the National Do Not Call Registry to reduce unsolicited promotional messages.

7. Trust RBI verified UPI apps for transactions and enable transaction alerts on your mobile number to monitor activity in real-time.

What to Do If You’ve Been Targeted

• Immediately change your UPI PIN and online banking passwords.

• Contact your bank and inform them about the fraud to block or freeze your accounts temporarily.

• Report the incident to the 1930 National Cybercrime Helpline to get assistance for filing complaints.

• File a complaint on the official cybercrime reporting portal, cybercrime.gov.in, to initiate an investigation.

• Inform UIDAI if you suspect Aadhaar misuse or SIM swaps, and request security measures on your mobile number.

• Keep screenshots of suspicious messages and details of any transactions for evidence.

Frequently Asked Questions

Q1: Can my PAN really get “blocked” like this?
No, PAN is not blocked without prior official communication through formal government channels. Messages claiming immediate PAN blocking are usually fake and designed to create panic.

Q2: What should I do if I accidentally entered details on a fake website?
Immediately change all related passwords and UPI PINs, contact your bank to freeze accounts if necessary, and report the incident on the cybercrime helpline 1930 and cybercrime.gov.in.

Q3: How can I verify if a tax refund message is genuine?
Always check your Income Tax Portal account directly at incometaxindia.gov.in. The government does not send refund links via SMS or WhatsApp; official communication comes through registered email or the secure portal.

If you receive suspicious messages about your PAN or tax refunds, do not rush. Verify everything first at BharatSecure.app — your trusted guide to spotting scams and staying safe online. Stay alert, stay protected!