Spoofed Income Tax Official Impersonation — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Jul 18, 2026

Severity: High | View Full Scam Details

Beware in 2026: Spoofed Income Tax Official Impersonation Scam Targeting Indians via UPI and WhatsApp

Millions of Indians face a rising threat from fraudsters impersonating Income Tax officials through spoofed calls and WhatsApp messages, aiming to steal money using UPI and OTP tricks.

What Is the Spoofed Income Tax Official Impersonation?

The spoofed Income Tax official impersonation scam is a sophisticated fraud targeting taxpayers across India, especially during and after the tax filing season. Fraudsters pose as Income Tax Department representatives, claiming urgent issues like pending refunds, tax dues, or verification needs. Their goal is to create panic or urgency, prompting individuals to share sensitive information or complete transactions that result in financial loss.

This scam exploits the real anxiety many Indians feel about their income tax returns, PAN details, and compliance with government norms. The alleged callers and WhatsApp messages are increasingly convincing — using fake caller IDs that mimic official numbers, and sometimes revealing partial personal information like names or PAN numbers to build trust. Cases reported to police suggest this scam is widespread across urban and rural India, with victims ranging from salaried employees to small business owners.

Although the Income Tax Department and official bodies like the Central Board of Direct Taxes (CBDT) never directly ask for payments or sensitive credentials over phone or WhatsApp, scammers manipulate this trust gap. CERT-In and the Indian Cyber Crime Coordination Centre (I4C) have issued general alerts advising vigilance against such impersonation frauds, especially those using UPI payments or OTPs to facilitate unauthorized money transfers.

How This Scam Works — Step by Step

1. Initial Contact: The victim receives a phone call or WhatsApp message from a number spoofed to appear as an official Income Tax helpline, often including an official-sounding name and sometimes background noise mimicking an office environment.

2. Scare Tactics: The caller alleges an urgent issue — such as a pending tax refund, tax evasion charges, or discrepancies in the PAN database. They may mention partial personal data like the victim’s name or PAN found in leaked databases, lending false credibility.

3. Request for Action: The victim is instructed to take immediate action, such as verifying their identity, confirming bank details, or paying a fine to avoid penalties. The scammer may request the victim to share OTPs received on their phone or approve UPI payment requests sent via apps like Google Pay or PhonePe.

4. UPI/OTP Manipulation: Victims receive WhatsApp messages or prompts on their phones for UPI payments or verification codes. By sharing OTPs or authorizing seemingly legitimate payments, the victim inadvertently transfers money to the fraudsters.

5. Follow-Up to Maintain Trust: Some scammers continue communicating, asking for more information or payments citing additional penalties, extending the fraud window.

6. Cutting Off Contact: Once the money is transferred, scammers stop responding, often blocking the victim’s number.

Real Warning Signs to Watch For

• Calls or messages claiming urgency about tax dues or refunds, pressuring rapid action.
• Requests for OTPs or UPI payment approvals — the Income Tax Department never asks for these over phone or WhatsApp.
• Messages coming from numbers not listed on official government portals, even if they appear spoofed.
• Offers to “expedite refunds” or “waive penalties” after upfront payments.
• Requests for sensitive personal info like Aadhaar or bank account details via WhatsApp.
• Threats of arrest or legal action to coerce compliance.
• Poor grammar or mismatched official terminology in messages or calls.

What Happens to Victims

Victims typically suffer significant financial loss as money sent via UPI to scammer accounts is almost impossible to reverse once accepted. Even if victims realize the fraud quickly, the lack of immediate reversal options on UPI transfers leads to permanent loss of funds, sometimes in amounts ranging from a few thousand to lakhs of INR.

Beyond money loss, victims face emotional stress, humiliation, and sometimes embarrassment when victims share their experiences with family or employers. Cases where Aadhaar or PAN details are compromised may lead to identity theft or misuse in other financial frauds. SIM swap risks also rise if scammers gain enough personal information, potentially leading to further interception of OTPs and accounts.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) emphasizes that banks and official agencies never call or message customers asking for OTPs or UPI approvals. RBI’s advisories encourage users to verify unknown payment requests independently via bank apps.

CERT-In and the Indian Cyber Crime Coordination Centre (I4C) recommend vigilance against impersonation scams and instruct victims to report incidents on cybercrime.gov.in or call the National Cyber Crime Reporting Portal. The 1930 cybercrime helpline, operated under the Ministry of Home Affairs, is also available 24/7 for assistance and guidance.

These institutions urge users to only rely on official government notifications, cross-verify through verified contact numbers from government websites, and report suspicious calls and messages immediately.

How to Protect Yourself

1. Never share OTPs or password details over phone, WhatsApp, or SMS, even if the caller claims to be from the Income Tax Department.
2. Do not approve UPI payment requests unless you initiated them and verified the recipient.
3. Verify the caller ID independently by visiting official websites or calling known helplines.
4. Avoid clicking links or downloading files sent via unverified WhatsApp messages.
5. Register your mobile number with the Do Not Disturb (DND) service to reduce marketing calls.
6. Regularly monitor bank and UPI app transactions and report suspicious debits immediately.
7. Use Aadhaar’s virtual ID or masked PAN to limit exposure of full personal identification details online.

What to Do If You've Been Targeted

1. Immediately block the caller’s number and do not engage further.
2. Report the fraud to your bank to freeze or monitor your account for unauthorized transactions.
3. Lodge a complaint with the police cybercrime unit or file an online complaint on cybercrime.gov.in.
4. Call the 1930 cybercrime helpline for official guidance and assistance.
5. Inform UIDAI if Aadhaar details were compromised and consider locking biometric authentication.
6. Change all relevant passwords used in online tax filing or banking portals.
7. Keep all evidence — WhatsApp chats, call logs, screenshots — for investigations.

Frequently Asked Questions

Q: Can the Income Tax Department call me directly for payments or personal details?
No. According to official guidelines, Income Tax authorities do not call taxpayers asking for payments, OTPs, or personal data over phone or WhatsApp. All official communication is usually through email or postal letters mentioning the PAN.

Q: What should I do if I receive a WhatsApp message claiming to be from Income Tax officials?
Do not respond or share any personal information. Cross-verify by contacting the official Income Tax Department helpline numbers listed on their official website. Report the message to the cybercrime helpline 1930.

Q: Is there a way to reverse money lost through a UPI scam like this?
Usually, UPI transactions are instant and irreversible once accepted. However, immediately reporting to your bank can sometimes result in temporary blocking or tracking of the recipient account. Quick action is essential.

Be cautious with any suspicious tax-related messages or calls. Verify all government communications before acting. For any doubt, check with BharatSecure.app or report suspicious contacts via the 1930 cybercrime helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.