Cloned Income Tax Portal Credential Theft

Verdict Summary

Cloned Income Tax Portal Credential Theft shows strong scam indicators common in fraud targeting Indian users. Do not share OTPs, passwords, or payments — verify the source independently.

Risk score: 9/10 · Severity: Critical · Verdict: Suspicious

Scam Intelligence: Cloned Income Tax Portal Credential Theft

Proprietary signals from BharatSecure's scam-tracking database.

How Cloned Income Tax Portal Credential Theft Works

Overview: In this sophisticated scam, fake websites are created to closely resemble the official Income Tax e-filing portal. Victims are lured through links in emails, SMS, or WhatsApp messages, and asked for PAN, Aadhaar, bank details, net banking or UPI credentials under the pretext of refund processing or verification. This is highly dangerous because even small mistakes can jeopardize your finances and personal identity. How It Works: 1) You see a message with a refund link. 2) Clicking the link takes you to a website that looks almost identical to the official income tax portal, complete with stolen government logos and familiar page layouts. 3) The site asks you to 'log in' by entering sensitive information including PAN, net banking, UPI details, or even passwords and OTPs. 4) In some cases, you are prompted to 'download refund form' or 'verify mobile', which installs hidden malware stealing your data. 5) Scammers use harvested details for direct theft or to breach other accounts. India Angle: This scam hits taxpayers nationwide, especially those not checking website URLs closely. The URLs often use '.com', '.org.in', or other lookalike endings. Many operate on weekends or late nights when official support is less reachable. Youth and mid-career professionals are especially at risk because they rely heavily on digital processes. Real Examples: - “Welcome to Income Tax e-filing. To claim your refund, log in at incometaxgov.in-login[.]info” - “Please verify your account details on income-taxefiling[.]org.in to prevent refund delay.” Red Flags: - URLs slightly off from the real site - Website has strange popups, language errors, or asks for full net banking details - Sudden 'download' buttons for refund forms - No visible government seals or help links working Protective Measures: - Only use incometax.gov.in for tax-related activities—type the address [ADDRESS_REDACTED]. - Avoid clicking any links from messages or third-party sources. - Never download ‘forms’ or install any software for refund processing. - Check website security: padlock symbol, proper layout, and working help desks. If Victimised: - Reset passwords for email and banking immediately. - Inform your bank about possible compromised data. - Report to 1930 and the cybercrime portal at cybercrime.gov.in. - Submit fake URL to [UPI_REDACTED].gov.in. Related Scams: - Cloned GST portal phishing - Fake Aadhaar update websites - Imposter IRCTC/devices updating portals

How This Scam Works — Detailed Explanation

In the current digital age, scammers have become adept at exploiting the vulnerabilities of unsuspecting individuals, particularly targeting taxpayers during the annual income tax filing season. They often start by sending out bulk emails, SMS, or WhatsApp messages that include links to websites that appear strikingly similar to the official Income Tax e-filing portal. The messages typically contain enticing subject lines related to income tax refunds, creating a sense of urgency or excitement that prompts individuals to click on the link. For instance, a resident of Mumbai might receive a WhatsApp message that reads, 'Congratulations! You are eligible for a tax refund of ₹10,000. Click here to claim it!' Such messages is designed to catch the recipient's eye and lure them into a trap. Once the victim clicks the link, they are taken to a clone of the actual portal, which is meticulously designed to trick users into believing it is genuine.

Going a step further, these scams employ various psychological tricks to enhance their effectiveness. Scammers often create a sense of urgency by stating that the refund will vanish unless action is taken immediately, preying on the recipient's fears of missing out on money that they believe they are owed. Additionally, they leverage social engineering techniques, such as pretending to be from the Income Tax Department or other reputable organizations, to lend credibility to their schemes. The website typically requests sensitive information such as PAN, Aadhaar number, bank account details, and UPI credentials under the guise of needing this data for verification or processing the refund. Users may feel pressured to enter this information quickly, disregarding any doubts they may have about the legitimacy of the request. They may also encounter fake download buttons or installation prompts, reinforcing the deceptive nature of these scam websites.

Once victims unwittingly submit their credentials, they immediately become vulnerable to identity theft and financial fraud. For instance, if a victim from Delhi provides their UPI details, the scammers can swiftly transfer funds out of their bank accounts without their consent. In true instances, reports have indicated that some individuals have lost upwards of ₹1 crore due to such scams. The stolen data can also be used for more extensive fraudulent activities, including opening unauthorized bank accounts or applying for loans in the victim’s name. Victims might not realize they've been scammed until they notice unauthorized transactions or receive alerts from their banks. Many victims report feelings of shame and confusion, often reluctant to come forward due to concerns about being judged or blamed for their misfortune.

In recent years, the impact of scams like cloned income tax portal credential theft has escalated dramatically across India, leading to substantial financial losses. According to the Ministry of Home Affairs (MHA), scams of this nature have contributed to a staggering loss of over ₹5,000 crore in the past year alone. Organizations such as the Reserve Bank of India (RBI) and the Computer Emergency Response Team (CERT-In) have issued multiple advisories warning the public about these types of frauds, emphasizing the need for caution in digital transactions. Furthermore, with the rise of digital payment systems like UPI, the risk of fraud has increased, making it even more crucial for individuals to remain vigilant about their online activities. By understanding the methods used in these scams, individuals can better protect themselves from falling victim to such schemes.

To distinguish these scams from legitimate communications, it is vital to scrutinize the website URL carefully. A genuine Income Tax portal will always have a verified and secure URL, typically including '.gov.in'. Additionally, official communication will not request sensitive information such as your full PAN or Aadhaar number via SMS or email. Common red flags include poor grammar or unusual formatting in messages, as these are often signs of illegitimate attempts. Moreover, if a communication is urging you to download software or click on unknown links, it is essential to take a step back and verify the source. Always prefer to check official websites directly instead of following links from messages. Remember, tax-related communications should come from established and verifiable sources, and you should reach out to your bank or the cybercrime helpline if anything seems off.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Cloned Income Tax Portal Credential Theft Target?

General public across India

Red Flags — How to Identify Cloned Income Tax Portal Credential Theft

• Web address [ADDRESS_REDACTED]
• Requests for full PAN, Aadhaar, UPI, or netbanking info
• Fake download buttons or APK install prompts
• Unusual grammar, fonts, or missing contact info

What To Do If You Encounter Cloned Income Tax Portal Credential Theft

1. Report the scam immediately by calling the cybercrime helpline at 1930 or visiting cybercrime.gov.in.
2. Do not engage with the scammers or provide any requested personal information.
3. Immediately contact your bank's customer service, such as SBI at 1800-11-1109 or HDFC at 1800-202-6161, to secure your accounts.
4. Change your passwords for all online accounts, especially those linked to banking or financial transactions.
5. Enable two-factor authentication on your financial accounts to add an extra layer of security.
6. Monitor your bank statements and transaction history closely for any unauthorized activity.

How to Report Cloned Income Tax Portal Credential Theft in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a UPI scam?

Immediately report the incident to your bank's customer service and also alert the cybercrime helpline at 1930.

How can I identify the cloned income tax portal scam?

Look for red flags such as poor grammar, unusual website URLs, and requests for sensitive information that you would not normally provide.

How do I report this type of scam in India?

Report the scam by calling 1930 or by visiting cybercrime.gov.in to file your complaint and seek assistance.

How can I recover money or protect my accounts after this scam?

Contact your bank immediately to secure accounts, and change passwords. Moreover, monitor your transactions for unauthorized activities.

A plain-language breakdown based on 100 real reported scams of this type.

Related Scams in India

• AI Deepfake & Synthetic Document Scams
• AI Deepfake Bank Alert Scams
• AI Deepfake CEO Fraud (BEC Scam)
• AI Deepfake Exchange Impersonation
• AI Deepfake Executive Authorization Scam

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.