Fake Assessment Notice & Demand Order Scam
Verdict: Suspicious | Risk Score: 8/10 | Severity: high
Category: UPI, Phishing, Government Impersonation
How Fake Assessment Notice & Demand Order Scam Works
Overview: Cybercriminals are sending out fraudulent emails and messages that appear to be official assessment orders from the Income Tax Department for the latest financial year. These mostly target individuals and small businesses during assessment periods. The emails exploit official-looking formatting and language to create a sense of urgency, often instructing the recipient to click on links or attachments to 'view order' or pay a supposed demand. If a victim complies, they're exposed to malware or led to phishing sites that steal sensitive financial information, potentially resulting in heavy monetary loss. How It Works: 1. Victims get an email titled “Assessment Year 2025–26 Assessment Order” or similar, sometimes with a forged department logo. 2. The email urges viewing of a demand notice via a link or PDF attachment. 3. Clicking leads either to a phishing site that copies government portals or downloads malware onto devices. 4. Victims may be asked to 'pay outstanding tax' or submit additional personal data, sometimes through fake payment gateways. 5. Scammers harvest the information or trick the victim into making false payments. India Angle: Attackers tend to focus on business owners, professionals, and older taxpayers across India’s metros and industrial corridors. The emails are drafted in English and Hindi, using region-specific language to boost credibility. They also mimic real department notifications issued during assessment deadlines, making them highly believable. Real Examples: - "Assessment Order: Action Needed. Please click link to download your tax order for the year 2025–26." - "You have a pending tax amount due—access your order at http://tax-order-incometax.com" - "Official Income Tax Department: See attachment for your critical notice." Red Flags: - Notice of assessment sent from a non-gov.in email address - [ADDRESS_REDACTED] - Instructions to pay via unknown payment links or gateways - Mismatched sender address [ADDRESS_REDACTED] Protective Measures: - Check the sender’s email domain—official communication comes only from @incometax.gov.in - Never open links or attachments from suspicious emails - Compare any assessment messages with your tax account on the official government portal - Forward dubious notices to [UPI_REDACTED].gov.in and report via 1930 If Victimised: - Disconnect your device from the internet - Run a full antivirus scan and reset all banking passwords - Contact your bank to block payment cards if financial data is shared - File a complaint at cybercrime.gov.in and 1930 Related Scams: - Fake GST demand notices - Impersonation of other government departments regarding fines - Utility bill assessment frauds
How This Scam Works — Detailed Explanation
Cybercriminals are increasingly using sophisticated tactics to target individuals and small businesses with scams. One such method involves sending out fake assessment notice emails and messages, falsely claiming to be from the Income Tax Department. They typically acquire personal information through various means, including data breaches and social media platforms where individuals share financial concerns. During assessment periods, these emails peak in circulation as people are more attentive to their tax obligations. The scammers often mask their identities, using spoofed email addresses or phone numbers that seem credible at first glance. For example, a message might appear to come from as legitimate as '@incometax.gov.in', but meticulous verification will reveal inconsistencies.
To entice victims, these scammers deploy psychological tactics that evoke urgency and fear. The communications are crafted to mirror official templates, complete with legal jargon and authoritative tones. For instance, typical phrases might include urgent demands to 'Resolve your outstanding tax notice immediately' or 'Failure to comply may result in penalties.' These messages often include carefully designed links that, once clicked, either lead to malicious websites or trigger the download of harmful attachments. This exploitation of urgency and official-like presentation lays the groundwork for many individuals unwittingly clicking through to their financial ruin.
Once victims engage with the scam, the process typically unfolds with alarming speed. A recipient who clicks a link might be directed to a visually appealing but fake online payment gateway. Users might then be instructed to complete payments through unconventional methods, like UPI transactions that bypass traditional banking security. Real victims have reported losing amounts ranging from ₹10,000 to ₹50,000 in these scams, and the emotional toll often far exceeds the financial losses. For instance, businesses may falsely attribute their sudden financial downturn to genuine tax issues only to discover that they fell victim to this scam.
The impact of this scam is telling; tens of crores are reportedly lost in scams of this nature, largely within the small business sector. According to a recent advisory from CERT-In, these scams exploit vulnerabilities in digital communication due to their increasing reliance on technologies like UPI and Aadhaar. In 2022 alone, nearly ₹300 crore was siphoned off through various cyber frauds in India. The Ministry of Home Affairs and the Reserve Bank of India continue to issue countermeasures, yet the sheer volume of scams highlights the ongoing vulnerability of the latter segments of the population. Victims often face hurdles when attempting to recover lost funds, further exacerbating their plight and growing disillusionment with digital payment systems.
To mitigate such dangers, it’s crucial to differentiate these scams from legitimate communications. Official emails from the Income Tax Department would never contain attachments in suspicious formats or direct recipients to third-party payment gateways. Instead, they would use authenticated channel references and secure communications for any sensitive transactions. Especially during tax season, scrutinizing every detail will help individuals identify mismatches from typical government communication protocols. It is vital to remember that if an unexpected email demands urgent payment or personal information, it is a strong indicator of a potential scam. At the end of the day, knowledge is power: the more aware you are of these tactics, the better you can defend against them.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Fake Assessment Notice & Demand Order Scam Target?
General public across India
Red Flags — How to Identify Fake Assessment Notice & Demand Order Scam
- Assessment order emails not from @incometax.gov.in
- Attachments in suspicious file formats
- Instruction to pay through unusual online gateways
- Urgent messages not previously expected
What To Do If You Encounter Fake Assessment Notice & Demand Order Scam
- Report the incident immediately by calling the cybercrime helpline at 1930 or visiting cybercrime.gov.in.
- Do not click on any links or download attachments from the suspicious email.
- Confirm with your bank or financial institution via their helpline (SBI 1800-11-1109, HDFC 1800-202-6161) regarding any payments.
- Block the sender of the scam email and adjust your email security settings to filter out suspicious communications.
- Notify the Income Tax Department about the potential scam via their official communication channels.
- Monitor your bank transactions closely for any unauthorized or unusual activity.
How to Report Fake Assessment Notice & Demand Order Scam in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my Aadhaar number after receiving a fraudulent assessment notice?
- Immediately contact the UIDAI helpline at 1947 to report the misuse and follow their guidelines for securing your Aadhaar number.
- How can I identify the Fake Assessment Notice & Demand Order Scam?
- Check the email address to ensure it ends in '@incometax.gov.in' and be cautious of unusual attachments or payment demands.
- How do I report this type of scam in India?
- Report the scam to the cybercrime helpline by dialing 1930 or visiting cybercrime.gov.in, as well as to your bank for fraud reporting.
- What steps can I take to recover money lost in this scam?
- Contact your bank immediately; they may assist in freezing your accounts or reversing fraudulent transactions if reported quickly.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.