Fake Income Tax Notice Phishing Email Scam

नकली आयकर नोटिस फिशिंग ईमेल घोटाला

INDIA — By BharatSecure Threat Intelligence Team ·

Verdict: Dangerous | Risk Score: 9/10 | Severity: MEDIUM

Category: Government, Phishing

How Fake Income Tax Notice Phishing Email Scam Works

  1. Step 1: Scammers send unsolicited emails, SMS, or calls impersonating Income Tax Department claiming issues like refund pending, ITR incomplete, or PAN to be blocked with threats of penalties
  2. Step 2: Messages create urgency using alarming language to panic victims, including fake links or attachments mimicking the official ITD portal incometax.gov.in
  3. Step 3: Victims click the phishing link and get redirected to a fake website that looks identical to the real e-filing portal
  4. Step 4: The fraudulent site prompts entry of sensitive details like PAN, bank account info, OTPs, passwords, or Aadhaar-linked data
  5. Step 5: Scammers use stolen data for identity theft, unauthorized bank transfers, filing fake ITRs, or further fraud like digital arrest schemes

How This Scam Works — Detailed Explanation

Scammers pretending to be from the Income Tax Department (ITD) send fake emails to Indian taxpayers claiming there is an issue with their tax refund or requiring verification of personal details. These phishing emails look real at first glance, often using intimidating language like “refund stuck” or urgent demands that pressure victims to act quickly. The scammers try to create a sense of fear, urging recipients to click on links or share sensitive information such as OTPs, bank details, or Aadhaar numbers. They may also impersonate official domains, using fake sender addresses similar to official ITD emails but slightly altered.

The attackers often rely on email communication because many taxpayers are less familiar with how official ITD notices reach them, making it easier to trick them. They send these emails unsolicited, targeting random people or those whose contact details they have sourced through data leaks, mobile banking transactions, or even WhatsApp forwards. Once the victim clicks on a malicious link, fake websites mimic the official e-filing portal and steal login credentials, PAN details, or UPI PINs. Some scams escalate by asking for OTPs sent by banks or UPI apps, which they use immediately to empty bank accounts or make unauthorized payments.

Victims typically realize the scam when they see unauthorized transactions in their bank accounts or when their identity is misused for financial fraud. These phishing emails do not have a Document Identification Number (DIN) — a unique number given in every real Income Tax Department notice — and they often come from suspicious email domains that are not @incometax.gov.in. Real tax refund or demand notices only appear on the official e-filing portal (incometax.gov.in), never solely via email or SMS. Unfortunately, victims who share OTPs or bank details lose access to their savings or suffer identity theft, leading to long and stressful recovery processes.

This scam is particularly dangerous in India because so many people rely on mobile banking, UPI apps, and WhatsApp messaging for daily transactions and communication. Scammers exploit this trust and the recipient’s fear of losing refunds or facing penalties. The Income Tax Department has repeatedly warned that they do not ask for confidential details through email or SMS. Being aware of these tricks and verifying notices on official portals is the key to staying safe and not falling victim to these fake Income Tax notices.

Who Does Fake Income Tax Notice Phishing Email Scam Target?

Middle-aged taxpayers (30-60 years) including salaried employees, freelancers, small business owners, and investors awaiting ITR refunds in urban and semi-urban India

Red Flags — How to Identify Fake Income Tax Notice Phishing Email Scam

  • No Document Identification Number (DIN) - official ITD notices always include unique DIN
  • Sender domain not from official @incometax.gov.in - scammers use lookalikes like incometax-gov.in
  • Unsolicited urgent demands for OTPs, bank details, or clicks on refund/PAN links - ITD never asks this via email/SMS
  • Spelling/grammar errors, poor design, unofficial logos, or alarming phrases like refund stuck
  • Notice not appearing on official e-filing portal - real notices only appear on incometax.gov.in dashboard

What To Do If You Encounter Fake Income Tax Notice Phishing Email Scam

  1. Verify any income tax notice only by logging into the official e-filing portal at incometax.gov.in
  2. Never click on email or SMS links asking for refund verification or personal information
  3. Report suspicious emails or messages to the Cyber Crime Portal at cybercrime.gov.in
  4. Call the Income Tax Department helpline at 1930 to confirm any doubt about notices
  5. Immediately inform your bank and block your accounts if you have shared OTPs or bank details

How to Report Fake Income Tax Notice Phishing Email Scam in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Fake Income Tax Notice Phishing Email Scam?
Dangerous: Fake Income Tax Notice Phishing Email Scam is a confirmed scam in India. Protect yourself from fake ITD phishing emails demanding refund verification. Learn red flags, report at cybercrime.gov.in or call 1930. Stay safe from tax scams.
How does Fake Income Tax Notice Phishing Email Scam work?
Step 1: Scammers send unsolicited emails, SMS, or calls impersonating Income Tax Department claiming issues like refund pending, ITR incomplete, or PAN to be blocked with threats of penalties Step 2: Messages create urgency using alarming language to panic victims, including fake links or attachments mimicking the official ITD portal incometax.gov.in Step 3: Victims click the phishing link and get redirected to a fake website that looks identical to the real e-filing portal Step 4: The fraudulent site prompts entry of sensitive details like PAN, bank account info, OTPs, passwords, or Aadhaar-linked data Step 5: Scammers use stolen data for identity theft, unauthorized bank transfers, filing fake ITRs, or further fraud like digital arrest schemes
How to protect yourself from Fake Income Tax Notice Phishing Email Scam?
Verify any income tax notice only by logging into the official e-filing portal at incometax.gov.in Never click on email or SMS links asking for refund verification or personal information Report suspicious emails or messages to the Cyber Crime Portal at cybercrime.gov.in Call the Income Tax Department helpline at 1930 to confirm any doubt about notices
How to report Fake Income Tax Notice Phishing Email Scam in India?
Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.