Spoofed Income Tax Official Impersonation

INDIA — By BharatSecure Threat Intelligence Team ·

Suspicious Risk: 8/10 Severity: High BharatSecure Threat Intelligence

Category: UPI, WhatsApp, OTP

Verdict Summary

Spoofed Income Tax Official Impersonation shows strong scam indicators common in fraud targeting Indian users. Do not share OTPs, passwords, or payments — verify the source independently.

Risk score: 8/10 · Severity: High · Verdict: Suspicious

Scam Intelligence: Spoofed Income Tax Official Impersonation

Proprietary signals from BharatSecure's scam-tracking database.

Top affected regionsIndia, elderly, general, urban
Last reportedMay 06, 2026

How Spoofed Income Tax Official Impersonation Works

Overview: Many Indians worry about missing important government communications—scammers take full advantage by impersonating Income Tax Department officers. They contact citizens via calls, emails, or WhatsApp, threatening penalties or urgent action to "unblock" refunds. These scams are particularly dangerous, as criminals can talk victims into handing over everything from OTPs to screenshots of bank accounts. How It Works: 1. Victims receive a call, WhatsApp, or email from a person claiming to be an Income Tax official. 2. The scammer uses official-sounding language, maybe even a forged ID card photo or departmental signature. 3. They claim your "refund is on hold for urgent verification," or "there is a compliance issue." 4. You may be asked to send screenshots of your e-Filing portal, share OTPs, or provide bank app details for quick processing. 5. Pressure tactics include threats of penalties, prosecution, or immediate loss of refunds. India Angle: Such scams have been widely reported in cities like Mumbai, Delhi, Bengaluru, and across North India. English and Hindi are primarily used, but fraudsters increasingly employ regional languages. Senior citizens and those uncomfortable with technology are at high risk. Real Examples: - Caller in an official tone: "Sir, this is Rajesh Kumar from Income Tax Department. Your PAN is flagged—kindly share the last six digits of your bank account and OTP to resolve the issue now." - WhatsApp: "As a government officer, I request a screenshot of your refund dashboard for verification." Red Flags: - Unsolicited calls or WhatsApp from self-proclaimed officials. - Use of personal phone numbers, not government hotlines. - Demands for OTPs or screenshots. - Official email address[ADDRESS_REDACTED]. [UPI_REDACTED].com). - Angry or rude tone to pressure quick compliance. Protective Measures: - Always verify the caller’s credentials using official numbers from incometax.gov.in. - Never share OTPs, passwords, or screenshots. - If in doubt, hang up and call the official Income Tax helpline yourself. If Victimised: - Report the caller’s number to cybercrime.gov.in. - Call 1930, your bank, and notify the Income Tax Department. - Change your online banking and e-Filing passwords immediately. Related Scams: - Digital arrest/extortion calls. - Tech support scam posing as government aid.

How This Scam Works — Detailed Explanation

Scammers have become increasingly adept at targeting individuals by leveraging the fear of missing critical government communications. In India, many citizens are anxious about their income tax filings and refunds, making them prime targets for malicious impersonators. These scammers typically initiate contact via phone calls, WhatsApp messages, or emails, presenting themselves as representatives of the Income Tax Department. They often use official-sounding language and fake caller IDs to create a sense of authenticity, falsely believing that citizens must be wary of misleading communication. The impersonators can sometimes produce personal information, including names or PAN numbers, enhancing their credibility and instilling a false sense of security in potential victims.

To manipulate their targets effectively, these imposters utilize high-pressure tactics that play on the emotions of urgency and fear. They might threaten penalties or suggest that immediate action is required to 'unblock' tax refunds. By creating a fabricated sense of risk – such as impending legal action or financial penalties for untruthful declarations – they prompt victims into acting quickly without thinking clearly. As part of their strategy, they request personal information like OTPs and banking details, often masked under the guise of 'verification'. These con artists are skilled at building rapport, often using friendly conversation before escalating to threats, making it hard for victims to see through their deceit.

Once the scammer has successfully engaged with their target, the process typically unfolds in several stages. Initially, the target receives a call or message detailing an 'issue' with their income tax filings. They might receive a threat of immediate action if they do not respond, prompting a level of panic. Victims are often coerced into sharing OTPs for transactions that do not exist, or they may be persuaded to download remote access software, relinquishing control over their devices. In many instances, individuals have reported losing substantial amounts to these scams, as money is drained from their bank accounts via UPI transactions, often processed through established banks like SBI and HDFC, using the victim’s own details against them.

The scale of damage caused by spoofy income tax scams is significant. Reports estimate that scams related to tax department impersonation have resulted in losses exceeding ₹300 crore in recent years, underscoring the severity of this issue within India. According to advisories from CERT-In, these types of fraud are categorized as high-risk and require immediate prevention measures. With increased vigilance from regulatory bodies like the Reserve Bank of India and the Ministry of Home Affairs, ongoing public awareness campaigns are crucial in combating these scams. Consumers are urged to stay informed about the latest scam alerts and guidelines issued by financial institutions and CERT-In, which provide necessary safeguards against such impersonations.

In distinguishing between legitimate communications and potential scams, there are several red flags to consider. A credible officer from the Income Tax Department will never ask for sensitive information like OTPs or request bank details via phone, email, or WhatsApp. Official communications can be verified through recognized government websites or helplines, adding an additional layer of security. If you receive unsolicited calls or emails demanding urgent action regarding your tax status, particularly from odd email addresses or unfamiliar numbers, it is crucial to remain calm and skeptical. Always cross-check such requests through official channels to ensure that your personal and financial information is safeguarded from fraudulent entities.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Spoofed Income Tax Official Impersonation Target?

General public across India

Red Flags — How to Identify Spoofed Income Tax Official Impersonation

  • Unsolicited calls from 'income tax officials'
  • Requests for OTPs, banking screenshots, or remote access
  • Email/WhatsApp from odd address[ADDRESS_REDACTED]
  • Pressure including threats or urgent timelines

What To Do If You Encounter Spoofed Income Tax Official Impersonation

  1. Report the incident immediately by calling the Cybercrime Helpline at 1930 or visit cybercrime.gov.in.
  2. Do not share any personal information, including OTPs, bank details, or screenshots with unknown callers.
  3. Instruct your bank to monitor your account for any unauthorized transactions or irregularities.
  4. Change your banking passwords and enable additional security measures like two-factor authentication.
  5. Educate your family and friends about the dangers of these scams to help protect them as well.
  6. File a formal complaint with your local police station or through the nearest cybercrime reporting center.

How to Report Spoofed Income Tax Official Impersonation in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a UPI scam?
If you have shared your OTP, immediately contact your bank's helpline (SBI: 1800-11-1109, HDFC: 1800-202-6161) to report the incident. They can assist you in securing your account.
How can I identify if a communication is a scam?
Legitimate government communications will not request sensitive information over the phone. If you feel pressured or notice odd email addresses, it’s likely a scam.
How can I report this type of scam in India?
You can report this scam by calling the Cybercrime Helpline at 1930 or visiting cybercrime.gov.in. You can also report it to your bank directly.
What steps should I take to recover money or protect my accounts after this scam?
Contact your bank immediately to block your card or UPI access, and report the scam to the police. Change your passwords and enable alerts for further protection.
🛡️

How This Scam Works — BharatSecure AI

Spreading fast

A plain-language breakdown based on 100 real reported scams of this type.

How they reach you Observed primary contact occurs via unsolicited phone calls, WhatsApp/SMS messages, and social media/dating platforms, where fraudsters impersonate bank officials, customer support, government agents,
How they gain your trust Trust is reportedly established through impersonation of authority (banks, RBI, PM-Kisan, army officers) or emotional bonding (love-bombing, family/friend impersonation), often reinforced by AI deepfa
How they take your money UPI is the dominant rail across all records, primarily via disguised 'collect/request money' notifications tricking victims into entering their PIN, d
Who they target Documented targets span the general population but concentrate on the elderly and digitally inexperienced (often via caregiver dependency), urban professionals, students, homemakers, small business ow
How they manipulate you
  • authority bias (impersonating banks/government/officials)
  • urgency and scarcity (account frozen, limited-time offer, emergency)
  • trust/reciprocity exploitation (familiar voices, love-bombing, small initial payouts)
Warning signs
  • Receiving a UPI 'collect/request money' notification and being asked to enter your PIN to 'receive' funds (PIN is never needed to receive money)
  • Unsolicited calls/messages claiming account freeze, KYC expiry, or suspicious transaction, pressuring you to share OTP, UPI PIN, or click a link
  • Requests to install remote-access/screen-sharing apps (AnyDesk, TeamViewer) for 'support' or 'refund' assistance
  • Mismatched or misleading recipient names/VPAs (e.g., 'Verified Merchant', 'Bank Refund Dept') or slightly altered UPI IDs
  • Pressure via emotional urgency, deepfake voice/video of familiar people, forged payment screenshots, or too-good-to-be-true offers (free recharge, prizes, grants, loans, high-return investments)

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.